This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File:                     FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier:          69G8GvMWcafjBl5fXh3jKN112Ju4TwcFsPFxeMMnkwg=
Subject key identifier:   9E:74:54:72:B6:A2:15:29:E5:D7:EE:99:82:31:5C:87:1D:F9:E2:45
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer:       /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number:          012D
Signing time:             Fri 23 Jan 2026 03:44:49 +0000
Manifest this update:     Fri 23 Jan 2026 03:44:48 +0000
Manifest next update:     Fri 30 Jan 2026 03:44:48 +0000
Files and hashes:         1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: Prt1HTNSbh9KjZG8JI8f/dr3rw+6mTH5BjY0QQc/pJ8=)
                          2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: cjQ8z/DvzlqVIyc0XMrCXb6k6xXs+7KEwBIQYpqVtTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
        Validity
            Not Before: Jan 23 03:44:48 2026 GMT
            Not After : Jan 30 03:44:48 2026 GMT
        Subject: CN=6972eeb1-ec91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:97:fc:f4:b6:2b:62:88:c9:96:85:a9:29:
                    98:eb:a0:09:04:b6:06:34:54:0f:9f:34:28:e5:cf:
                    eb:48:b6:f0:09:d9:28:55:c1:a3:50:8e:a1:8a:f5:
                    5e:ba:92:6e:88:6c:02:28:e6:3c:06:bd:35:20:7b:
                    a8:18:c1:09:ee:b4:d8:fe:16:a0:c1:b5:54:7f:24:
                    20:47:4e:a7:32:22:1d:0e:92:7f:46:2d:be:6f:8d:
                    26:2e:11:53:25:87:62:cc:9d:11:df:52:63:11:77:
                    7f:8e:d8:ac:fb:02:42:da:90:d8:99:24:93:c2:5f:
                    e8:85:3a:a2:06:b4:d5:26:04:24:a2:63:86:eb:c9:
                    a4:dd:a4:62:55:19:d3:e0:ae:50:1d:84:2e:b0:96:
                    bb:20:a8:61:cd:9f:b9:ef:95:6f:a5:2f:52:8d:aa:
                    20:13:f6:df:36:ce:9b:26:43:9b:80:53:7b:ad:a4:
                    fc:b9:e0:ed:9c:15:8d:b7:a2:7e:e8:f1:bb:03:78:
                    c4:45:b3:b5:72:6e:07:18:b5:4a:fd:e2:18:e3:7c:
                    36:c0:1b:4e:bc:fa:8a:dc:cf:4c:dd:9f:23:ab:6b:
                    b1:f5:ba:16:2c:8f:d1:42:97:cc:db:d6:a0:87:8b:
                    56:2d:e1:96:fe:42:6a:bc:69:5e:de:48:58:00:80:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:54:72:B6:A2:15:29:E5:D7:EE:99:82:31:5C:87:1D:F9:E2:45
            X509v3 Authority Key Identifier:
                keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:82:75:10:e7:a3:e5:c5:ff:93:77:dd:03:cb:45:bf:66:
         25:86:0b:fd:97:35:c8:b3:ad:40:ca:93:c0:e3:96:08:2b:d9:
         0f:b8:7d:12:97:d6:4d:39:0f:38:41:3b:57:98:1f:93:af:c0:
         4f:b9:5a:cb:76:f4:19:50:9c:a8:bf:66:4b:2e:de:0a:6a:d2:
         cc:f0:63:1b:ae:81:3f:88:d8:6a:f0:be:9e:15:06:50:89:58:
         85:f4:20:44:58:76:b9:74:a8:88:73:76:55:93:ba:d0:20:0f:
         da:86:df:c9:0d:07:6e:43:2e:77:47:f7:4f:80:a5:0a:44:77:
         58:06:78:f3:81:a6:2c:e4:3e:33:7f:1c:ab:bb:86:49:e1:43:
         f8:b4:b2:21:1f:b9:5d:0c:5a:90:33:71:69:fa:ef:90:db:2d:
         d2:55:3b:ed:c8:44:ac:df:7b:bf:8c:82:ed:ac:6e:0d:dd:d8:
         7a:72:ec:25:5a:06:47:ef:af:a8:eb:f7:54:73:fe:73:a0:a5:
         de:16:91:fc:73:14:02:71:73:a6:3a:c0:7d:ab:19:50:ab:95:
         e9:ea:c8:c3:a7:87:87:80:2c:b5:1f:81:06:12:42:2c:67:56:
         ec:08:1d:63:1a:ca:49:97:0c:27:46:ec:3a:fe:20:11:8f:33:
         2d:82:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:34 2026 by rpki-client