This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          DV12IWYtoeq86a2Ppdd1pFi+5xlUv055yh8IAyQtK30=
Subject key identifier:   76:BB:8F:73:F0:AA:01:D6:33:97:03:16:0B:3F:EA:EA:F6:E9:40:60
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          A4
Signing time:             Fri 23 Jan 2026 05:22:25 +0000
Manifest this update:     Fri 23 Jan 2026 05:22:24 +0000
Manifest next update:     Fri 30 Jan 2026 05:22:24 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: cJbx4vMVJ4vFnAkyK2doAWTaIbQWMSIisfvvmhyMVTg=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: JCV9BgemXhUBaAgBPhl6UiNH0ukdvH/wrcQapOQQK+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: Jan 23 05:22:24 2026 GMT
            Not After : Jan 30 05:22:24 2026 GMT
        Subject: CN=69730591-5c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:8b:0d:14:da:17:dd:63:1b:54:bc:a8:58:
                    f9:ac:22:94:95:9e:c2:91:64:c6:50:74:26:ed:e6:
                    1d:76:86:0c:eb:a9:5c:92:e0:51:30:dd:9d:b0:f4:
                    25:3d:43:db:48:54:5c:a2:72:2f:4b:ff:ea:2b:26:
                    5e:8e:6a:48:1f:5a:f5:50:f6:8a:1e:0f:f5:04:fe:
                    c7:47:c1:ef:82:3f:c7:f5:3a:a2:66:e6:b3:c7:fe:
                    f0:27:38:e8:16:23:73:13:b0:cd:f7:68:ba:2f:5e:
                    7b:bc:1f:c2:66:69:68:aa:75:45:75:9a:5c:fe:4b:
                    67:c7:fa:9b:ad:b8:d3:8a:d2:b6:87:28:cd:09:15:
                    0a:bf:b1:43:35:a6:54:3b:22:80:73:70:e9:1e:1c:
                    50:61:5c:5b:cf:d0:0c:a7:9b:7e:b3:77:6d:17:f5:
                    fe:51:8b:04:74:c7:62:8b:e0:5a:37:73:fb:35:28:
                    54:da:79:16:d7:83:97:18:03:82:51:75:76:31:a0:
                    9c:23:48:67:0d:18:fc:e1:77:c0:66:dd:38:66:c0:
                    9e:6a:c1:fa:34:d4:87:e4:d4:73:6a:b8:7a:f9:68:
                    ba:4a:ef:81:8a:b9:06:e7:5d:9a:c3:f8:33:ce:7c:
                    05:af:03:88:b2:c4:87:d4:a4:14:e4:86:bf:68:12:
                    c4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BB:8F:73:F0:AA:01:D6:33:97:03:16:0B:3F:EA:EA:F6:E9:40:60
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:68:ad:a7:e3:b1:e0:9a:43:9c:39:2f:b8:92:18:e6:2f:
         df:e8:6d:ab:74:85:77:ec:04:9a:40:48:be:b5:70:fb:10:ca:
         15:8c:67:01:7e:dc:67:c2:a7:98:8c:5b:1c:58:02:68:0c:7f:
         79:74:c1:e4:10:67:3c:a8:fa:53:99:50:4e:0d:01:e6:45:fd:
         c2:aa:6d:a4:82:75:8d:26:e0:48:ca:6d:85:25:63:02:de:36:
         7d:0d:ff:5f:f2:94:48:93:a0:2e:44:8b:23:00:3e:ac:cd:2c:
         be:7a:3f:ac:a3:a0:2b:c2:23:82:a2:a9:db:b8:f0:52:72:0e:
         f7:53:91:a5:8c:68:a9:eb:37:60:db:6e:ba:30:b1:55:c3:b3:
         d6:36:4e:57:fe:a7:f4:d5:d6:31:27:0d:5a:1f:27:0c:2e:eb:
         70:9c:04:32:01:cc:28:2b:26:69:b4:d5:ab:0b:c6:0c:8c:23:
         ed:61:11:af:88:92:98:5f:0b:1e:03:c6:66:06:6e:97:69:90:
         56:4f:66:a8:a3:bd:71:19:6e:b6:87:c5:1f:e0:47:fb:8a:02:
         34:4c:2a:a3:9f:6c:26:e5:3a:7a:44:aa:56:43:e3:ac:16:bd:
         15:1a:bc:a5:72:03:a6:93:71:fe:e1:48:3b:42:9e:d2:79:17:
         87:db:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:40 2026 by rpki-client