This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
File:                     J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json)
Hash identifier:          b7hHYqK9lz0oepG8kCr3ImdYJGPhkoHylzoYrchFl6M=
Subject key identifier:   60:F1:4D:17:73:7B:27:35:E2:D9:82:D4:97:40:E8:94:81:11:42:D9
Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Certificate issuer:       /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
Certificate serial:       0300
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
Manifest number:          02FA
Signing time:             Sun 25 Jan 2026 00:24:53 +0000
Manifest this update:     Sun 25 Jan 2026 00:24:53 +0000
Manifest next update:     Sun 01 Feb 2026 00:24:53 +0000
Files and hashes:         1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: VTWpqptKQrFaoO48fVQrcYoOx8ubnuFhPpLBLy9Z7LM=)
                          2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: nulXjcOrSFFLkbb+9xp8u7rKBr37IkDLnEDnosvhdVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl
                          rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3
        Validity
            Not Before: Jan 25 00:24:53 2026 GMT
            Not After : Feb  1 00:24:53 2026 GMT
        Subject: CN=697562d5-0f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:f3:0a:8a:be:c8:28:1d:5f:90:cc:27:17:
                    e7:18:d5:bd:be:16:63:6d:c1:d6:9b:fb:66:11:9a:
                    29:30:3e:b7:b3:70:1d:d0:a5:13:a9:93:a9:71:02:
                    6b:e9:c5:1f:62:2d:74:49:29:2e:ea:62:57:7e:03:
                    f6:50:e5:88:9b:f1:06:70:c0:69:05:3b:d0:82:3a:
                    5a:48:ea:1c:24:c7:6d:23:b3:7b:d8:51:5b:84:c9:
                    73:73:bb:41:13:45:1c:4d:37:4d:79:63:c7:e5:a5:
                    ec:64:bc:a9:79:12:7b:20:af:8a:4b:5b:58:66:e8:
                    6c:9d:53:cc:a0:64:38:b7:0d:bf:e4:12:c2:1a:e6:
                    40:6c:c4:12:52:84:68:8f:34:12:b2:17:e9:0b:08:
                    cc:70:3d:de:35:e2:1d:33:fb:cd:61:47:44:ff:51:
                    98:4b:38:d4:b2:3f:d5:7a:23:d9:77:50:ff:44:bf:
                    d7:02:0b:84:43:c0:08:85:7b:6f:c8:e9:db:a5:d3:
                    5e:50:39:c7:7c:00:ef:ba:3c:b0:f4:db:f7:18:5c:
                    74:65:78:2b:7a:fe:80:83:31:9f:ce:09:62:01:3b:
                    01:a6:13:b6:28:3f:fa:05:11:4c:1c:6a:20:da:f3:
                    ba:9b:53:cd:f3:54:ff:e0:5a:4f:84:df:d7:4c:b8:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:4D:17:73:7B:27:35:E2:D9:82:D4:97:40:E8:94:81:11:42:D9
            X509v3 Authority Key Identifier:
                keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:69:9f:01:f8:1e:f6:d3:df:48:f5:a1:cf:be:39:00:ba:60:
         21:90:b0:0f:35:68:f4:4e:64:69:54:a3:10:81:f4:24:72:fd:
         79:e5:70:75:c5:8e:0f:32:55:d8:2f:cf:59:bb:8e:04:ad:e5:
         ea:9e:a3:72:15:9f:28:27:6f:9b:55:79:e3:bf:f6:34:40:49:
         e8:f0:f8:a1:85:7c:5c:a6:09:a8:a6:09:e9:15:28:33:24:5c:
         b4:8a:a0:39:ad:6a:85:c6:be:44:4d:97:f3:44:aa:8b:ad:46:
         88:9c:45:59:62:c4:3f:31:1a:42:7b:d0:21:b4:e6:3c:8f:4e:
         b4:97:f7:13:ed:85:8f:63:0d:2e:b0:4f:5d:07:4a:cc:80:bf:
         c0:fc:06:32:20:9a:31:43:72:d3:42:47:51:40:0b:21:b7:5f:
         e4:d2:b0:d4:1e:c3:b3:bb:52:6e:52:17:9e:97:6d:09:d5:85:
         67:08:6f:44:b0:a9:cf:96:99:ea:14:0f:1a:e6:ca:74:a3:fd:
         1e:a4:43:2d:66:04:a2:4f:fd:d9:e3:8e:13:f8:89:3f:f4:c3:
         59:2c:98:f1:03:61:2a:88:b9:fe:0d:4a:8d:27:d0:52:8f:a7:
         6f:89:d5:2d:93:09:b5:e2:76:ff:d3:8b:09:bc:ba:91:30:6f:
         bf:90:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:12 2026 by rpki-client