This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          W2Fnj1+Qo8YooUb1tZhhPWMArsVXmPi2cvCkYWL+Veo=
Subject key identifier:   DE:0A:6E:51:63:99:46:D8:00:4D:95:44:BA:A8:55:93:90:F6:15:69
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          89
Signing time:             Sun 25 Jan 2026 05:42:21 +0000
Manifest this update:     Sun 25 Jan 2026 05:42:20 +0000
Manifest next update:     Sun 01 Feb 2026 05:42:20 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: dMge742y17heXJZtS6sXSZU9sNrQhUH2DnqgnymPWdM=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Jan 25 05:42:20 2026 GMT
            Not After : Feb  1 05:42:20 2026 GMT
        Subject: CN=6975ad3d-1f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d3:f9:b9:12:01:11:65:72:33:7b:5b:9f:26:
                    7c:5e:61:8c:e4:59:94:ee:c6:5c:0e:93:51:45:37:
                    6d:4e:50:12:1c:06:ab:02:40:4a:ec:62:93:ef:bc:
                    56:ca:72:33:21:b2:9f:86:ac:61:bd:15:75:14:30:
                    76:1a:06:d5:1a:e8:89:9e:34:ac:22:4e:9e:c0:f3:
                    b0:70:76:89:c7:f4:eb:c1:c5:de:ea:93:6c:b8:9f:
                    91:61:a3:fb:44:eb:43:c8:c8:ce:58:79:5a:02:c6:
                    a7:ef:ac:fd:3e:bc:d6:34:63:b2:df:0e:b8:54:b6:
                    61:45:9e:37:6a:09:22:9b:6d:1a:a3:e5:f9:3f:b9:
                    0a:27:3a:eb:a0:04:6a:42:5c:7e:33:04:ae:ef:93:
                    27:fa:06:10:37:8a:66:7c:54:54:2c:5e:e6:75:ef:
                    b5:76:6f:24:f4:9f:ea:31:d7:e4:9a:da:04:24:d3:
                    53:4a:ed:a9:f3:98:ea:01:05:ea:87:0e:f7:91:c1:
                    95:22:8a:85:5a:a9:50:e6:eb:4e:69:2d:41:3a:82:
                    0d:a6:e6:33:f9:99:41:28:07:c8:f6:dd:62:4e:20:
                    f1:47:c5:22:f7:e2:83:ad:90:9f:5b:98:69:b8:6c:
                    2e:4d:85:4f:f0:fa:83:54:d3:2b:5a:33:62:9b:59:
                    71:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:6E:51:63:99:46:D8:00:4D:95:44:BA:A8:55:93:90:F6:15:69
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:71:62:f5:b2:05:09:7b:74:14:2e:67:fa:d5:ab:3c:c1:
         6e:e5:8a:de:66:2b:08:2b:5b:74:0b:f4:78:55:9b:83:ff:19:
         cb:4d:03:c3:b6:ec:2d:a8:5f:ef:3d:99:04:13:89:11:86:08:
         f8:f8:ed:58:ea:02:28:60:9f:45:e5:a2:77:d2:4e:b1:75:50:
         18:d0:b8:ae:b8:c5:21:7f:cc:6d:41:01:74:ba:dd:8b:69:f6:
         8d:78:04:5d:58:c0:67:49:81:1e:74:26:96:20:3d:97:f4:80:
         16:6c:02:6d:a9:72:a7:83:08:1e:26:07:b1:5c:84:fc:db:f3:
         70:36:f1:30:e8:b8:b4:a7:6d:10:9d:71:98:34:fd:13:d2:3d:
         b7:d0:0b:bd:f1:f1:b3:a2:fa:3b:70:18:fa:82:14:85:aa:e1:
         24:b1:d0:27:52:86:6c:c3:42:4b:1a:10:0f:e6:6c:5c:7c:1a:
         84:6f:82:0f:0f:15:dc:03:44:98:96:5c:da:ce:f6:7e:04:08:
         3e:0a:2c:03:65:10:8c:bb:2a:99:36:95:24:01:d9:ac:e0:1c:
         d6:89:27:11:d6:47:88:10:53:3d:2b:0c:12:79:96:95:42:07:
         72:b9:e8:a5:c5:42:ef:fd:28:7a:d5:c5:23:09:23:27:a3:09:
         53:a6:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:18 2026 by rpki-client