This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File:                     FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier:          kV/pB7oBwPBoNRaJoeCC8acDdIn87Y4drTLuUokkEBo=
Subject key identifier:   70:85:84:F9:50:E5:9A:C3:10:AD:87:16:CB:97:62:BC:10:3E:D9:08
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer:       /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial:       0B3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number:          0B37
Signing time:             Sat 24 Jan 2026 18:46:06 +0000
Manifest this update:     Sat 24 Jan 2026 18:46:06 +0000
Manifest next update:     Sat 31 Jan 2026 18:46:06 +0000
Files and hashes:         1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: lOi58CpyQtvWCl+T4u+Lykyc60TCJr67GVLKSWT45r4=)
                          2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
                          rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
        Validity
            Not Before: Jan 24 18:46:06 2026 GMT
            Not After : Jan 31 18:46:06 2026 GMT
        Subject: CN=6975136e-cf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:8b:ef:46:a7:d3:9b:bd:90:32:77:d7:cd:
                    6a:86:99:a3:af:6d:e2:09:cb:6b:84:1a:73:76:c2:
                    ae:79:ee:3d:81:0c:66:a6:f1:29:29:5f:a5:d5:4f:
                    59:c7:b0:37:db:b0:51:74:7f:2d:7f:92:69:76:6d:
                    93:4b:98:61:5d:50:9d:85:e4:86:67:3b:02:9e:55:
                    53:e9:72:98:5d:51:37:35:d0:83:7c:9b:48:9d:39:
                    41:cd:a3:7a:75:9c:bd:c7:81:7b:20:c8:82:93:50:
                    10:46:ca:b5:2a:45:4f:54:b8:6d:d5:a8:93:fc:3e:
                    99:bc:67:f1:8c:55:87:c2:7d:90:e4:ed:ec:27:83:
                    6d:48:91:65:db:9a:2f:53:75:e9:a5:94:0a:7f:ca:
                    ca:e1:5c:24:1c:f0:63:7d:2e:c2:8a:7b:31:d3:71:
                    3b:02:ad:d7:4d:ba:5e:85:73:7c:12:11:32:ee:eb:
                    c8:a5:ec:49:f5:b3:a8:5f:1b:4c:aa:5a:01:ad:7c:
                    6f:c9:11:fe:a6:d2:79:41:c3:7d:e9:91:ef:43:3a:
                    27:ee:37:54:26:58:56:de:8b:db:45:c1:f6:91:c1:
                    be:a0:7a:43:73:1d:d4:b1:25:b7:2f:b2:e8:8c:16:
                    ba:8b:0c:b0:67:7c:da:f3:97:a6:08:f2:d7:75:21:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:84:F9:50:E5:9A:C3:10:AD:87:16:CB:97:62:BC:10:3E:D9:08
            X509v3 Authority Key Identifier:
                keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:89:2b:0b:11:34:8e:04:f1:92:20:87:13:2d:0d:56:f0:
         87:1b:0d:f0:1f:d4:49:9c:42:e5:f3:58:66:cc:04:1a:0c:11:
         c4:75:cb:8b:0e:fa:10:23:2b:b2:66:d3:a4:ed:0c:65:1b:ee:
         ad:c6:77:92:f0:13:fd:a3:5e:3a:99:d9:ae:24:91:ab:42:50:
         92:53:b8:b9:51:5f:40:79:3a:fc:e8:f6:c3:e8:68:67:27:7d:
         1e:b0:b1:58:62:2c:d9:a3:f1:4f:b2:e4:87:83:4b:ec:10:fe:
         42:03:38:8e:98:5d:44:6e:2e:d8:00:ec:c0:cd:47:0d:f2:de:
         01:f0:65:4a:ec:08:0e:89:67:f1:f0:1c:e6:00:5c:42:73:c0:
         a9:a8:4a:99:c2:6b:76:a7:9e:80:41:d1:43:b2:25:d2:73:83:
         13:fc:15:cb:d8:77:60:0e:d8:67:a5:37:1e:30:b1:c1:64:ca:
         9f:d2:09:12:17:df:e3:0e:2b:6f:98:0e:a5:6c:be:dc:82:8c:
         18:de:a0:5f:17:10:15:33:61:54:85:c7:d1:cd:6f:6d:89:6b:
         d7:60:76:2e:2d:03:70:12:e8:28:c6:e5:2a:f8:8f:31:30:b8:
         d1:a4:16:3e:ba:c9:90:2b:4d:9f:93:b0:e8:3e:a6:61:75:34:
         ff:74:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:31 2026 by rpki-client