This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
File:                     jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json)
Hash identifier:          X+qx/H92Cuviiyo4y7yELoLTsfxZ0niTjUZCC86QSes=
Subject key identifier:   79:96:63:06:8D:76:9A:1F:BF:FF:A9:75:B2:73:77:31:ED:4E:08:54
Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
Certificate issuer:       /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Certificate serial:       0AA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
Manifest number:          0A97
Signing time:             Sat 24 Jan 2026 19:03:07 +0000
Manifest this update:     Sat 24 Jan 2026 19:03:07 +0000
Manifest next update:     Sat 31 Jan 2026 19:03:07 +0000
Files and hashes:         1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: 15dLm2n5kHk3vHZ/L+ruZAerN7ZRegHyzfsgPZu3QrY=)
                          2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
                          rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2725 (0xaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
        Validity
            Not Before: Jan 24 19:03:07 2026 GMT
            Not After : Jan 31 19:03:07 2026 GMT
        Subject: CN=6975176b-1677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:3f:5e:52:4e:22:0f:42:ac:8a:e4:4f:aa:
                    3e:96:53:55:0d:48:7a:c2:aa:9e:96:42:66:75:6d:
                    6e:ae:78:d3:4b:5b:72:03:a3:63:f3:dc:c1:73:de:
                    80:d6:1e:2b:7f:1e:f8:ae:2b:d0:50:f2:ad:0e:1a:
                    4c:35:74:25:35:39:94:af:aa:a7:be:04:db:32:ab:
                    da:f6:a2:88:4b:56:06:81:61:3e:08:21:46:c5:26:
                    54:ca:36:23:f4:a0:67:0f:8c:7a:fa:00:a6:b0:de:
                    72:bb:26:3e:be:3e:4c:b9:a4:42:a8:51:36:5e:a7:
                    15:76:3c:21:03:c6:0f:d5:fb:cd:df:7d:1c:36:20:
                    0e:26:05:ee:f1:e2:a7:3b:2b:d9:2c:85:e5:36:a8:
                    2e:e2:7c:de:57:70:28:0c:83:9b:52:d9:ca:a7:cc:
                    7e:cc:de:3d:d2:11:e6:ef:76:f1:92:d3:0d:10:f1:
                    35:6e:10:c1:34:87:49:14:37:be:b0:47:f6:f7:65:
                    a8:7f:b7:92:d8:0d:36:95:18:78:a6:3e:c0:fe:03:
                    4c:35:f1:6e:f9:da:b4:cb:13:66:ab:bc:d3:3c:ad:
                    79:d2:ed:63:6f:bb:f0:85:1d:3b:74:93:c3:70:24:
                    f0:8d:0e:b6:4a:1e:f6:d2:6f:e8:c4:a8:3c:3b:25:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:96:63:06:8D:76:9A:1F:BF:FF:A9:75:B2:73:77:31:ED:4E:08:54
            X509v3 Authority Key Identifier:
                keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:ab:d7:0f:16:6b:9c:1d:14:d5:58:cd:ba:c3:6c:4a:12:
         da:47:e8:65:ad:f2:ac:3f:fc:72:3f:32:86:dc:0e:6c:af:15:
         51:b5:31:87:5d:8a:d0:85:bc:50:f2:2f:2d:b5:31:35:51:d1:
         47:91:cf:8f:98:9d:49:83:2d:94:58:f6:76:94:4f:7f:86:db:
         fb:3d:24:51:8b:2a:c8:76:ed:2a:aa:fe:2b:57:70:6c:18:f3:
         b8:e0:fc:ef:75:e5:4d:d8:3e:a3:0f:86:70:6a:fd:2b:45:16:
         e3:d4:0b:c6:48:0d:ca:23:f5:1e:aa:ff:88:ff:c1:46:64:2e:
         ea:88:bc:12:92:9f:19:a8:aa:a3:25:fb:a4:47:4b:95:bf:fd:
         0b:6b:ec:a9:89:be:9a:d7:ce:27:4c:98:19:6d:ae:20:5e:28:
         9a:4f:48:05:bb:ce:f8:82:8f:7a:8f:b7:9a:50:06:60:ac:83:
         e1:7e:66:9b:fd:a3:4b:ca:7c:f5:41:5e:24:27:50:e3:d6:c9:
         73:71:3e:51:17:a2:3d:dd:cb:79:45:42:3a:e1:d7:92:0b:21:
         22:de:64:4d:4f:43:94:a9:99:fc:f2:f7:0a:b0:3d:8b:94:a5:
         b2:5b:3a:6e:c2:63:88:4d:b6:6f:b3:35:4d:49:a8:f0:6f:d6:
         a0:0a:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:58:11 2026 by rpki-client