This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
File:                     c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json)
Hash identifier:          nbSK8+SUdniLQrkA6Blg+64YJzbyW9EmUz9j2PjUdgY=
Subject key identifier:   38:7C:8D:30:C9:9F:75:BF:9D:03:65:8D:45:66:AE:4A:1A:6D:86:AF
Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
Certificate issuer:       /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Certificate serial:       03C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
Manifest number:          03C4
Signing time:             Sat 24 Jan 2026 23:49:55 +0000
Manifest this update:     Sat 24 Jan 2026 23:49:55 +0000
Manifest next update:     Sat 31 Jan 2026 23:49:55 +0000
Files and hashes:         1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: 34MmM1tF2eo3yXlcdYSJAiplAShy1j95GjBlYc493tU=)
                          2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: OdJBHfeW2Re+5Y2fi/VDd9mvhSQUJ11CYcf0wDjfUuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
                          rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
        Validity
            Not Before: Jan 24 23:49:55 2026 GMT
            Not After : Jan 31 23:49:55 2026 GMT
        Subject: CN=69755aa3-29b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:dc:b5:71:ed:12:a3:4a:a1:99:a9:90:45:
                    6f:02:77:d4:2e:95:d9:77:a6:ce:6c:48:d5:be:cb:
                    4a:1d:b6:9c:8c:86:5d:cc:2d:dc:05:37:30:e3:0f:
                    84:69:65:bd:ce:16:07:96:21:96:1e:f7:db:63:66:
                    93:5a:62:55:49:0b:23:e4:d1:ca:e1:95:43:86:38:
                    c5:7c:92:18:c1:c2:77:29:a5:df:95:07:bf:89:df:
                    5b:28:87:d4:b8:78:37:c1:85:69:e2:ef:e3:1b:31:
                    9d:a3:c9:55:01:df:e7:3a:0b:7c:e2:28:e3:85:3f:
                    e3:7e:5b:fb:48:fd:c9:e2:ad:d9:98:2b:de:84:51:
                    ec:69:54:7c:83:d3:97:2a:f3:46:7f:10:37:61:ee:
                    d1:27:55:9d:26:26:6a:ce:9e:06:fd:5b:68:9f:f8:
                    b5:30:69:85:6b:fa:c6:26:cc:33:26:73:ab:a2:98:
                    a1:b9:ec:ff:15:58:86:72:a2:bc:de:3a:22:59:95:
                    62:69:de:5b:5a:9a:b6:fb:71:2f:5e:ac:88:3a:fa:
                    f6:03:cd:6b:a2:81:bc:07:ca:e1:91:4c:c8:72:ed:
                    8a:c9:04:8f:32:c6:0b:dd:ab:f3:97:1c:43:a6:bb:
                    85:93:f9:c0:fe:4a:4a:f6:d7:80:a6:01:ff:0c:e2:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7C:8D:30:C9:9F:75:BF:9D:03:65:8D:45:66:AE:4A:1A:6D:86:AF
            X509v3 Authority Key Identifier:
                keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:27:2b:f3:1f:92:24:74:d6:7f:ee:99:b8:f8:f5:4a:99:17:
         f4:b6:20:35:fb:4c:6a:3e:1a:fe:98:46:be:a0:41:b2:37:ae:
         b3:4f:d6:ca:23:3c:a3:5d:85:26:0b:a2:4b:07:a2:d5:f6:d7:
         f8:75:c3:63:86:22:5f:71:44:dc:28:14:28:4e:4d:d0:26:a1:
         97:e0:01:55:53:e5:d9:97:4d:b3:5d:ab:a5:f0:75:56:fb:6e:
         aa:98:1f:3a:86:3d:08:8a:75:4c:46:c2:b1:25:b4:fe:0d:16:
         86:a8:f7:30:3c:8d:7f:4c:0d:a7:43:bf:d0:91:e2:aa:72:a5:
         0d:6d:24:49:8c:a2:fc:dd:ef:a5:69:e5:ca:6a:d0:2f:81:fc:
         15:cb:c3:49:a6:c4:71:28:e6:b1:d1:d3:c0:49:93:f0:45:b6:
         e1:36:65:be:de:ea:59:c8:b1:72:89:32:9f:50:51:00:43:7d:
         53:69:8d:fa:bc:16:93:d7:76:b6:03:1c:77:da:66:17:14:ff:
         e2:f3:46:dd:ea:cb:c2:4d:96:58:58:73:dc:5f:f4:43:06:9e:
         b4:10:9f:db:08:76:86:e7:1d:82:33:4c:9d:0b:1f:c6:69:97:
         59:9f:4c:19:cc:06:06:03:86:f2:fd:17:99:d7:37:a7:5e:e3:
         54:09:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:26 2026 by rpki-client