This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
File:                     FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json)
Hash identifier:          Y7zx2aonxa8ONkoOksmGbc4xYA41w5+xOs3V/HbGaGM=
Subject key identifier:   60:CC:3E:64:7B:C3:27:B9:33:91:EA:B5:3D:57:AC:27:D8:BB:AE:30
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       0929
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
Manifest number:          0920
Signing time:             Sat 24 Jan 2026 19:39:34 +0000
Manifest this update:     Sat 24 Jan 2026 19:39:33 +0000
Manifest next update:     Sat 31 Jan 2026 19:39:33 +0000
Files and hashes:         1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: s4Goj+LYaDJR3o6HlrY3bJyYyH2/ehV6USo8nUOH5gg=)
                          2: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: pJayBxxRJWCzWhsXsVewXSgwV3tW3WYJIkIORAZIGdQ=)
                          3: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: UPxtnvqn+XnWITXkdADWZf+oTAAZ7ogJ1IFuU/0UKTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345 (0x929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Jan 24 19:39:33 2026 GMT
            Not After : Jan 31 19:39:33 2026 GMT
        Subject: CN=69751ff6-dbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:68:db:d5:50:41:97:df:bd:3d:e4:d1:eb:
                    39:06:36:b2:3a:59:23:83:7b:9d:a7:f6:b1:ed:a6:
                    4c:bf:5f:65:10:20:2e:d0:89:52:91:f9:b0:3e:2e:
                    48:75:f3:59:4e:bd:76:74:e6:95:a9:6a:ee:1c:30:
                    75:35:69:e0:84:55:8b:bb:a0:ec:e4:c4:5d:26:39:
                    d6:b4:dd:82:78:8c:ca:67:5a:51:37:be:1f:22:0e:
                    a6:76:6c:2b:9f:07:15:45:0b:64:50:1a:97:7e:47:
                    29:e6:e7:34:8d:d9:ab:23:9d:a7:7d:d9:2d:07:91:
                    56:32:b6:c8:07:d4:d7:39:43:6a:b9:6b:f4:34:d4:
                    d7:8d:d0:3b:21:61:30:fd:07:bb:f9:b7:c2:6b:f8:
                    d1:1a:d9:84:0e:e4:3f:b9:9a:d3:90:a0:42:23:46:
                    52:6d:bf:94:2a:c7:7a:ee:bc:b0:7d:90:b8:8c:aa:
                    93:e5:ce:0e:0d:c7:44:7d:ca:2a:8c:d6:ce:40:e0:
                    57:66:6f:6a:be:70:46:eb:84:ac:48:78:1f:b8:7d:
                    ba:20:9a:47:a2:56:7d:46:9e:3e:f7:20:94:cc:d2:
                    5f:85:89:11:cd:c4:1d:93:d8:a9:8f:63:27:fd:40:
                    7b:95:51:35:4e:b7:9c:cf:aa:71:6a:2b:1e:2d:92:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:3E:64:7B:C3:27:B9:33:91:EA:B5:3D:57:AC:27:D8:BB:AE:30
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:bb:ef:73:0e:b5:07:30:c4:f3:3c:20:12:82:4c:c3:1e:
         8c:9f:c1:2b:37:9f:cf:5a:a5:42:0e:03:97:3d:e2:c6:28:b8:
         ac:56:05:1f:18:26:d0:79:48:51:59:30:98:b1:96:84:35:05:
         61:05:ba:da:63:4b:a5:0f:48:b8:d6:7d:31:9d:d1:47:d6:59:
         8d:4e:43:eb:e3:ac:07:be:b5:29:bb:6b:15:5c:d3:fa:f1:d3:
         4a:a3:48:14:ea:22:28:b3:0c:45:f3:7c:87:36:d7:1e:dd:72:
         fd:30:9b:77:96:26:05:65:2a:5e:f8:ea:fa:f5:04:99:ac:e5:
         ce:1c:97:72:51:27:7d:00:cf:38:8f:b2:0c:b9:fa:2a:1c:c1:
         74:02:98:57:eb:f5:6a:d4:de:33:f0:49:96:b2:8a:18:f4:e9:
         60:3d:ff:76:01:c2:f7:35:0f:85:6e:ef:ff:33:37:cf:66:fd:
         64:63:23:9c:8d:a0:55:ae:28:99:30:86:7a:e3:ed:d4:23:c6:
         63:b5:5f:a1:97:71:13:3e:c7:a6:62:bc:50:e0:72:4e:32:3d:
         af:6e:1d:67:29:90:b1:f2:ec:3c:3b:1d:2d:80:6a:3a:41:b5:
         01:dd:c3:a9:b3:9b:a5:4d:a0:5d:dc:da:05:cd:b6:32:a7:eb:
         ae:07:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:53 2026 by rpki-client