This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
File:                     _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json)
Hash identifier:          MB1QLuIFNjugDqJgWBbjiYqgzpNoTeTc2pFw14fwhPk=
Subject key identifier:   B3:F4:12:3A:AE:0E:59:8F:AD:8E:0D:12:9A:30:95:9F:9A:15:A9:39
Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
Certificate issuer:       /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Certificate serial:       1564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
Manifest number:          1554
Signing time:             Sat 24 Jan 2026 16:32:25 +0000
Manifest this update:     Sat 24 Jan 2026 16:32:25 +0000
Manifest next update:     Sat 31 Jan 2026 16:32:25 +0000
Files and hashes:         1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: iydlYvQTc0t6e97ridcxJB6DVj0dRUwAE14OY9LeeKQ=)
                          2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: CwtP2gwbfApArQJr3Z1hu1rrmy4N399m/4TAvngzADE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5476 (0x1564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
        Validity
            Not Before: Jan 24 16:32:25 2026 GMT
            Not After : Jan 31 16:32:25 2026 GMT
        Subject: CN=6974f419-cace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:12:3f:2d:25:b1:66:20:8b:cd:94:b0:ed:
                    03:69:bf:f9:8a:d4:8e:e2:bb:88:79:25:74:d1:37:
                    20:3c:1d:b6:4a:56:b4:76:17:99:f5:7d:75:0f:52:
                    dc:ed:d9:f3:89:dd:76:98:b9:85:f4:2b:6d:ef:bd:
                    f9:31:5d:fd:9c:a8:a2:c5:e4:14:e5:e4:af:4f:4d:
                    79:ce:ef:34:99:ec:72:ba:9d:f9:1f:1c:ac:35:9a:
                    62:4b:5a:f3:31:fa:b0:08:13:17:79:3c:50:d6:fe:
                    18:ca:02:54:eb:95:62:96:0d:b7:01:8c:d7:20:ca:
                    04:61:2d:ba:a1:0b:b7:28:a9:ba:e1:68:fe:f4:5c:
                    e3:a2:00:7f:2d:29:95:cf:ba:68:f7:76:73:56:fd:
                    86:fd:11:aa:77:bd:e2:79:95:63:27:db:3d:21:c7:
                    f8:f0:bb:9e:6f:65:dd:13:43:65:94:75:d5:58:25:
                    ad:4f:c7:00:e8:d5:11:80:c7:ad:b8:22:74:9a:94:
                    7a:54:a0:56:37:fd:9c:07:71:16:7a:40:3f:ef:5b:
                    67:77:8d:78:ea:52:63:46:07:9e:3c:ed:86:de:cf:
                    8c:b5:6e:5b:3b:14:4f:1d:f8:84:02:8a:71:e2:1d:
                    4c:8a:71:de:0d:61:50:0e:12:93:d3:9e:2c:49:5f:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F4:12:3A:AE:0E:59:8F:AD:8E:0D:12:9A:30:95:9F:9A:15:A9:39
            X509v3 Authority Key Identifier:
                keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:4c:7d:9a:8f:95:e1:d6:84:eb:99:ab:04:d1:26:d7:53:
         06:a1:ec:ba:2c:20:2f:b7:86:df:55:ef:b4:46:de:f8:45:e6:
         e3:fd:90:8f:c3:d6:2e:c9:03:f6:67:40:be:0e:d6:f1:30:7a:
         60:f6:6b:ce:43:c3:16:09:07:d9:ab:5b:3c:bd:6d:8a:ce:d0:
         d9:2f:95:90:2b:0a:fc:d7:d2:11:98:ce:6c:2f:90:a6:f1:02:
         14:ec:d1:c9:99:4b:ae:a3:c6:f0:87:bc:bb:e3:59:99:d7:10:
         73:e2:bb:89:88:db:32:e4:b1:fb:73:0b:97:1b:48:56:5e:a3:
         eb:55:a4:a8:67:19:13:ee:c1:4e:9f:62:a8:34:bb:8f:b1:09:
         15:1b:ae:57:1c:b1:19:bb:54:62:51:88:1e:ee:63:66:8c:c1:
         c2:c8:7b:af:a5:98:f6:12:34:8e:4d:d8:0a:4b:93:36:79:b7:
         09:8b:be:b7:34:d6:f4:2f:9a:c6:c0:52:f5:8b:12:1e:1c:a4:
         27:5b:b3:71:e3:86:e0:74:94:13:58:b8:37:26:2d:8f:01:3d:
         c4:62:81:10:d4:c8:13:86:ee:ef:ba:50:6f:81:75:d5:d6:17:
         01:dd:65:65:58:dd:77:9f:ec:e6:74:96:df:08:59:a6:0c:66:
         17:c6:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:19 2026 by rpki-client