This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File:                     J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier:          Hx4vT9MbA8ic53nJPJnU3agujiRyal4BZwOrnel3WO8=
Subject key identifier:   BE:B0:62:D5:52:BB:3F:E4:60:F3:EF:73:4C:94:0E:3C:D2:4B:A8:D8
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       05BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number:          05BA
Signing time:             Sat 24 Jan 2026 22:19:27 +0000
Manifest this update:     Sat 24 Jan 2026 22:19:27 +0000
Manifest next update:     Sat 31 Jan 2026 22:19:27 +0000
Files and hashes:         1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: kwazeUE1yGq0O4SUBQimKP8o20206RGWdcZbZAjJShI=)
                          2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
                          rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: Jan 24 22:19:27 2026 GMT
            Not After : Jan 31 22:19:27 2026 GMT
        Subject: CN=6975456f-471a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:da:0e:75:a0:70:e2:6f:e9:eb:0f:47:63:
                    22:a0:f5:0e:5a:8c:5e:7d:ff:e8:86:4e:41:bd:44:
                    ee:a0:85:6e:d3:bd:ba:81:1a:a3:28:51:a7:5d:b6:
                    85:35:b8:4c:50:f7:5f:11:b4:b4:9c:64:c7:72:1d:
                    d2:e6:18:8c:00:a1:0b:6e:a9:be:9e:a5:91:58:b7:
                    4b:70:13:bd:4d:8b:fa:bf:ef:23:c7:8a:af:c0:7f:
                    0c:01:9c:46:3a:f2:a3:84:5e:58:e3:bf:89:22:1c:
                    40:74:bb:fe:9b:2d:f9:e7:d4:81:ac:c8:b0:63:18:
                    9f:42:3a:14:9f:de:bc:27:70:52:01:d8:de:70:7e:
                    ec:5f:6b:26:d2:2a:ce:32:02:ae:17:85:59:b0:ec:
                    f8:90:90:b6:c1:da:01:8b:cd:13:09:4f:31:8b:44:
                    2c:a4:78:54:0b:1f:40:cf:a3:8b:d7:1f:97:18:ee:
                    f3:e4:62:70:94:87:7c:29:f9:04:08:d9:8a:37:b0:
                    6a:83:f1:60:3e:7b:35:2b:be:90:86:bf:fb:ec:6e:
                    6c:67:9a:ba:e2:38:8b:69:58:36:3d:c8:b9:e8:c4:
                    47:ba:d0:c4:09:77:67:33:a1:13:89:13:15:6f:32:
                    be:e1:eb:05:15:2f:7e:5f:92:ec:13:29:62:53:11:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B0:62:D5:52:BB:3F:E4:60:F3:EF:73:4C:94:0E:3C:D2:4B:A8:D8
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:77:6b:e2:14:94:e9:fc:03:dd:bb:86:d7:4d:be:35:62:
         6b:78:04:cc:dc:7a:8b:86:63:a9:0d:f1:b3:4b:74:f3:7e:fd:
         cd:fc:0f:90:db:82:fa:0c:b8:0e:97:66:55:54:3c:70:d3:99:
         df:d4:22:80:58:f1:1b:98:c6:01:c5:87:e8:6c:6b:02:3e:19:
         5a:32:72:e9:5b:5c:89:15:52:f8:42:0a:88:eb:8b:b3:4e:fc:
         51:3b:0c:38:68:3c:9f:47:7c:7a:d9:35:fc:9e:b0:ab:a7:31:
         59:24:c9:c8:b2:31:a8:ae:82:8b:ce:6d:96:d9:6c:56:af:ef:
         5c:0b:d8:22:3f:0c:be:87:0a:92:7d:0c:0a:0a:fa:dd:ba:29:
         34:e9:76:35:14:7c:00:16:1f:19:33:93:c4:d6:82:cb:7f:60:
         89:b2:83:73:ce:05:a8:e5:e7:e6:7e:10:50:02:5e:84:0b:1d:
         0e:71:4a:1f:f3:08:07:b9:8a:1f:b3:42:4f:13:34:5e:3e:f0:
         71:f9:a9:62:2e:a7:ba:1e:45:5a:b6:67:c0:6e:a3:9a:ca:ed:
         aa:b9:4c:99:57:2d:3f:3b:d9:55:04:60:6e:a7:85:e2:9e:72:
         99:46:de:8a:4d:bf:cc:a9:e0:42:4c:f4:71:22:7f:92:00:4b:
         7f:8f:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:06 2026 by rpki-client