This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
File:                     rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json)
Hash identifier:          sHMOrMts8YWido+mh5RdCqBqwv0zPhvKkZLSYRJSkKI=
Subject key identifier:   43:A3:FA:D6:0D:9B:14:D8:C7:5A:EC:ED:29:77:0E:6F:DA:B3:FF:44
Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6
Certificate issuer:       /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
Manifest number:          087C
Signing time:             Sat 24 Jan 2026 20:01:00 +0000
Manifest this update:     Sat 24 Jan 2026 20:01:00 +0000
Manifest next update:     Sat 31 Jan 2026 20:01:00 +0000
Files and hashes:         1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: FKvJQ7UFgbZdY7HYyqxQb32uYXctSyQLQ4XepC8B7Cw=)
                          2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: sI83SKQ1KIXzAI6k70Vt5zWHUlxvGed2ohcbiQweEnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl
                          rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6
        Validity
            Not Before: Jan 24 20:01:00 2026 GMT
            Not After : Jan 31 20:01:00 2026 GMT
        Subject: CN=697524fc-3313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:76:ed:30:00:be:28:dd:99:fa:50:a4:fa:
                    9d:d5:3e:98:8d:67:67:cb:35:33:7c:37:ae:21:44:
                    0c:a9:ca:ae:5e:b9:4f:2d:e8:7a:55:05:dc:43:4f:
                    84:37:e9:83:28:30:37:46:5a:b4:7b:76:57:80:68:
                    36:3f:0f:09:99:16:57:3b:17:85:73:19:9c:99:75:
                    33:fe:1b:ec:ef:95:32:71:20:5c:25:69:15:21:6c:
                    21:d7:04:79:a6:6e:42:d9:4f:be:2d:b8:2b:09:71:
                    27:e2:e8:aa:de:66:20:6e:b2:ff:1b:5d:17:06:7c:
                    f7:49:70:fc:5d:88:6c:20:50:69:cb:00:b0:74:63:
                    0e:ef:27:77:82:c9:42:cc:2b:72:a8:98:4f:12:fb:
                    86:1e:fd:1b:03:4d:f7:c9:d9:52:43:bc:a1:a1:d0:
                    71:4a:17:a9:20:02:f5:2b:70:c9:60:62:f1:50:20:
                    c8:8b:47:b5:fa:fa:c5:3b:9a:fa:33:48:4e:65:67:
                    a8:d9:6c:3f:ef:2e:c7:07:68:4c:ee:bf:d6:81:a5:
                    02:1d:8f:db:ad:c3:b6:6a:c6:7c:90:02:1b:30:6c:
                    0e:f5:df:99:e4:6e:1f:83:aa:31:6b:61:c1:6e:6d:
                    f8:db:d6:de:0f:fd:82:e4:7c:fa:49:1d:7f:d6:1e:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:FA:D6:0D:9B:14:D8:C7:5A:EC:ED:29:77:0E:6F:DA:B3:FF:44
            X509v3 Authority Key Identifier:
                keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:43:0b:22:fe:25:ee:2e:53:d8:15:61:d7:27:b3:a9:8e:
         29:c9:33:1e:6a:b1:ae:dd:f5:f0:fe:0a:98:6d:56:30:29:40:
         42:14:99:9d:47:44:19:b2:48:d3:13:11:c3:38:38:c6:36:61:
         e0:ad:4d:b2:80:c7:e5:04:a0:ef:a9:5c:00:00:dc:39:4a:2c:
         8b:ac:bb:c3:3a:1f:72:61:08:58:d5:a7:5c:ab:e1:41:e2:7f:
         b1:8f:21:0c:da:2c:bb:0b:a1:46:81:61:c3:da:7e:60:6b:6f:
         bc:ed:72:37:a5:37:b6:3e:fe:ad:20:1b:74:15:22:a3:a7:80:
         fd:f6:72:a6:6f:81:bb:4a:83:2d:74:f5:b4:d3:44:85:64:f6:
         50:8a:6b:94:c0:38:0d:33:e4:a2:23:7f:26:a1:64:97:f0:0b:
         ef:2a:ae:65:96:26:96:f5:4c:24:de:cf:c9:bc:2e:5c:0a:6f:
         a1:cb:c8:af:7b:f1:f1:b9:9f:39:e7:95:55:68:53:87:3d:17:
         31:d6:06:e0:56:fc:52:96:44:5e:e0:64:c5:c2:45:4a:12:71:
         81:c3:8e:5b:49:2e:4d:b9:74:96:ca:0a:0f:0c:12:ee:bc:af:
         1b:e5:d9:9c:57:1e:b8:16:09:7d:23:f7:5f:7e:30:ad:6d:53:
         18:10:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:14 2026 by rpki-client