This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
File:                     2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json)
Hash identifier:          vd8AbVw9b1puarVvyVyn81bwcdW9Ji2fi79VTDy91Yo=
Subject key identifier:   D2:D5:26:6F:0D:3E:EA:CA:59:59:AE:42:0A:E0:55:C3:E2:9D:43:37
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Certificate issuer:       /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial:       04EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
Manifest number:          04E0
Signing time:             Sat 24 Jan 2026 23:00:13 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:12 +0000
Manifest next update:     Sat 31 Jan 2026 23:00:12 +0000
Files and hashes:         1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: rik+iCtx+OguiwHvZYBMQ+cFz6ehwXTLL5qH/ZvGNQE=)
                          2: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: Cgk1td49WwT1khDdvURu+IhFlLE5qwMRGXtWMjdRcM4=)
                          3: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: fmx4saivVaXmJUd4gXwiDyRFQMYRCvCqBBRUJpcv/Fk=)
                          4: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: P1PBDp8Fe8uxDGasJiZSyCCWpfZTEWdvREcVTBxnWew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
        Validity
            Not Before: Jan 24 23:00:12 2026 GMT
            Not After : Jan 31 23:00:12 2026 GMT
        Subject: CN=69754efc-5877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:f2:a3:cf:e9:e2:ba:1a:fc:e4:a0:52:4c:
                    6c:43:f7:25:4a:c6:7a:ff:d4:d0:c0:4b:59:95:7b:
                    da:bd:be:95:8a:c6:08:55:3f:68:2b:65:01:7b:21:
                    7f:d6:3a:54:4b:f7:bf:49:97:88:29:c4:8f:da:f8:
                    6d:2d:b7:d1:2b:2b:29:0e:7e:90:79:81:22:46:c8:
                    e7:95:eb:1d:81:84:3a:7f:f7:86:18:53:b1:60:17:
                    dc:cb:97:83:61:9f:7d:20:a2:72:cb:fb:00:86:f4:
                    e9:c9:2e:67:a2:d0:e4:f8:9d:1d:f0:50:06:6b:58:
                    3e:a4:46:3c:bc:84:2a:27:fe:a6:06:22:a7:3f:d7:
                    24:fb:1f:90:c0:20:5a:54:33:9c:c9:ca:4b:b4:b1:
                    fd:ca:e1:e2:23:16:55:ee:2e:8b:ae:76:6a:77:02:
                    17:97:43:35:c7:d7:5b:26:3d:2e:8c:6b:7f:3b:90:
                    f3:49:2c:33:aa:70:8d:f9:57:51:48:e5:ca:50:48:
                    c5:92:b0:fd:0a:50:d7:20:5b:2b:3c:af:14:40:9c:
                    0b:aa:43:e3:a4:82:66:d6:aa:39:03:c1:4d:96:05:
                    e4:89:e3:3d:cd:0e:58:d9:a2:71:0a:7a:42:a0:e5:
                    7a:b3:24:44:88:d2:5b:27:ff:69:18:53:2f:64:85:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:26:6F:0D:3E:EA:CA:59:59:AE:42:0A:E0:55:C3:E2:9D:43:37
            X509v3 Authority Key Identifier:
                keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:67:55:5a:bd:29:5c:f0:78:87:23:61:01:f8:a7:19:af:
         45:ff:3d:26:15:0c:dc:19:28:fe:4e:74:91:e5:8c:da:d2:78:
         6e:29:8d:54:b2:ce:52:a6:95:b7:d3:79:53:ef:2d:ed:14:42:
         5e:ef:73:a7:64:d7:5b:76:af:52:59:2e:27:8c:22:53:f2:18:
         55:9d:cf:7a:ff:70:2d:b6:81:91:a1:fd:50:0f:d8:67:8d:11:
         27:9d:34:54:9b:6d:fc:9c:db:56:f5:3a:ef:8a:ae:b8:85:60:
         c7:c5:f3:cf:ce:bd:1d:a0:b1:ba:97:bf:3e:c8:31:c2:df:64:
         a7:56:d0:5a:0f:26:c9:a8:12:86:d4:8a:a9:ed:93:49:58:48:
         b9:47:09:b4:ee:5e:78:59:97:b2:63:11:ae:d5:c0:a6:8a:ff:
         7e:96:c8:38:a9:b2:f6:5a:f0:a7:5a:34:e9:c2:74:ee:af:2d:
         a6:2a:3c:9f:a6:51:8e:f7:9e:6e:9a:d8:4c:eb:39:4a:c0:7f:
         c1:e4:c1:2d:ee:1e:94:8f:85:da:15:e1:0a:86:92:49:47:07:
         b8:18:95:3a:a9:77:f2:4f:c0:16:cb:a9:a5:89:e0:4a:50:6a:
         54:17:f9:f6:82:03:1f:7c:69:47:d0:5c:11:dc:8d:07:51:39:
         2e:a6:e1:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1
NTBCM0VGRjgwHhcNMjYwMTI0MjMwMDEyWhcNMjYwMTMxMjMwMDEyWjAYMRYwFAYD
VQQDDA02OTc1NGVmYy01ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA227yo8/p4roa/OSgUkxsQ/clSsZ6/9TQwEtZlXvavb6VisYIVT9oK2UBeyF/
1jpUS/e/SZeIKcSP2vhtLbfRKyspDn6QeYEiRsjnlesdgYQ6f/eGGFOxYBfcy5eD
YZ99IKJyy/sAhvTpyS5notDk+J0d8FAGa1g+pEY8vIQqJ/6mBiKnP9ck+x+QwCBa
VDOcycpLtLH9yuHiIxZV7i6LrnZqdwIXl0M1x9dbJj0ujGt/O5DzSSwzqnCN+VdR
SOXKUEjFkrD9ClDXIFsrPK8UQJwLqkPjpIJm1qo5A8FNlgXkieM9zQ5Y2aJxCnpC
oOV6syREiNJbJ/9pGFMvZIXXnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLVJm8N
PurKWVmuQgrgVcPinUM3MB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE
QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv
blRpWWoxLXlMMlZWQ3o3X2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0DmdVWr0pXPB4hyNhAfinGa9F/z0mFQzcGSj+TnSR5Yza0nhuKY1U
ss5SppW303lT7y3tFEJe73OnZNdbdq9SWS4njCJT8hhVnc96/3AttoGRof1QD9hn
jREnnTRUm238nNtW9Trviq64hWDHxfPPzr0doLG6l78+yDHC32SnVtBaDybJqBKG
1Iqp7ZNJWEi5Rwm07l54WZeyYxGu1cCmiv9+lsg4qbL2WvCnWjTpwnTury2mKjyf
plGO955umthM6zlKwH/B5MEt7h6Uj4XaFeEKhpJJRwe4GJU6qXfyT8AWy6mlieBK
UGpUF/n2ggMffGlH0FwR3I0HUTkupuFx
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:25:15 2026 by rpki-client