This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File:                     664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier:          iv2cYg6tys/BxyTWvtMM4rB+2Pwc73lz4YCYDgl3cnU=
Subject key identifier:   A2:0A:14:14:65:6F:C3:A9:39:E8:AC:C0:85:6E:49:AC:60:3E:2A:C3
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer:       /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number:          052F
Signing time:             Sat 24 Jan 2026 22:48:11 +0000
Manifest this update:     Sat 24 Jan 2026 22:48:10 +0000
Manifest next update:     Sat 31 Jan 2026 22:48:10 +0000
Files and hashes:         1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: 0/KPXO6zAFTMvO0nk5GtfrK72mCz842heA4BhTNnG+o=)
                          2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
                          rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
        Validity
            Not Before: Jan 24 22:48:10 2026 GMT
            Not After : Jan 31 22:48:10 2026 GMT
        Subject: CN=69754c2b-b4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9d:41:1f:61:9d:81:73:e0:af:76:e7:f2:48:
                    7b:29:28:2e:e3:04:53:7b:35:eb:3a:54:36:b5:c3:
                    7c:6a:f0:37:57:56:ad:8f:ee:03:5e:42:6b:fa:87:
                    cc:01:c1:93:bf:09:68:a1:94:c9:2e:98:0a:b6:8c:
                    44:4e:b8:f6:57:eb:3d:45:94:ae:5d:15:0c:08:ed:
                    ac:c3:0a:51:b4:d7:5f:f0:37:f8:a1:93:15:b6:33:
                    45:01:a7:57:1d:2d:94:88:b9:d9:7e:21:b5:87:3f:
                    78:38:49:00:ea:e8:23:6d:0c:0d:2f:99:da:4c:58:
                    f6:42:11:de:81:5a:06:7c:a3:1d:22:e5:c2:d4:77:
                    96:65:d9:d0:07:3c:83:cf:9c:0e:33:03:39:b2:6d:
                    ee:a6:45:e1:5c:51:28:44:44:81:a6:d6:f3:b7:85:
                    3f:4a:5b:bc:ab:02:6c:02:18:3b:3f:70:0d:d0:66:
                    5f:9e:c2:ef:23:9c:c0:66:e4:9d:25:2e:2d:01:40:
                    cc:32:cc:21:85:cf:45:b7:a4:4c:3a:6e:48:5f:7c:
                    ed:19:5a:ec:00:e7:fa:c6:ff:51:84:47:50:71:e7:
                    d3:17:cc:ab:e1:d2:55:7f:e2:e9:22:c1:55:56:f4:
                    41:04:70:ee:8f:f4:b3:25:10:f0:68:40:ae:e7:5e:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0A:14:14:65:6F:C3:A9:39:E8:AC:C0:85:6E:49:AC:60:3E:2A:C3
            X509v3 Authority Key Identifier:
                keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:75:f1:85:5c:c5:e6:bf:62:86:88:1f:61:6a:bf:b1:8f:
         8f:ba:cd:f8:90:96:7a:67:5a:e5:e4:51:29:6d:1e:c0:50:e8:
         19:a5:02:cf:38:78:14:00:cd:4a:ad:f5:4b:86:97:7b:7b:2c:
         f2:b7:ce:75:89:ee:10:a4:0e:66:2a:ab:1b:52:18:4a:f5:c4:
         74:47:ce:bd:75:4e:0b:0b:66:cd:fd:8f:7d:ff:d6:a2:57:de:
         e7:ee:46:b2:ab:24:6a:7c:74:64:ce:aa:ac:97:a2:5c:3f:1d:
         23:ea:43:6f:52:9d:ff:d7:1c:94:b1:5a:56:09:60:de:23:9c:
         13:6e:56:3b:8b:99:e3:28:9c:7f:1b:ed:fc:0c:47:ad:6b:de:
         34:2b:42:b5:a1:4c:0d:66:8d:af:19:94:1e:aa:13:90:30:e9:
         f6:23:44:79:71:19:c0:12:6f:a8:23:37:28:31:80:0c:af:d3:
         bb:40:a7:3c:25:e1:81:c8:9d:f5:e6:d2:e4:fb:77:d4:42:7e:
         0c:e2:c2:26:b1:72:67:7d:c9:c1:a4:27:63:22:23:3a:04:9f:
         6a:40:cb:f8:a8:c1:e5:8c:6a:40:04:1f:88:6b:33:cb:41:19:
         be:93:6a:df:e1:ef:2b:78:31:86:87:31:2c:8f:fe:56:97:b0:
         e6:fb:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:25 2026 by rpki-client