This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File:                     4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier:          GOqKKGXjcOdMCRkn4tsNa87XZ2GzgsCtUdlyU4+bIbA=
Subject key identifier:   9C:E4:DF:A8:BD:11:D1:61:F4:5A:C5:6B:58:D6:8E:A3:D0:89:41:2E
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer:       /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number:          01F3
Signing time:             Sun 25 Jan 2026 01:49:30 +0000
Manifest this update:     Sun 25 Jan 2026 01:49:30 +0000
Manifest next update:     Sun 01 Feb 2026 01:49:30 +0000
Files and hashes:         1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: e9rG+w8h2yYwpOjjtIxRJE335mtBTEoE6Bs6z3MstSE=)
                          2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
                          rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
        Validity
            Not Before: Jan 25 01:49:30 2026 GMT
            Not After : Feb  1 01:49:30 2026 GMT
        Subject: CN=697576aa-3aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:3d:91:35:a4:14:5b:17:44:18:17:2d:a9:
                    fd:fb:28:c4:c5:ef:f0:2e:8c:f3:09:25:16:57:01:
                    ed:c0:2f:f7:56:a1:a0:7d:28:34:ec:99:bc:f7:d1:
                    00:d1:1e:0d:29:2c:d8:e2:61:d4:8d:1b:fa:94:bc:
                    c7:f9:53:c4:20:cf:50:d7:b2:ab:01:0b:69:dd:20:
                    ae:92:04:a0:6c:1e:b0:bc:3c:14:68:ae:b4:f4:6e:
                    82:88:e8:54:94:17:d4:62:c9:4d:d4:d4:f8:19:56:
                    ad:85:5e:83:ed:2f:68:56:1d:83:a4:64:2d:b0:c7:
                    31:9b:0d:01:b6:e5:6e:24:95:2d:48:8a:b2:16:e2:
                    ab:e4:74:47:ba:74:2c:de:ed:c9:d9:22:40:68:2f:
                    a5:df:6b:ce:43:7d:4d:a1:85:21:7c:c8:c6:51:54:
                    22:79:7e:79:11:fd:93:2c:0f:e9:75:04:83:88:63:
                    7f:bb:87:b1:57:c4:92:7e:0a:6d:ab:2d:be:c7:0b:
                    25:52:9c:ac:24:6b:30:eb:19:08:0e:4a:3d:9e:74:
                    16:4f:67:8d:69:e0:b0:dd:67:15:6d:e8:18:59:fa:
                    38:34:c0:35:fa:7d:84:24:a5:85:39:57:e4:a2:bc:
                    26:b4:4a:2b:5e:5c:a4:d1:4b:f1:6f:c9:1c:1d:bd:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:DF:A8:BD:11:D1:61:F4:5A:C5:6B:58:D6:8E:A3:D0:89:41:2E
            X509v3 Authority Key Identifier:
                keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6b:f8:3d:e2:34:0b:f6:e3:1f:09:41:67:17:ac:be:1a:0e:
         fe:20:53:c4:4a:3b:2a:46:55:d4:89:5b:bd:f8:e2:f7:7b:3b:
         d9:0d:e3:82:df:bd:8c:b5:da:0e:2c:7a:0a:a5:c4:e1:fb:b7:
         93:92:05:2d:72:93:a8:cd:9c:b0:3f:a7:18:57:8a:0a:83:81:
         ad:ab:86:9e:b3:ef:e9:53:1e:31:2c:e5:41:02:a0:4b:64:49:
         b8:5a:33:8f:1a:59:8c:bf:44:ee:91:09:17:33:76:3b:bb:2f:
         87:2b:94:bb:d7:0c:25:53:34:73:1a:4a:a8:0b:5d:aa:5f:e8:
         82:fd:89:6b:b5:d9:b3:6c:2d:07:7d:7d:f2:98:91:dc:24:37:
         bf:c8:a8:50:2c:6d:6d:56:52:10:3e:dd:17:16:c3:60:26:28:
         73:e0:2c:fa:2c:af:c4:4a:36:2d:57:8f:ac:d9:ac:cf:3b:41:
         ba:3e:4d:85:2c:17:3e:1e:61:0c:0c:b0:64:8c:bc:b8:a3:4e:
         d1:ab:c7:10:30:ea:0c:7a:74:58:50:36:a2:a7:77:78:52:95:
         86:41:5d:1f:d7:f7:de:ad:a8:37:11:51:b6:6a:0d:cc:44:e1:
         57:d6:df:1b:8d:2d:53:9b:97:b8:21:33:99:17:d0:ba:4c:72:
         ce:1e:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:13 2026 by rpki-client