This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
File:                     dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json)
Hash identifier:          A3qUF1TAyQp2YXhuGgRSeMq+BwqfIlGcgwjtqQEtKAw=
Subject key identifier:   22:9E:14:27:79:3A:1A:A5:99:E0:25:A6:2F:3F:B3:3F:17:A3:A3:C4
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Certificate issuer:       /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial:       06C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
Manifest number:          06BD
Signing time:             Sat 24 Jan 2026 21:32:06 +0000
Manifest this update:     Sat 24 Jan 2026 21:32:05 +0000
Manifest next update:     Sat 31 Jan 2026 21:32:05 +0000
Files and hashes:         1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: Db0GLWLSr7sZOmX225Rr/xDMW0p67J30ib0pAXt2F24=)
                          2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
                          rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
        Validity
            Not Before: Jan 24 21:32:05 2026 GMT
            Not After : Jan 31 21:32:05 2026 GMT
        Subject: CN=69753a56-5725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:b2:4c:46:91:61:d2:4f:d2:79:45:6b:47:
                    ca:ce:60:f1:62:1b:0c:4c:32:5a:a6:a3:5f:93:3e:
                    77:8f:ca:09:4b:5c:26:f0:e6:b5:b0:b2:9e:d6:bb:
                    59:81:15:c3:82:24:19:63:1d:7a:6b:5f:6c:2c:0f:
                    50:b2:79:d1:9b:27:3b:14:0c:59:d5:fb:11:4b:90:
                    72:e3:69:7d:c6:24:68:05:5a:81:b0:4e:6e:f1:32:
                    b6:40:63:95:90:09:79:f7:45:3a:0c:90:30:ab:a9:
                    5b:be:e6:dc:a8:bb:27:13:2c:ca:e1:c0:86:33:6b:
                    ed:a2:65:8e:a4:df:cb:39:01:9b:8f:3b:00:92:57:
                    5c:a1:82:7f:e3:5c:ce:c3:0c:8f:12:3f:3b:ba:18:
                    11:ba:d6:b9:fd:7b:ea:fa:f0:86:1c:bc:91:b1:83:
                    8d:c3:50:3c:7d:ef:cd:8c:12:b9:81:67:e7:6d:0d:
                    06:0b:ea:d9:29:04:79:75:63:81:2c:76:83:e7:72:
                    e3:75:af:71:3f:d2:02:89:ad:a6:9a:2e:2b:95:cf:
                    01:de:b8:0f:7a:4b:9f:0d:4f:d6:21:12:3b:da:89:
                    78:83:75:97:3b:bf:68:72:75:29:27:23:80:d8:c4:
                    65:00:26:18:f7:b5:b0:6a:81:89:2d:62:63:58:5c:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:14:27:79:3A:1A:A5:99:E0:25:A6:2F:3F:B3:3F:17:A3:A3:C4
            X509v3 Authority Key Identifier:
                keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:eb:72:a3:5b:e4:f8:e6:93:5e:e3:7e:c7:6e:e5:1c:27:
         3a:05:ab:83:21:50:e0:3f:d1:33:47:ef:08:40:f7:03:f7:50:
         e9:20:d8:ac:04:e5:0a:d5:9b:6e:30:93:e7:a4:96:6a:3b:74:
         fc:5a:3e:21:5f:a0:46:23:25:0b:a8:f0:f5:77:2b:99:ea:e3:
         28:0d:7c:52:ae:cb:d5:b9:ea:bf:e4:5b:a8:67:d1:dd:33:05:
         11:1b:0f:e8:c3:2d:59:63:da:82:39:3e:d6:a9:b8:26:6c:c6:
         ed:83:b1:25:30:db:37:d2:8e:78:52:9c:61:60:1c:2e:9a:7f:
         6d:04:3c:fd:54:ef:b9:71:69:fb:4f:f5:50:5a:f0:fe:66:7e:
         e3:8f:51:4b:93:76:a6:cf:f0:4e:91:41:ea:1c:80:e8:44:92:
         8e:e2:0b:ab:ed:0a:b6:82:35:b4:9d:8e:9b:61:77:5c:1a:9e:
         79:d3:5d:c4:c5:80:1f:84:a8:1e:60:d7:4d:48:c5:48:ee:07:
         4b:5e:9d:e1:0c:30:22:15:c3:fd:7a:51:de:57:d9:75:d4:5f:
         25:a1:ee:55:05:9c:6c:f3:e3:03:c8:f0:0d:cd:01:39:02:11:
         17:de:35:86:2c:0a:80:79:9a:0e:c4:25:2d:d7:5a:31:80:dc:
         2e:cd:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:47 2026 by rpki-client