This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          K2C4YBTDNLkFkl//OY82JGsyWtv8EBJEmGMe+48wu2M=
Subject key identifier:   45:53:08:85:C6:FF:F0:54:58:B3:52:9C:54:F7:B8:01:6A:88:52:39
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          F8
Signing time:             Sun 25 Jan 2026 04:27:38 +0000
Manifest this update:     Sun 25 Jan 2026 04:27:38 +0000
Manifest next update:     Sun 01 Feb 2026 04:27:38 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: Gm+ThfJBWU2+lzeiDhCGqHQThmaGqtUhXHfwVr2V70g=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Jan 25 04:27:38 2026 GMT
            Not After : Feb  1 04:27:38 2026 GMT
        Subject: CN=69759bba-2961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:51:a0:c5:b6:de:55:7e:ff:0a:28:f2:4f:
                    fd:ad:b7:36:4e:03:11:bc:dc:a4:7c:c4:27:76:bd:
                    85:d2:73:bd:b8:77:8c:73:c9:9d:14:8c:6b:8c:c8:
                    83:c3:73:2d:f5:13:b8:16:5e:bd:38:ed:03:57:61:
                    40:83:57:b0:a2:36:fb:53:d1:12:ae:60:c9:ea:6e:
                    f7:ad:eb:23:69:f4:80:40:14:72:bb:8a:17:f5:40:
                    fc:1b:0f:a9:cc:10:22:70:05:04:49:ad:30:9c:96:
                    85:4f:dc:43:54:ac:7c:c3:35:26:4b:04:a5:12:5e:
                    ca:d6:12:02:fd:c1:fd:6c:d2:87:55:cf:e2:5d:16:
                    e4:b5:5e:13:e4:85:f6:35:d7:1a:99:ab:94:d6:7c:
                    19:dd:d5:7f:a1:2c:49:02:a3:13:e1:75:98:fe:fa:
                    0b:9a:d2:81:fd:39:91:da:0e:60:90:5d:2e:d2:f8:
                    08:9d:ed:64:8e:5d:52:1f:e0:91:82:25:07:fa:ba:
                    cd:df:d6:6b:6d:b2:c5:2e:03:a3:7a:8a:9d:b4:38:
                    e3:ff:c7:d7:5c:84:50:62:e4:e9:c4:ae:c8:83:5d:
                    33:21:e9:fa:ef:dc:89:40:6b:e3:06:6a:05:3b:be:
                    e8:16:ec:93:90:66:22:29:ea:13:32:b3:da:82:11:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:08:85:C6:FF:F0:54:58:B3:52:9C:54:F7:B8:01:6A:88:52:39
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:db:e9:2b:e5:7e:fa:52:02:05:78:ee:82:91:56:d5:51:
         4c:ae:c3:e1:6a:28:e5:fd:60:8b:79:a4:16:95:44:e0:bc:65:
         97:9b:3f:99:40:82:2e:06:fc:56:b4:51:02:8e:ff:cc:8e:35:
         ec:dc:a2:52:38:ab:6b:c4:ed:0e:19:52:10:a2:85:c4:df:86:
         0d:95:75:be:b7:07:b1:62:2e:0c:ab:5c:97:35:c9:8a:ea:19:
         2a:44:47:ca:22:7f:f0:80:47:ac:35:9f:20:73:57:92:ed:9d:
         54:ac:bc:77:7b:0e:94:28:73:3e:07:ef:b7:cd:8c:c8:5e:5b:
         ff:ee:3e:70:ee:d3:31:cb:30:bd:5a:5a:6e:a2:7a:be:5d:b1:
         90:70:81:d8:96:07:97:32:d7:3c:b3:34:4b:70:8e:68:50:9b:
         3a:24:dd:94:5a:42:38:3e:e4:8f:65:72:24:25:8f:d9:17:d2:
         d4:61:de:17:5e:80:32:e2:ff:11:95:f8:6b:ca:94:2f:94:23:
         ab:d7:f5:36:43:36:61:dd:8e:29:66:f7:39:65:2d:49:15:2d:
         92:2d:ea:c6:39:ca:ba:81:da:8f:93:42:36:5b:09:1d:c7:4a:
         d1:f0:68:8a:54:e0:92:57:08:e8:18:65:62:86:90:9f:af:3e:
         3c:70:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:20 2026 by rpki-client