This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File:                     AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier:          ZqJkMg1DELBU5x5U/6AVs7dl4cgCL6IVu798n5Hr//M=
Subject key identifier:   2F:75:A5:22:DF:DB:8E:51:33:BC:99:A6:0A:47:15:3D:F6:1E:BA:7E
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer:       /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial:       0BCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number:          0BC4
Signing time:             Sat 24 Jan 2026 18:28:52 +0000
Manifest this update:     Sat 24 Jan 2026 18:28:51 +0000
Manifest next update:     Sat 31 Jan 2026 18:28:51 +0000
Files and hashes:         1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: nu8NU1lCsefir9orMDfEx7M0fW2ePGMX6IUzqel7fzs=)
                          2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: sug/yLBQ+OjqkHil53A1fXubXeb6H+1TbTT+YvNP/YQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
                          rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
        Validity
            Not Before: Jan 24 18:28:51 2026 GMT
            Not After : Jan 31 18:28:51 2026 GMT
        Subject: CN=69750f64-852e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:f2:60:bb:16:52:e2:98:e6:08:9c:a5:64:
                    45:88:62:f3:5e:36:b0:dc:ae:90:2d:e5:81:da:26:
                    da:2f:71:49:a8:7b:d2:7c:0d:2b:af:42:99:48:44:
                    bd:87:00:9b:d6:8f:01:88:1e:5b:4a:b0:5f:98:0a:
                    38:23:c7:b5:55:db:32:5f:6f:83:2a:a7:69:d4:89:
                    fc:95:40:e5:04:6f:bc:95:65:49:ff:01:44:81:bf:
                    11:5c:c6:0d:df:81:fc:df:19:81:2d:5e:dc:3e:e5:
                    6b:dc:25:ee:db:af:03:79:fb:8d:73:6e:58:fd:7d:
                    82:b7:8f:be:98:b8:f3:eb:ea:84:06:0b:c5:6f:c1:
                    ee:e4:9e:42:48:4d:23:9e:9e:32:5a:df:e7:bb:af:
                    e2:72:7f:ae:4c:5a:ea:b9:9d:d3:50:04:34:b1:bf:
                    7f:ef:80:79:9a:48:da:d6:f7:11:ce:ec:74:46:65:
                    60:30:db:19:24:42:2f:b1:5a:93:9f:06:27:01:9e:
                    3f:42:2a:ab:78:91:56:d6:c9:56:94:75:52:e4:a4:
                    79:29:f5:7f:76:39:27:f3:a4:cb:0d:4b:a8:26:20:
                    95:98:e7:66:16:91:99:9c:3d:4a:e6:d5:31:64:4e:
                    d0:c4:19:80:9b:09:6b:26:2d:da:31:69:a5:9b:0e:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:75:A5:22:DF:DB:8E:51:33:BC:99:A6:0A:47:15:3D:F6:1E:BA:7E
            X509v3 Authority Key Identifier:
                keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:f5:b8:cb:40:37:d0:f9:42:97:30:5f:f6:a9:39:df:36:
         1b:bb:fe:bc:96:62:5e:4e:4f:70:5b:ed:c7:27:5d:83:99:6d:
         cb:8a:a5:d9:35:2f:e7:5f:74:92:5e:02:74:1b:fe:a9:f2:c8:
         80:6d:90:16:74:05:2b:6a:b5:12:e9:87:b2:46:d9:18:fe:6e:
         7c:83:4a:7b:5e:c7:c6:54:16:c6:44:ac:11:2e:19:70:b2:3c:
         53:3f:44:ca:b2:95:f9:34:f5:4a:b7:68:37:18:b0:2a:bc:1c:
         63:29:99:44:9b:6d:4f:1a:2d:c3:13:ae:1e:08:7b:bc:de:bf:
         3e:5a:9b:0b:f8:b4:02:0b:2e:50:a1:f6:62:49:64:da:54:56:
         bc:20:12:cd:00:f3:8b:17:2c:a1:78:69:82:97:c4:7b:24:83:
         8c:af:74:82:68:39:76:2b:4c:48:ed:6e:c8:57:7c:d4:1e:8f:
         dd:d1:ec:84:fb:e1:91:fc:35:c8:c1:ab:a4:e1:13:46:96:ad:
         57:d3:01:3b:f2:31:32:38:bd:5c:51:c5:28:0f:33:3f:c1:4c:
         3f:21:31:25:93:e3:4c:e9:8e:81:d5:21:f5:36:e4:79:6b:81:
         e2:3c:91:ea:d6:6a:a6:b6:05:03:69:e3:ad:69:c6:3d:de:82:
         c7:a4:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:55 2026 by rpki-client