This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
File:                     J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json)
Hash identifier:          BjUS7YLRrqscE7TYomJiieQCjN9gQz1Vuxkhwa4IO7Y=
Subject key identifier:   A9:75:BF:B6:CF:C7:D9:26:7B:0D:0D:BA:50:99:83:F8:25:66:7F:14
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Certificate issuer:       /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial:       3517
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
Manifest number:          350F
Signing time:             Sat 24 Jan 2026 14:21:53 +0000
Manifest this update:     Sat 24 Jan 2026 14:21:53 +0000
Manifest next update:     Sat 31 Jan 2026 14:21:53 +0000
Files and hashes:         1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 8YTnWvnJCJILPs8AMdYcgtptqJp1zycHmB6GdMCvswk=)
                          2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13591 (0x3517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
        Validity
            Not Before: Jan 24 14:21:53 2026 GMT
            Not After : Jan 31 14:21:53 2026 GMT
        Subject: CN=6974d581-1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:86:a7:0a:29:68:66:ac:54:24:3b:12:d3:
                    f0:26:e3:3f:32:14:0a:44:f9:27:af:29:0c:3c:f9:
                    89:5b:02:07:5c:6e:d4:4e:e6:76:d6:0b:66:dc:2d:
                    65:8b:5d:be:4b:2a:38:58:a3:54:e6:ee:34:99:0c:
                    c2:21:5c:c0:76:3c:18:60:74:01:65:5f:6d:be:63:
                    38:0e:33:8d:e0:80:b8:06:5d:1f:15:32:7b:fe:86:
                    76:85:02:85:e2:bb:3f:49:f5:ec:b2:f2:2b:23:d0:
                    d9:7a:4f:24:b1:65:84:1c:7a:38:d6:8a:4d:12:fb:
                    34:22:bc:58:69:32:9c:39:96:3d:66:de:18:55:cc:
                    c2:56:48:55:b0:49:92:0d:29:a6:ee:60:85:7f:de:
                    ea:31:02:af:48:a6:27:ce:20:ed:ee:06:98:d6:8d:
                    f5:f6:f5:f4:87:26:f8:3a:9d:8c:30:57:33:e4:c1:
                    ec:f4:fc:27:0c:72:da:05:53:b0:08:71:13:de:f7:
                    ee:e2:35:b1:4b:46:6d:79:c4:1c:56:22:52:cf:36:
                    33:35:22:f1:6b:5b:dc:b7:63:51:2a:a4:25:84:e6:
                    b5:6f:75:c5:d0:d1:dc:ea:ca:f0:dc:86:2c:4c:b6:
                    2a:7c:ec:21:c4:df:b9:be:5f:a5:29:13:ec:b1:cd:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:BF:B6:CF:C7:D9:26:7B:0D:0D:BA:50:99:83:F8:25:66:7F:14
            X509v3 Authority Key Identifier:
                keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:17:a6:13:99:73:2e:88:b3:56:f9:fb:c5:ac:fa:3b:fc:
         be:2b:7c:59:4f:af:57:6d:c4:bd:8b:c4:f1:8e:8e:41:a5:25:
         38:88:69:6b:95:5c:28:6f:58:66:ca:94:b2:58:b2:21:9b:fe:
         60:a1:56:87:c0:7b:79:24:91:31:b2:dd:12:df:13:2e:da:42:
         57:d1:ae:b7:b0:b0:53:54:9a:78:77:62:d8:6a:94:f7:13:7b:
         4d:8c:9e:bb:76:af:aa:87:22:e0:aa:ce:f2:e6:14:7a:91:60:
         a1:3c:4e:72:cc:6b:1c:d9:7a:fd:ec:3f:dd:e1:a8:ed:60:38:
         35:c7:9c:d2:75:a2:4a:77:ab:7c:dc:f8:92:a1:4c:70:5a:ca:
         a5:31:c8:de:a1:59:d8:a9:7d:01:88:25:3e:1d:9f:7d:57:c6:
         67:42:ec:b7:c5:fe:fa:33:70:d8:d9:2f:ed:42:ab:42:d4:44:
         97:5d:59:84:a9:9e:4d:3b:3b:9e:98:00:28:03:4d:54:95:4c:
         72:c8:30:54:ba:b7:47:5c:5c:be:30:2e:cf:5f:eb:4b:23:fa:
         e4:bb:44:12:c9:b2:d2:f2:79:61:83:ed:bf:01:a3:35:8a:ea:
         f4:47:6b:8d:d1:b3:47:d0:3b:70:e0:b6:54:ae:c3:2b:d9:ab:
         50:83:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:34 2026 by rpki-client