This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File:                     FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier:          oTnMYnrPQN9UOLZFtez8XQ9BkDP2CH2FFUtFD+v2vBE=
Subject key identifier:   C8:C5:2D:67:5F:15:0F:28:FB:42:02:25:26:FF:9D:57:20:9D:CF:77
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer:       /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number:          39B0
Signing time:             Sat 24 Jan 2026 14:34:35 +0000
Manifest this update:     Sat 24 Jan 2026 14:34:35 +0000
Manifest next update:     Sat 31 Jan 2026 14:34:35 +0000
Files and hashes:         1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 3OcNlgTgjDFB6nkZ9ckw63fa5JTRcNod0W5g09SSIVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
        Validity
            Not Before: Jan 24 14:34:35 2026 GMT
            Not After : Jan 31 14:34:35 2026 GMT
        Subject: CN=6974d87b-a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:ae:02:db:10:0f:27:0c:d7:4e:8b:0c:98:
                    34:e3:85:f4:c9:e1:7c:79:7a:ff:83:12:ec:0c:74:
                    5e:a0:32:1a:8f:7b:b6:e7:08:d0:1b:f8:b1:d0:3d:
                    19:4b:63:7d:98:2f:0c:eb:1b:fe:18:52:8a:fe:c5:
                    c2:af:d1:47:78:86:a1:6e:56:67:39:4b:d8:f7:da:
                    74:89:85:f8:66:98:2a:ec:70:90:ca:48:9f:c5:d6:
                    65:9f:c2:7a:14:ee:a5:58:e0:6d:10:a7:dd:7f:28:
                    1a:d8:f5:2a:72:4e:f7:46:01:60:aa:1f:72:52:de:
                    e8:9f:b3:e1:a3:fa:e0:44:e4:b6:8d:12:11:4d:b2:
                    84:e3:71:40:b8:4c:ad:da:a7:66:d3:b5:f0:57:20:
                    bf:3f:ec:43:65:d5:62:e9:8b:dd:b1:4e:ac:e6:a3:
                    18:63:37:29:d1:79:52:09:6a:e8:7f:57:7a:ac:4c:
                    2d:d8:3f:d5:b6:91:fd:cb:bd:00:3c:3a:9b:c3:05:
                    65:64:36:06:8e:d1:27:5d:30:24:bb:5c:2d:11:d7:
                    62:a3:47:91:74:ed:01:a1:1e:d5:17:d3:28:b7:e5:
                    0d:7b:6d:05:cb:f3:7a:1e:7c:8e:e7:4f:3f:01:78:
                    b1:6f:10:1a:d3:95:e8:f9:8c:ec:e0:ad:ca:a2:49:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C5:2D:67:5F:15:0F:28:FB:42:02:25:26:FF:9D:57:20:9D:CF:77
            X509v3 Authority Key Identifier:
                keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e0:c2:c5:a5:66:85:4c:b1:86:0e:46:a5:59:a2:08:a9:f5:
         08:c8:7e:d1:eb:10:d5:86:ed:60:b1:cc:44:61:bb:16:c1:20:
         16:fb:a0:e9:61:c7:b2:92:77:b5:48:53:85:63:c6:c2:3b:67:
         c7:58:2c:6b:d6:26:a8:1c:03:b5:cd:61:ee:30:10:df:e0:90:
         b4:2e:06:3b:c6:48:cf:97:39:72:c0:4d:98:17:ea:64:62:04:
         74:3e:d6:2e:e8:e6:cd:da:56:db:b3:56:be:10:03:53:c8:d6:
         89:5b:8a:a6:8e:0b:87:bb:2d:e1:81:17:0a:c9:4b:35:c9:06:
         58:f7:37:af:2f:b0:70:11:ea:62:65:2f:79:5a:c5:b4:f1:fd:
         7c:cd:27:96:e5:fc:52:85:46:2b:8e:75:19:f7:81:88:2c:15:
         e6:1e:27:09:ba:7e:8a:b6:38:8d:8a:6d:25:6a:49:69:53:2d:
         82:40:e7:12:0b:0f:72:1d:03:a9:b6:61:92:f5:59:14:10:27:
         30:98:26:0c:e6:ad:b5:ef:d1:8c:7d:24:a4:8f:2e:26:ba:51:
         c7:6d:dd:59:c3:b6:69:a1:33:c8:91:00:06:da:26:5a:d3:de:
         ed:c1:cf:2e:9f:87:a2:47:37:38:f2:5e:70:27:b1:8b:3b:bb:
         c1:44:ab:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB
ODc3MjQ2NDAwHhcNMjYwMTI0MTQzNDM1WhcNMjYwMTMxMTQzNDM1WjAYMRYwFAYD
VQQDDA02OTc0ZDg3Yi1hNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOOuAtsQDycM106LDJg044X0yeF8eXr/gxLsDHReoDIaj3u25wjQG/ix0D0Z
S2N9mC8M6xv+GFKK/sXCr9FHeIahblZnOUvY99p0iYX4Zpgq7HCQykifxdZln8J6
FO6lWOBtEKfdfyga2PUqck73RgFgqh9yUt7on7Pho/rgROS2jRIRTbKE43FAuEyt
2qdm07XwVyC/P+xDZdVi6YvdsU6s5qMYYzcp0XlSCWrof1d6rEwt2D/VtpH9y70A
PDqbwwVlZDYGjtEnXTAku1wtEddio0eRdO0BoR7VF9Mot+UNe20Fy/N6HnyO508/
AXixbxAa05Xo+Yzs4K3KoklATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjFLWdf
FQ8o+0ICJSb/nVcgnc93MB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE
OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO
N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCr4MLFpWaFTLGGDkalWaIIqfUIyH7R6xDVhu1gscxEYbsWwSAW+6Dp
Yceykne1SFOFY8bCO2fHWCxr1iaoHAO1zWHuMBDf4JC0LgY7xkjPlzlywE2YF+pk
YgR0PtYu6ObN2lbbs1a+EANTyNaJW4qmjguHuy3hgRcKyUs1yQZY9zevL7BwEepi
ZS95WsW08f18zSeW5fxShUYrjnUZ94GILBXmHicJun6KtjiNim0laklpUy2CQOcS
Cw9yHQOptmGS9VkUECcwmCYM5q2179GMfSSkjy4mulHHbd1Zw7ZpoTPIkQAG2iZa
097twc8un4eiRzc48l5wJ7GLO7vBRKst
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:13 2026 by rpki-client