This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
File:                     c27zV-8j8z6sB7J06l4_7A3-5Yo.mft (raw, json)
Hash identifier:          hX4Rxqgbk23ZdJjQmTdeuw7JBvY/jDloX5jaqkVmqok=
Subject key identifier:   9B:B4:59:FF:EF:4E:C8:F9:46:B1:13:9A:43:48:48:F5:EC:8B:0A:33
Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Certificate issuer:       /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
Manifest number:          21
Signing time:             Sun 25 Jan 2026 06:52:24 +0000
Manifest this update:     Sun 25 Jan 2026 06:52:24 +0000
Manifest next update:     Sun 01 Feb 2026 06:52:24 +0000
Files and hashes:         1: c27zV-8j8z6sB7J06l4_7A3-5Yo.crl (hash: bUlkbG5rFqMp4N4Uu+ci0rxwam/ifWcxEmDysrpW+Gw=)
                          2: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (hash: BhWD1D5F6AoX/OQx6FffsVqmMuMl5MOwH+BY0j+gdT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
                          rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
        Validity
            Not Before: Jan 25 06:52:24 2026 GMT
            Not After : Feb  1 06:52:24 2026 GMT
        Subject: CN=6975bda8-c9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e9:bb:e7:2b:4e:61:cd:20:b9:6c:43:6c:d5:
                    b9:c1:d3:b0:d4:68:4c:9f:88:b1:fe:6f:6f:9f:90:
                    19:b9:7a:09:18:e2:04:b3:5c:6a:23:ff:b5:0a:67:
                    cb:02:41:68:e7:85:e3:f4:16:df:e0:74:04:c1:7a:
                    d3:66:57:26:ac:9a:44:8b:d3:92:5b:60:c1:1b:c7:
                    e1:3b:aa:82:fe:0b:a0:d0:da:70:6d:2d:2e:38:01:
                    2e:6d:00:55:23:5b:6a:c1:74:13:bd:53:c8:26:c7:
                    a8:83:cc:b3:fd:c4:0a:34:48:a4:d5:58:04:69:c9:
                    16:4b:bb:d5:a6:00:bd:b7:d2:1b:60:39:88:7a:e0:
                    a6:c6:f8:34:13:61:4d:c5:f1:52:c9:cf:7e:2c:89:
                    63:68:72:3d:db:27:a5:35:30:08:cf:ed:55:cd:83:
                    b8:59:1f:cd:f0:40:77:92:dd:ee:3c:55:9a:5e:bb:
                    d4:52:14:e8:96:3a:92:56:b4:6d:51:9f:63:74:fa:
                    96:f3:4c:be:e7:eb:a3:35:c5:1b:83:fb:da:0e:54:
                    b5:8a:51:2d:bf:92:56:4c:ac:f0:24:4a:95:2c:48:
                    b6:df:97:36:55:0f:15:36:51:b8:e6:5f:6e:00:bf:
                    c7:68:12:f1:7d:c2:ce:35:6f:3f:ba:b6:35:ce:fe:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:59:FF:EF:4E:C8:F9:46:B1:13:9A:43:48:48:F5:EC:8B:0A:33
            X509v3 Authority Key Identifier:
                keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:cf:0f:57:2f:aa:44:5e:b9:42:07:dd:d2:3a:cc:ad:ae:
         e1:fb:b8:5e:12:5b:73:32:f0:8d:72:74:1e:a6:ee:57:6c:5a:
         d1:a7:5f:30:ec:f6:df:80:76:7f:6b:cc:ed:54:c8:d5:5f:ff:
         aa:7d:33:4e:d4:97:f6:5d:b0:b9:86:2e:b6:3e:66:99:3a:6b:
         10:93:5d:0a:13:ff:e1:86:4c:da:54:85:a3:a7:5f:33:dc:f8:
         82:d9:fa:8e:f1:04:51:97:6f:42:06:ef:02:39:67:03:75:59:
         e6:13:97:b4:70:3b:42:d1:d8:97:e5:8f:b7:7c:84:c1:8b:af:
         36:f7:a5:e6:23:bb:aa:15:63:4f:a4:f0:3c:2d:c8:52:59:f0:
         6c:3b:3f:a5:53:95:fb:06:55:22:5e:48:c0:a7:06:2e:95:51:
         e4:93:fc:06:2a:07:2b:83:b5:e2:a3:f7:55:c6:78:48:b6:e9:
         b2:ec:92:8f:99:46:8d:e7:4d:90:ca:a4:7a:be:49:bb:43:d0:
         db:27:6d:80:4b:d4:01:4c:7a:59:93:61:d6:4a:0e:e4:3c:a1:
         e0:9d:c2:52:5f:53:ef:e3:bb:f3:73:f2:c8:2a:cf:74:fe:47:
         f7:c6:5a:7d:ee:30:d8:f5:45:bf:6a:de:44:e2:ae:67:58:c6:
         d7:bd:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:39:09 2026 by rpki-client