This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          f607J9eSQi910KNChwTO9UKQkyAXbVHADULpnYBuU20=
Subject key identifier:   10:CA:A8:5A:8F:B4:A0:D8:53:28:35:CC:D3:05:27:20:71:91:B3:F1
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       050C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0501
Signing time:             Sat 24 Jan 2026 19:58:06 +0000
Manifest this update:     Sat 24 Jan 2026 19:58:05 +0000
Manifest next update:     Sat 31 Jan 2026 19:58:05 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: SogNB8TRpgfosHbmrad86NeBzR7F1cuRO6Q/ovWMwZs=)
                          2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: trLJfSwyymOYXghPy0PGh0ipgzAzEgwWMLJxE/C/bWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Jan 24 19:58:05 2026 GMT
            Not After : Jan 31 19:58:05 2026 GMT
        Subject: CN=6975244d-a5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:6f:16:f2:12:ff:e3:c3:f9:29:29:86:fd:
                    d8:9d:d2:45:dc:a4:fa:95:fc:86:3d:ae:e6:f9:80:
                    2d:8d:a5:76:cf:fa:36:b4:f3:21:11:d1:f4:a7:14:
                    85:4f:c1:a3:e2:da:4c:0f:f0:22:b6:71:ce:99:fe:
                    6c:9c:8d:9d:9b:51:bf:e8:2c:58:3f:5e:5a:f5:6c:
                    9e:e5:18:df:17:b3:5d:b3:04:09:1b:a2:fe:15:ad:
                    1f:8a:9b:a4:7a:31:3e:1e:91:40:92:5d:46:ed:f1:
                    29:3b:60:4e:b0:ff:21:f2:06:98:d4:0b:ec:db:d6:
                    5c:89:51:62:3d:a1:f3:b4:f2:b8:5c:28:03:70:cb:
                    3c:61:37:fe:82:70:24:aa:c9:6b:ac:5b:72:17:b6:
                    27:49:61:30:28:6e:06:78:3a:ee:31:ae:95:a6:8d:
                    65:37:50:f9:10:2b:b4:2b:9e:ca:83:d1:1b:8e:9f:
                    d4:74:96:42:11:00:b3:bc:df:2d:83:c7:07:0f:ab:
                    4b:6c:4d:99:62:89:78:00:ee:5b:53:e5:dc:c7:af:
                    6f:89:ab:ef:10:f2:ea:54:56:e6:7a:1d:32:21:3a:
                    d1:f6:bf:6e:7a:ad:6a:f5:cb:9b:dd:64:d0:53:c5:
                    66:f2:27:f6:82:03:59:ee:e3:bc:64:01:af:e5:f6:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:A8:5A:8F:B4:A0:D8:53:28:35:CC:D3:05:27:20:71:91:B3:F1
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:91:cf:3c:1d:ec:3a:55:4a:17:9f:a7:73:f7:fc:15:9b:9e:
         0e:04:10:3d:a2:d5:c0:ac:fe:a1:41:07:14:56:9d:24:d0:b9:
         d4:ec:1d:5e:66:f3:7d:6b:1e:c9:cd:07:40:92:7a:eb:3e:e8:
         29:23:1c:d9:cf:a1:7a:ef:c4:fe:14:b6:b6:64:85:29:48:8c:
         ae:71:51:7c:f4:05:8c:33:96:14:d5:c7:00:4f:5e:f5:b1:87:
         f4:44:5b:f1:96:b1:d3:d1:78:d2:45:63:84:03:ca:0a:53:54:
         1d:61:b8:0e:92:ce:07:1a:15:c6:c9:19:47:b8:3a:3b:c6:06:
         86:03:82:11:30:ad:25:ef:89:72:51:3f:56:81:82:c5:b4:4f:
         a5:94:6e:1f:a1:24:e9:f0:3d:07:ea:aa:a1:1b:5e:ba:00:9a:
         e2:6f:8c:41:db:01:f2:1e:7e:86:3a:8e:e2:25:de:9a:7b:6d:
         2e:db:33:df:2a:ea:9c:70:ee:ed:e5:95:d5:b8:c0:22:90:60:
         e1:04:c0:5a:c7:79:b9:b7:80:07:a5:fb:4f:28:8d:c1:e6:c4:
         bf:55:56:2c:a0:bd:47:7e:c6:59:de:d9:d8:0c:d2:78:03:01:
         f5:fe:b3:19:9a:12:ae:d0:ed:2e:a4:47:b6:2f:d6:61:7b:c9:
         cb:83:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:08 2026 by rpki-client