This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
File:                     saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json)
Hash identifier:          npylxaBuS4xGU4odQEFPwjZqQVs8iyVlrw0MRQ3P7fo=
Subject key identifier:   21:27:8D:7C:1A:55:F8:78:30:94:04:B5:EB:5A:5B:88:FA:CF:30:1A
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Certificate issuer:       /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial:       3513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
Manifest number:          3508
Signing time:             Sat 24 Jan 2026 14:32:40 +0000
Manifest this update:     Sat 24 Jan 2026 14:32:40 +0000
Manifest next update:     Sat 31 Jan 2026 14:32:40 +0000
Files and hashes:         1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: P/C13FulQGx/yiBOt6dRGbN1z/cK/rFyvs/xM16RodI=)
                          2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: RA6RFmE6k5HO1bBqRafgilu2yoyhiNE9rjZysYl9t3k=)
                          3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: APLkO/9VQDMo8Mg1BILGpzlcs8IiIyqCJfnR8QGrWEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
                          rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13587 (0x3513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
        Validity
            Not Before: Jan 24 14:32:40 2026 GMT
            Not After : Jan 31 14:32:40 2026 GMT
        Subject: CN=6974d808-028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:1d:ef:f2:8b:c2:ad:7a:49:b6:70:7e:9e:
                    56:5c:07:75:d2:3b:ad:06:50:7f:f4:6d:63:d5:53:
                    c8:58:80:38:5f:84:99:2f:3f:88:03:d9:9e:bb:f4:
                    ef:b4:7f:bb:39:7b:ee:99:ea:87:1a:83:84:64:2a:
                    f3:12:a6:95:94:c4:16:fa:63:ba:08:ed:61:21:db:
                    10:69:99:ba:44:b3:30:44:49:2a:85:2b:f0:f3:7d:
                    78:c3:88:40:b5:b6:46:f4:d7:5c:76:45:a6:7e:5c:
                    84:05:1b:4c:77:52:7b:5d:89:69:0d:31:0b:bc:5a:
                    b3:0b:61:7f:92:3c:72:87:9b:64:89:a0:10:ae:0e:
                    66:75:ff:25:9e:a8:54:49:6a:10:ba:b2:aa:25:47:
                    25:37:60:47:fb:16:d4:26:63:b6:c1:80:4e:00:67:
                    71:bd:60:92:d2:51:86:1b:69:84:74:d4:fc:f5:89:
                    64:6e:b4:b4:f8:c1:26:ce:6a:76:c1:c0:69:f4:77:
                    cf:31:10:14:dc:a5:95:99:70:dc:8d:d6:29:c2:af:
                    f2:94:e3:99:88:97:56:a0:6f:b4:4e:22:18:d4:d6:
                    75:75:5f:66:16:67:f0:69:f2:c0:f7:13:16:3f:ff:
                    d7:ee:dd:62:81:c8:75:46:58:43:e0:6a:24:3e:44:
                    c8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:27:8D:7C:1A:55:F8:78:30:94:04:B5:EB:5A:5B:88:FA:CF:30:1A
            X509v3 Authority Key Identifier:
                keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:5e:39:e8:8d:9d:a6:75:e4:73:ae:37:3c:56:c4:08:00:
         dd:d9:ae:53:00:4c:ff:ac:22:6c:36:80:bd:d1:02:8b:89:d1:
         d0:ec:bd:c6:cf:04:07:54:48:9e:51:b5:a2:68:bc:9b:6e:20:
         ad:51:ff:9c:e7:25:6e:8b:b6:31:b5:26:28:2e:0b:76:2e:a9:
         f6:6f:31:67:4e:aa:22:32:03:d5:0b:34:0f:46:62:b3:a2:c0:
         f7:9d:c7:3b:d3:e5:60:dd:81:c2:5b:3d:f8:0b:35:1c:35:24:
         e6:e9:8b:37:05:52:e8:82:db:24:14:35:0b:ca:7e:12:79:ae:
         a8:3c:6e:c7:87:14:b8:44:71:76:26:bf:39:e6:04:ab:fb:cc:
         39:9e:73:a3:3d:e0:4d:53:5f:d0:6d:0e:1a:21:ef:76:4d:3b:
         e7:13:d9:2e:d5:63:56:82:e3:d2:c0:fd:42:ff:c1:de:0e:93:
         65:28:62:db:04:bd:c4:bf:9f:0a:65:d1:a5:c7:97:8c:c2:5b:
         73:97:62:08:18:3d:e4:48:d5:f0:e7:07:4e:7c:4c:da:9f:91:
         4f:5f:5e:50:4f:ef:55:25:1c:ff:f1:12:aa:5f:ab:fd:e3:2d:
         3e:51:fd:f3:6a:d4:fc:40:7a:f6:e5:26:f2:d2:01:2b:66:d8:
         12:00:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:02 2026 by rpki-client