This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File:                     -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier:          8EAIoWE49S0TyctnAQfKHCo1gFSQAcNXc66fP1TQZPg=
Subject key identifier:   9C:82:B6:57:25:46:19:40:A3:A0:DA:04:EF:C7:52:69:4D:C6:AF:D9
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer:       /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial:       02B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number:          02AB
Signing time:             Sun 25 Jan 2026 00:39:08 +0000
Manifest this update:     Sun 25 Jan 2026 00:39:07 +0000
Manifest next update:     Sun 01 Feb 2026 00:39:07 +0000
Files and hashes:         1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: mEk0wMWTqf2QJBigi1EH9klbye32wuwvaaNAQVy0iWM=)
                          2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
                          rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
        Validity
            Not Before: Jan 25 00:39:07 2026 GMT
            Not After : Feb  1 00:39:07 2026 GMT
        Subject: CN=6975662c-897d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:f0:3a:9f:d2:65:5e:93:70:01:1e:9f:71:
                    fb:55:5c:8f:79:cb:7e:f4:82:06:76:c7:34:6a:03:
                    77:d8:f6:74:2e:a3:3b:72:bb:e8:0c:de:ae:7d:25:
                    bf:66:54:c4:4d:09:3a:72:29:c0:68:bd:7e:f4:f0:
                    6c:a4:29:3e:00:57:a2:fe:cf:dc:4b:bf:95:c1:12:
                    95:3d:8c:f0:58:e7:fa:7a:71:c2:da:cc:61:05:25:
                    15:97:2f:af:07:dc:05:1b:18:d9:5b:b8:e6:aa:d9:
                    25:ae:e3:91:94:44:b3:67:26:2c:d1:53:e6:39:33:
                    cc:29:24:07:84:7c:23:a2:e8:8e:6f:f6:32:18:19:
                    02:9a:53:53:a8:60:93:20:c5:c3:78:81:67:c4:a5:
                    5a:66:d7:39:3d:96:57:4a:b0:30:60:51:1e:f7:c4:
                    7d:fc:d6:52:ce:d2:7c:13:62:e2:02:82:fa:05:cf:
                    2e:d2:97:ab:cd:9d:21:4e:68:0b:f4:ea:85:bb:f4:
                    95:f9:83:55:8c:d2:79:63:dc:8c:47:01:19:a5:ea:
                    06:31:73:74:7e:77:33:6c:70:52:00:6d:b3:b1:9d:
                    c7:11:49:0e:da:66:0c:ec:38:82:1d:74:87:13:46:
                    63:d9:59:11:2c:00:a0:f7:cc:d2:49:8e:81:74:fe:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:82:B6:57:25:46:19:40:A3:A0:DA:04:EF:C7:52:69:4D:C6:AF:D9
            X509v3 Authority Key Identifier:
                keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:4f:eb:00:52:fb:5f:d5:33:b8:f8:02:5f:6d:b8:f6:c1:d1:
         b2:30:ef:d1:c2:41:01:0f:6c:1b:b1:2e:ac:37:55:4e:c4:9f:
         06:8b:2b:d8:bf:52:3b:ef:db:08:bd:99:0b:7b:c0:7a:96:df:
         fb:a7:94:08:f6:f7:56:1b:20:cb:c5:43:7a:1f:0a:66:d7:98:
         87:82:2a:67:1e:41:7f:d3:16:30:46:8d:86:0c:9a:47:68:c7:
         39:4a:d4:6d:38:8c:c9:4f:db:82:fe:84:c5:c9:92:e6:76:68:
         fa:88:1e:62:1c:a5:a2:88:fa:bb:14:1a:fb:e1:97:1b:08:ac:
         0c:09:17:7b:e2:fb:42:4c:16:07:38:57:a4:c9:53:38:b2:87:
         4d:68:cd:17:71:5a:83:9b:e6:c4:bb:d4:73:b0:f1:24:67:69:
         81:2b:f9:c4:c0:06:ed:0d:d7:88:59:4a:f6:a3:b4:74:41:bd:
         69:32:9b:e8:79:f6:38:1e:f7:73:8c:3b:1e:1e:d2:79:df:b1:
         e1:a8:5d:79:9d:47:37:b7:ff:8d:e2:07:20:83:01:ca:28:7c:
         81:a9:c3:47:09:43:11:7a:04:8e:9f:8d:f1:95:19:08:46:33:
         ce:a8:5d:bb:01:d6:d5:ea:d5:a8:c0:53:11:ea:5c:51:2b:39:
         a9:7e:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:47 2026 by rpki-client