This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File:                     CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier:          ZeFaI8ahA2gRofteVIroMRohV75/Qh25yDAhZJM1UCk=
Subject key identifier:   3C:D0:F2:5C:D0:35:C2:32:E1:68:78:D4:11:B5:AA:9E:2D:7A:2C:C2
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer:       /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial:       0408
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number:          0402
Signing time:             Sat 24 Jan 2026 23:41:06 +0000
Manifest this update:     Sat 24 Jan 2026 23:41:05 +0000
Manifest next update:     Sat 31 Jan 2026 23:41:05 +0000
Files and hashes:         1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: b+nk1+pJjIxSMfU0/fq8/ewInhuMtn/QqQ/wv7qX55g=)
                          2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
        Validity
            Not Before: Jan 24 23:41:05 2026 GMT
            Not After : Jan 31 23:41:05 2026 GMT
        Subject: CN=69755892-e078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:fe:e4:93:96:da:63:d0:96:c4:ef:28:0a:
                    3d:67:0b:96:a0:af:98:db:fe:a5:f2:70:6c:96:7f:
                    e5:20:95:1c:eb:bd:ce:9f:fe:64:f2:c4:80:30:ac:
                    c3:f9:f2:ed:6b:bd:1c:74:9e:10:99:09:3f:e4:6c:
                    76:fc:b3:97:9a:94:fe:57:6d:4d:60:12:a9:25:4b:
                    9d:84:af:e7:43:dd:47:b7:ec:27:c7:13:85:b1:d7:
                    87:da:74:ca:75:50:06:0a:6a:b8:9b:37:0e:4c:51:
                    1c:fa:66:40:a9:66:48:0d:7f:78:2b:a5:59:57:8d:
                    5b:1d:cc:f8:6a:ca:d5:a9:b1:af:e1:c2:23:e2:a8:
                    44:77:c8:fc:36:a7:74:bf:00:91:7b:a7:f3:c0:93:
                    2d:53:61:fd:cd:7d:ff:07:7f:5b:f1:8a:9a:a4:4b:
                    ba:8f:3f:02:05:9a:ce:a8:50:13:44:ab:f7:91:bb:
                    dd:bb:14:36:db:a7:da:71:a6:3d:9a:d9:f6:1a:f1:
                    0c:8f:e2:73:11:df:36:05:5b:ec:5b:4b:db:8c:c7:
                    bf:9a:8c:aa:61:42:cb:9e:58:ac:4c:92:f4:ff:b5:
                    1d:57:39:43:1e:4b:ea:8a:ff:00:a8:87:42:e3:78:
                    b2:8d:fb:94:f8:24:f1:d2:b4:3d:74:82:9c:5f:f2:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D0:F2:5C:D0:35:C2:32:E1:68:78:D4:11:B5:AA:9E:2D:7A:2C:C2
            X509v3 Authority Key Identifier:
                keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b0:0e:2c:5b:9a:60:96:d2:3b:87:97:78:1b:e3:e0:46:85:
         40:59:b7:db:d1:5d:d4:30:97:3f:1d:eb:6d:cc:c1:21:fa:9e:
         7d:7e:79:25:f4:9a:07:95:18:8d:8d:05:17:69:0f:82:55:58:
         26:0b:60:b6:f1:4f:a5:0a:fa:5d:e1:c2:c9:03:0e:03:2d:cb:
         48:ac:37:89:75:6b:eb:06:82:9f:5f:cf:90:5d:66:c1:d0:39:
         cc:15:6c:52:fd:01:38:48:31:a7:0d:a5:d3:6c:68:6c:f6:ad:
         3e:00:86:81:27:c5:b9:7d:8f:8d:23:86:3f:24:ee:07:04:79:
         b9:4a:e6:92:2f:18:83:13:26:53:e3:4f:07:62:ba:06:5f:78:
         08:d0:2f:12:da:00:06:1d:1b:94:9d:a2:98:ea:f2:55:bc:85:
         da:53:2f:2c:56:00:d9:f2:fe:a3:65:f2:99:f6:a1:5c:9b:2d:
         be:6e:86:ab:c1:b4:7d:49:57:dd:2e:74:db:76:2a:9a:6b:59:
         15:ce:1e:ba:89:25:82:1b:27:e1:1e:31:75:e8:49:a9:2c:02:
         8e:3d:28:aa:e8:74:6d:56:48:e7:6b:57:1f:2d:e1:4d:f0:7a:
         2f:ea:8e:64:09:13:f4:7e:bd:01:f8:04:82:c8:20:74:71:8a:
         29:56:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:26:25 2026 by rpki-client