This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
File:                     b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json)
Hash identifier:          tkQdcRJyUAloj4Gu6up79EihvYQEqxsJvfK3IRlu7z8=
Subject key identifier:   07:58:A2:EA:94:61:01:E7:E1:55:DE:9D:00:B5:0B:8F:DA:AA:60:9C
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Certificate issuer:       /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
Manifest number:          015C
Signing time:             Sun 25 Jan 2026 03:29:08 +0000
Manifest this update:     Sun 25 Jan 2026 03:29:08 +0000
Manifest next update:     Sun 01 Feb 2026 03:29:08 +0000
Files and hashes:         1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: +65H+91ckhbD+OmhPxDoojMOZLOXfZwPp5Y2IK8WsqI=)
                          2: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: fRP3NJ69rLlQTm+x/tKrEfvNNM+dik3rM5J3rzquHdo=)
                          3: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: v7IuFE0BzPTXRSJLbaCUBczf3498SLFTOxfRoorPtF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
                          rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
        Validity
            Not Before: Jan 25 03:29:08 2026 GMT
            Not After : Feb  1 03:29:08 2026 GMT
        Subject: CN=69758e04-7cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:2f:35:13:ee:bd:3f:9c:fb:98:57:6e:4d:
                    fd:a2:b7:ff:65:03:a8:95:ac:8a:84:ed:bd:b3:27:
                    e7:e5:39:03:23:ae:e3:1e:b4:24:2f:47:41:f7:79:
                    a5:04:47:fe:1b:e1:5a:6c:63:9d:fa:d5:c1:7f:fa:
                    8f:5f:1b:75:45:ac:26:73:5b:1a:22:d8:32:a7:c4:
                    ef:88:89:6d:e1:af:77:be:5b:5d:85:ba:5b:de:24:
                    e9:8d:78:74:15:2b:2a:f6:64:37:a4:9a:5f:2b:f5:
                    d0:7e:05:56:b0:59:bb:b0:10:7c:db:e2:06:b4:5f:
                    c3:85:4f:2a:33:c5:40:d5:2b:3f:7a:88:ec:c8:5d:
                    71:44:c0:fc:9c:b6:5b:d6:24:29:b6:95:8a:d1:3a:
                    04:be:af:b2:d8:f6:4d:27:ac:ab:ac:9b:79:59:a8:
                    58:f2:9c:e7:a0:d1:99:1a:aa:bd:c2:fd:1d:e5:40:
                    fc:19:c3:0c:57:1e:e4:e2:db:51:78:21:bd:1c:a3:
                    8e:87:e4:09:89:5b:e4:99:7f:05:a9:2d:5a:00:7f:
                    27:70:de:c6:dd:a8:ea:16:dd:30:e7:98:58:b8:9c:
                    8d:be:d3:c1:6e:6f:cc:17:46:fc:64:d9:37:d8:8d:
                    df:2b:82:ed:1f:11:13:e9:82:7f:ab:12:7f:33:c2:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:A2:EA:94:61:01:E7:E1:55:DE:9D:00:B5:0B:8F:DA:AA:60:9C
            X509v3 Authority Key Identifier:
                keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:df:a4:14:c9:a9:d5:0c:57:0f:d5:20:ee:28:7e:0b:df:
         3d:05:96:a4:0f:6f:5d:a3:ff:de:b1:26:e2:72:f9:f0:0c:18:
         52:9c:4f:8a:ac:4e:b1:28:0c:ec:59:ce:c3:89:73:51:23:66:
         3a:21:f7:8a:b7:2c:a9:3d:8e:6e:26:a7:ba:eb:e5:f8:b8:9c:
         12:d0:47:4a:9b:5a:8d:ce:5e:13:74:67:bd:e1:a9:48:ab:e7:
         c2:b3:6e:c0:37:0d:49:70:f5:3d:af:25:88:a0:72:45:57:79:
         d0:23:c6:a5:bf:79:ca:fb:50:9c:1a:0a:d8:b5:26:c1:c1:3c:
         81:ff:96:fe:bf:c2:8a:fe:72:b3:34:fe:03:89:9e:b4:19:df:
         36:82:1e:a1:8e:3a:ad:c1:5e:f0:75:12:f6:0c:ae:d2:23:2a:
         b0:76:ba:7a:a5:10:2b:0a:22:14:f5:86:a4:48:fe:eb:5e:eb:
         81:b3:97:78:81:5d:9d:4c:b5:0f:76:b0:63:63:0e:a0:0f:dc:
         4d:d2:0d:9c:6d:33:b2:17:d7:b1:52:df:50:98:ea:b7:08:5e:
         59:cc:b4:03:79:49:b9:17:d2:2e:de:d4:ac:ea:9e:39:69:e3:
         e3:76:15:8b:c5:12:12:ba:ae:a9:66:67:07:f4:54:ff:73:97:
         83:62:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:59 2026 by rpki-client