This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
File:                     R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json)
Hash identifier:          G06LHBYiuGGeiNBLVgTPeCiH+Xzos4e9+T2OsVqkU4s=
Subject key identifier:   D8:D6:FC:03:28:8A:E6:A6:9F:31:4B:FE:23:4C:8A:4F:94:A4:0A:61
Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85
Certificate issuer:       /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
Manifest number:          EC
Signing time:             Sun 25 Jan 2026 04:38:08 +0000
Manifest this update:     Sun 25 Jan 2026 04:38:08 +0000
Manifest next update:     Sun 01 Feb 2026 04:38:08 +0000
Files and hashes:         1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: yi7/5in4azBO/Vuwd3ENy/KL3nuQ5TWr92+tw1A/LKg=)
                          2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: X0a7N8BetaJpt9FlsdkHj3TgLJmVFX/78zUcVbqMhpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
        Validity
            Not Before: Jan 25 04:38:08 2026 GMT
            Not After : Feb  1 04:38:08 2026 GMT
        Subject: CN=69759e30-7430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:30:d2:6f:0f:6d:a2:5c:60:ff:17:65:0a:
                    2c:72:9a:0c:db:a2:0c:70:d4:47:88:a7:57:4a:78:
                    a7:69:fb:b7:07:d2:45:cd:d1:91:d6:7a:ce:0e:c7:
                    72:51:22:a0:c6:a1:65:21:0a:6d:58:74:08:87:dc:
                    c6:be:63:03:76:ba:b5:d3:c7:0c:a0:e0:68:b3:8c:
                    6e:c5:e0:5a:37:40:11:7b:ab:05:02:02:f5:71:9c:
                    16:98:d5:df:18:6e:db:d4:4b:10:06:2e:67:76:68:
                    45:ee:da:69:d1:a3:69:f5:1d:4d:4b:33:05:1b:a0:
                    12:d2:3d:6e:1b:5d:cf:93:89:ed:58:29:d9:df:cc:
                    4a:ef:53:fc:8a:e2:ad:5d:8b:43:32:1c:6b:0d:3d:
                    51:7a:65:11:f3:92:fd:3f:d3:30:d9:a6:e3:46:a4:
                    b3:67:67:c6:e1:d2:89:8d:66:a6:86:19:be:ba:5c:
                    26:7f:d2:75:08:4e:0a:e0:51:40:1b:4e:b1:f7:6e:
                    fe:31:9a:2b:ee:38:fb:2a:a2:7e:c6:8b:5c:2d:ea:
                    2a:6f:9f:a1:8c:c0:4d:f4:80:53:59:83:6b:ee:f0:
                    1c:8e:b2:55:f6:72:54:a0:4d:59:6d:76:af:67:92:
                    fe:12:c0:bf:dc:13:54:b2:1a:93:f4:ea:f6:80:59:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:FC:03:28:8A:E6:A6:9F:31:4B:FE:23:4C:8A:4F:94:A4:0A:61
            X509v3 Authority Key Identifier:
                keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:d8:7e:e3:99:38:30:be:fd:47:2f:79:30:2a:d0:44:d7:
         ae:0f:29:b9:26:52:a7:ca:8d:d7:61:7d:0d:98:d0:4c:67:9f:
         eb:c5:f9:ab:0b:2d:ce:1b:be:d0:7e:dc:89:80:d1:2d:ff:61:
         89:87:f0:24:65:82:02:d4:7d:d6:d3:f7:00:6d:e8:73:fc:70:
         f1:a3:a0:5e:b2:66:50:50:7a:89:d2:de:ef:58:e0:79:e5:b4:
         49:aa:6a:f0:b2:fb:5d:c2:9f:31:99:24:99:7e:7a:f1:d0:65:
         ea:ad:a3:e7:9b:3d:1b:64:25:50:c0:91:03:e7:c9:a9:75:44:
         e4:fa:11:98:5d:e2:eb:3d:4d:57:de:03:49:c1:15:9e:ac:40:
         de:f8:0c:9c:8b:cc:09:5f:f2:94:db:e8:ac:d6:87:66:f3:01:
         53:a6:59:1b:b7:f6:0e:10:6a:da:2e:d4:d6:3d:1d:5d:75:0b:
         c9:f3:58:a9:f3:b4:35:95:09:6a:7a:30:33:b8:ff:d1:3b:7f:
         f7:b7:d0:4d:db:6c:57:76:e1:a6:b7:0a:10:99:ab:e9:d5:b4:
         31:43:ec:2d:0d:08:0d:7b:ca:0f:f1:79:ac:85:8a:04:57:0e:
         0f:88:6a:24:31:85:6c:72:63:17:f6:00:18:2e:01:6d:4a:a4:
         a1:d4:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:50 2026 by rpki-client