This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File:                     mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier:          sBPDf9UwY8k2lP2ZjxRaK+FHXuMo5xZ6XS4VMJfVuo4=
Subject key identifier:   B7:C1:D3:AD:8E:1A:49:10:79:CB:4C:82:46:B3:66:07:3F:68:31:11
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer:       /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number:          0253
Signing time:             Sat 24 Jan 2026 15:52:30 +0000
Manifest this update:     Sat 24 Jan 2026 15:52:29 +0000
Manifest next update:     Sat 31 Jan 2026 15:52:29 +0000
Files and hashes:         1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: 7TEPS1YhdyXDtA7QUIUq1A12PCmWX+wgjSjh01jE8fg=)
                          2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: DDQFrWham/U59GyXcADDkISHhTPDVVw43nsQI5/mJPk=)
                          3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: QOYUSMPGM1+90C8A1BEomdU9Hz2wdTfmlCl8DZMPUHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
        Validity
            Not Before: Jan 24 15:52:29 2026 GMT
            Not After : Jan 31 15:52:29 2026 GMT
        Subject: CN=6974eabe-c8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:08:07:d9:0a:9d:92:04:05:f3:b8:67:79:
                    26:9f:aa:78:f3:2a:8f:ce:78:c4:ad:c0:e8:bb:4d:
                    0b:20:76:50:9c:f0:88:e3:f8:19:86:5f:7b:1e:55:
                    f9:86:bf:f2:f9:77:77:67:f1:cc:f3:0e:3a:1d:55:
                    b5:f0:ca:c6:95:a8:32:70:ab:e3:56:03:24:99:9f:
                    89:db:56:9a:f2:f3:ab:95:23:2b:82:d5:b5:3a:9f:
                    f5:74:a8:95:f6:58:c8:02:fc:07:7f:e7:ed:c6:60:
                    cb:60:e6:6b:a2:c7:63:b4:25:f6:3b:68:fe:32:1f:
                    f3:4c:8e:73:a2:13:b3:08:29:35:91:7b:90:5e:7f:
                    21:8c:18:95:33:a8:de:47:2c:6a:bf:91:77:37:e3:
                    ef:00:68:57:84:0c:ed:53:0c:ae:f2:ad:30:b5:d7:
                    86:bd:fb:4e:d3:ec:ab:7f:c9:4c:a7:fa:6a:d3:49:
                    d0:dd:50:b6:23:4e:84:cf:c3:88:de:65:8f:1f:f2:
                    7e:c0:f2:bc:dc:50:48:3f:60:cb:01:46:2c:20:59:
                    2f:e1:af:5b:80:92:f1:0c:3b:49:69:fc:2f:49:a4:
                    48:07:87:fc:1a:11:a7:24:51:ec:ca:eb:ed:5e:60:
                    3e:96:99:37:88:9f:48:dd:4a:4d:e7:aa:09:ab:41:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C1:D3:AD:8E:1A:49:10:79:CB:4C:82:46:B3:66:07:3F:68:31:11
            X509v3 Authority Key Identifier:
                keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2e:94:5c:81:47:2a:fa:ea:97:45:df:3b:36:11:2b:61:d1:
         6a:1e:d8:84:28:ef:07:34:f0:29:82:d0:88:2b:3b:e6:fb:66:
         99:63:be:2b:5b:6f:21:1d:67:a7:d1:6f:ce:a9:47:5a:8f:6d:
         31:84:7f:54:d7:4f:f6:22:ee:7e:47:4f:4b:66:7f:9d:02:82:
         f4:7b:79:e2:68:20:23:90:f4:1a:22:1d:fc:91:21:40:7a:dc:
         c5:e2:6d:9a:7d:bf:a3:dd:f9:ca:52:41:80:b0:55:4d:44:f0:
         9c:2d:d6:1a:fd:18:91:40:54:7e:9e:5c:7c:ab:ce:86:fe:7f:
         90:d7:25:2a:0b:cd:e4:2f:09:17:5f:65:2c:6d:f6:f9:3b:5b:
         a9:7f:85:57:05:ff:57:eb:0f:7a:05:6f:c9:04:a2:b1:d8:2e:
         fd:16:88:0c:7d:36:9d:09:d2:a1:21:89:12:c2:09:db:6c:c0:
         58:b6:b1:37:05:8d:40:2c:b2:e4:0e:80:e0:10:07:ba:93:aa:
         a9:01:71:0d:57:33:44:25:4a:9e:78:06:cf:59:41:2b:d0:03:
         6d:8b:eb:51:0a:fb:e5:c2:51:b7:f0:80:21:95:65:af:17:e7:
         b2:6d:32:a5:08:7a:83:e0:c9:d6:26:50:06:f0:ac:0b:af:59:
         37:e0:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:25 2026 by rpki-client