This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File:                     8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier:          os4l3Sm5NLj5AiM6mnUwk0gPZVpHuW48WSQ3u0CI8Fg=
Subject key identifier:   90:9A:3E:3A:E0:BD:3E:C6:D9:AF:A6:3B:02:EE:B6:27:36:54:9E:88
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number:          E0
Signing time:             Fri 23 Jan 2026 04:42:12 +0000
Manifest this update:     Fri 23 Jan 2026 04:42:12 +0000
Manifest next update:     Fri 30 Jan 2026 04:42:12 +0000
Files and hashes:         1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: DmA6G2J+51+P9IJ8ZG2pZqoFT81Br5xq5g2zRmSVSMI=)
                          2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: LGzZuPNiRPnWl27SkEdE4WpUy5pSZMAYp9U5fkhC8CI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Jan 23 04:42:12 2026 GMT
            Not After : Jan 30 04:42:12 2026 GMT
        Subject: CN=6972fc24-9f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:ac:95:c7:8a:1f:b0:52:9b:94:d5:f7:e1:
                    cc:38:b7:4c:c0:cb:3d:c5:65:58:6f:fe:ff:b6:b5:
                    73:45:79:be:4f:04:eb:6e:7e:15:f3:ad:af:9f:a3:
                    ad:89:31:95:6e:77:0b:fa:49:65:8b:55:4e:14:36:
                    3d:5b:a2:10:36:9d:a4:f8:af:59:8e:dd:03:1a:ad:
                    55:dd:a8:35:3f:91:c4:e1:90:45:46:6a:8f:3f:8c:
                    ee:67:21:a6:66:6b:56:d3:cd:8c:27:e2:72:53:aa:
                    06:3d:fc:60:0b:60:25:8b:41:e2:ce:7f:fc:02:0e:
                    30:fd:98:36:d8:32:dc:30:4f:c5:cd:f5:e3:57:f3:
                    97:c9:32:49:62:96:31:8b:24:60:1c:f0:a2:71:42:
                    14:de:dc:8a:06:45:05:45:cc:3b:60:80:4d:17:9c:
                    b9:a3:84:00:66:8f:81:5c:b6:29:aa:9c:db:e1:40:
                    fb:3a:0e:b3:0f:06:ba:83:fd:5b:60:34:10:53:55:
                    4b:ac:d6:0a:23:0c:cc:e3:91:b8:ed:5e:3c:19:5d:
                    28:15:08:db:b8:57:d1:76:a6:25:b2:8e:13:19:13:
                    24:2e:71:4b:9a:ce:c5:12:2d:04:c8:85:3b:f0:7c:
                    09:81:19:3d:91:d6:62:91:ac:db:76:7e:98:cc:72:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:3E:3A:E0:BD:3E:C6:D9:AF:A6:3B:02:EE:B6:27:36:54:9E:88
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:0c:fc:83:f8:d4:2c:a7:18:84:40:f3:96:ed:00:a3:78:
         74:82:53:58:4b:66:07:fa:5b:cb:26:1d:01:29:73:3f:d2:ee:
         54:54:c2:1b:fe:50:3c:f5:f8:90:3f:97:31:9d:3f:46:90:54:
         76:6f:8c:be:1c:c3:a4:0f:d1:de:06:f1:1b:58:84:3e:2c:e4:
         d0:3f:de:ee:b3:19:47:b5:a4:1a:1c:22:59:a4:33:76:af:8d:
         89:93:c7:de:5e:dc:75:aa:38:54:aa:26:ac:36:e6:dd:a0:7d:
         3f:9c:1c:2c:28:55:ea:ba:a6:c1:e7:c3:ee:6b:15:84:da:9f:
         f9:2a:56:c1:5a:8b:48:48:3c:66:0e:72:62:58:25:b4:d6:23:
         17:19:4d:f1:22:f1:98:7c:7d:d1:f2:90:ec:57:b7:d7:9f:06:
         36:97:da:5b:e8:cf:b5:d1:01:32:8d:71:9c:c3:01:55:8c:d6:
         72:8f:d5:40:b0:af:62:09:b7:eb:76:69:dd:73:dc:77:3b:90:
         b9:bf:23:5b:6e:86:4a:46:b3:b5:e8:87:c7:9d:22:fc:8c:a6:
         c5:b5:ab:64:40:53:3e:6f:86:88:ac:0e:55:57:cc:0d:4e:9d:
         76:3c:b4:1e:95:95:41:c6:7b:c3:3f:2d:06:e4:67:29:10:1d:
         2d:49:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:17 2026 by rpki-client