This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File:                     k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier:          8cr9PjOXTo1H6ZGyv5PXmSLfMSOMNqxtGNnvEfqx7Oo=
Subject key identifier:   10:E2:31:A1:44:9A:24:CA:1C:4F:21:A9:8E:58:F9:4D:42:5D:21:AF
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer:       /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number:          07F5
Signing time:             Sat 24 Jan 2026 20:29:48 +0000
Manifest this update:     Sat 24 Jan 2026 20:29:48 +0000
Manifest next update:     Sat 31 Jan 2026 20:29:48 +0000
Files and hashes:         1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: /uu19xt7V4wIkpL02Yo/UNDAsUn7QH34NBOnugx8D/E=)
                          2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: 9S4PdbQBnS1bjpFuDpIOJsT6W0eeeQu3f8/ulTYvG/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
                          rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
        Validity
            Not Before: Jan 24 20:29:48 2026 GMT
            Not After : Jan 31 20:29:48 2026 GMT
        Subject: CN=69752bbc-bbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:f4:78:83:b8:8e:7f:b1:c0:fc:b5:76:30:
                    2b:38:4a:cd:e5:6b:63:21:d6:c1:1a:a4:82:d4:43:
                    89:19:61:2f:d6:2e:5b:18:9b:26:94:06:25:b9:51:
                    ea:b6:0d:2b:fa:f4:8b:ea:6e:84:b3:a3:58:36:33:
                    a2:ab:45:4f:f0:e4:61:51:0f:ed:80:6c:d9:c1:51:
                    b7:46:da:11:6c:05:a2:c3:45:b9:f2:7a:79:56:61:
                    f1:3f:bc:b2:fb:34:42:d3:bb:c5:80:4c:9f:ad:0c:
                    31:e2:10:29:38:84:e2:3f:83:52:a3:34:23:41:17:
                    2c:7d:49:8b:25:30:eb:02:af:20:56:ec:50:e2:9d:
                    88:71:7f:1f:4a:d1:2b:2e:a4:68:b4:58:81:be:37:
                    0d:8e:b4:b5:55:21:8a:14:39:59:b3:97:1e:ef:2b:
                    83:2a:e8:d8:df:15:cf:00:78:97:42:b9:0e:2d:c4:
                    07:a6:9b:d6:4f:bd:6e:33:43:4c:d5:68:f6:57:36:
                    44:08:94:77:6f:f1:0c:83:a1:6c:80:3d:38:8f:a0:
                    26:b3:da:6a:f6:fe:d0:58:5d:66:e6:e2:31:01:f7:
                    71:04:7a:70:ec:ae:c4:9e:55:a8:07:92:1c:56:ad:
                    2c:f1:ea:df:f4:d7:02:c2:b0:36:32:a9:dd:7c:3b:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:31:A1:44:9A:24:CA:1C:4F:21:A9:8E:58:F9:4D:42:5D:21:AF
            X509v3 Authority Key Identifier:
                keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:ad:1a:b2:70:7e:ce:8e:cc:ce:5d:71:2b:d6:78:2e:b2:
         35:a4:7e:f1:32:5c:86:df:fe:59:ca:8a:4b:0d:8d:cd:11:c1:
         e5:bd:c3:ad:a9:d1:2d:84:64:09:a7:58:68:fc:44:3c:1b:2a:
         35:e9:ba:f9:e7:81:49:88:1d:a3:e5:df:ac:66:52:16:aa:4e:
         a3:ff:3c:83:fc:c8:69:02:45:3d:96:af:91:ba:c4:95:f1:9d:
         65:ce:de:27:8e:13:24:60:df:2e:c0:6c:fc:e7:43:3d:ca:6c:
         38:ec:e2:8a:75:9b:42:ad:25:2d:1a:ad:42:14:a7:7c:02:57:
         fc:95:40:ea:a4:a4:f8:fe:11:5c:51:f6:01:94:b5:ff:69:19:
         12:fc:20:b5:00:66:8e:f8:52:11:a8:86:b4:15:c7:a5:6d:79:
         24:31:8e:d5:3b:b6:1d:82:68:3b:eb:3c:c5:b2:53:05:ae:eb:
         1a:30:ac:6d:aa:37:8b:5d:fd:b6:be:82:9f:1c:a6:86:c6:53:
         91:02:f6:00:47:70:ca:b4:a4:33:f9:e9:cb:aa:27:d3:35:29:
         88:82:df:d3:b1:53:72:d2:10:2c:15:ee:f7:93:d7:eb:74:ac:
         b6:c2:3f:89:87:e1:e1:2f:48:ce:2a:0f:e5:9b:38:65:17:60:
         1f:7e:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:08 2026 by rpki-client