This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File:                     AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier:          Gc2q3/r43Qx6YYYElLqELFW0I/gfJVstHWfwCypYm+E=
Subject key identifier:   23:0B:8C:E0:CC:63:2F:81:D3:3D:B3:43:1C:A0:33:FC:45:05:37:D7
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer:       /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial:       058F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number:          057C
Signing time:             Sat 24 Jan 2026 22:34:24 +0000
Manifest this update:     Sat 24 Jan 2026 22:34:23 +0000
Manifest next update:     Sat 31 Jan 2026 22:34:23 +0000
Files and hashes:         1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: asdruvK6sJxqAsU4lCg2k8etz/1OPHVlKLVPl+10cZg=)
                          2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: FoFgJ52gigvatl9XWLd8n5vp/LlZbDCQ2ZgQjZFRqxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
                          rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
        Validity
            Not Before: Jan 24 22:34:23 2026 GMT
            Not After : Jan 31 22:34:23 2026 GMT
        Subject: CN=697548f0-ac95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:ae:c7:a9:34:10:87:ab:28:92:81:7c:a3:
                    b9:49:8e:7a:ef:1b:2d:0f:f6:f9:37:4f:40:46:15:
                    03:2e:a2:b0:8a:fe:3d:c2:31:28:b9:be:9f:7f:04:
                    1e:30:a5:85:8b:07:ce:78:5d:05:43:8a:c0:33:5f:
                    cf:4c:63:a9:ee:b0:a1:ab:66:18:78:ab:42:bd:fc:
                    ee:b2:9d:88:cc:9c:d8:a4:2f:bd:dd:8b:03:9a:06:
                    a9:7d:1d:33:46:36:b4:18:68:90:60:ce:23:82:6e:
                    37:03:77:7a:fa:68:da:99:24:94:ab:57:8f:29:64:
                    5c:6b:ef:5e:af:9c:a0:ac:a1:35:a8:d0:e7:1b:b9:
                    8e:ca:60:17:e2:84:ca:3d:fe:2f:18:48:e5:80:04:
                    85:b1:af:11:04:b0:53:60:34:38:e7:82:2c:e4:81:
                    52:68:2f:00:b7:06:56:3e:6f:75:8f:95:7a:74:0f:
                    98:7b:3d:99:66:a3:fa:c1:37:91:55:0f:a9:86:37:
                    8c:42:46:5f:5d:a7:3c:02:b7:27:27:60:88:6e:ca:
                    bf:ba:4c:28:01:9d:c5:30:7a:1e:09:54:47:a9:3a:
                    b9:c0:6f:8b:9d:2e:d8:b3:26:cb:70:50:44:88:b3:
                    dd:6c:46:ad:c5:5c:b5:ee:ce:ca:a6:ec:0c:07:b0:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0B:8C:E0:CC:63:2F:81:D3:3D:B3:43:1C:A0:33:FC:45:05:37:D7
            X509v3 Authority Key Identifier:
                keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:36:9b:ea:24:9b:54:1b:5a:6e:a9:13:d0:d4:dd:83:20:
         9c:ca:99:21:56:ee:d5:0d:d5:c6:15:26:88:94:8e:38:8e:70:
         f5:1d:8d:ef:3e:41:e6:46:b5:ae:e9:2b:91:03:00:42:9f:bd:
         88:46:d6:7e:b8:98:60:8c:86:c1:fa:33:6d:54:69:80:84:f9:
         bd:38:e7:0a:4e:b1:c0:c7:20:2d:16:04:56:25:13:df:d8:b4:
         08:7b:c2:31:dc:1d:e9:48:da:c2:a5:89:ec:89:28:38:57:2a:
         74:13:22:42:5a:11:28:1d:73:6d:cc:02:63:e8:79:d9:e0:c8:
         0a:33:0e:2b:1b:45:82:f1:73:24:cf:0d:46:68:80:71:8b:c4:
         82:9f:05:0f:18:ef:89:65:4b:b6:2d:b7:62:f3:d6:e6:92:ed:
         32:73:e6:93:24:c1:4b:c5:b7:bd:40:8a:a0:69:95:77:f7:f5:
         4c:06:de:53:05:8a:87:96:85:ac:a2:bf:a4:ad:6f:9c:13:38:
         a4:99:20:6a:a8:dc:87:08:f6:b2:86:02:3f:8b:eb:63:fb:d3:
         65:03:79:e3:98:2e:0c:b0:92:f5:e2:21:bf:58:b1:f2:3e:a4:
         ec:a2:c1:89:7a:2d:8e:5d:9e:6f:f0:64:fa:62:fd:7d:a9:24:
         12:14:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:53 2026 by rpki-client