This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
File:                     d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json)
Hash identifier:          F4ysK4lU5/NNBt9HJmzgFZ/1VQeWlY9YDDUjFX0IGW8=
Subject key identifier:   56:A5:70:44:13:37:89:AE:66:48:B6:82:EE:2A:E9:99:DD:52:68:DB
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Certificate issuer:       /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial:       352E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
Manifest number:          350F
Signing time:             Sat 24 Jan 2026 14:23:36 +0000
Manifest this update:     Sat 24 Jan 2026 14:23:35 +0000
Manifest next update:     Sat 31 Jan 2026 14:23:35 +0000
Files and hashes:         1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: mXJgJR65kY4ssAsLX8P7MbLvOizPeOY7lK9ThS90YrE=)
                          2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: BCeU9uO3b/ub2zjygM6mgzVMfSicIdTTaBeS71Jzvv4=)
                          3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: 0amdvpZS8kvZkflvgG1al3XfPNPeR60F7dyh2uQujHU=)
                          4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: NVBa+rlRQ5H1NEvktI31o0guFs4FS06Nk3OMy3vLg74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
                          rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13614 (0x352e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
        Validity
            Not Before: Jan 24 14:23:35 2026 GMT
            Not After : Jan 31 14:23:35 2026 GMT
        Subject: CN=6974d5e7-7100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:a7:1b:8c:ce:64:38:60:2f:5b:82:a6:ce:
                    a2:2d:34:99:3e:16:67:b4:96:24:2c:d9:51:b1:52:
                    31:fc:cb:a5:94:3a:43:89:b4:82:50:f0:c7:19:5e:
                    11:f1:92:2f:51:17:61:51:a7:88:8f:ce:21:00:d0:
                    17:4f:77:71:3f:9c:0b:2f:d3:16:4e:66:3e:5a:13:
                    45:2d:4c:69:5c:ba:49:9a:66:5d:0b:ed:d4:63:79:
                    82:81:72:2e:1a:bd:bc:97:ce:69:95:47:d0:f1:10:
                    4b:27:fd:90:03:88:56:4e:14:26:58:bd:ce:67:a5:
                    3c:be:6d:68:5b:f0:38:a5:86:d1:8e:01:c9:0c:86:
                    66:15:3c:05:37:33:c7:e5:aa:1f:3b:d1:8e:d2:fd:
                    5d:bd:26:c4:19:f9:f0:56:79:de:a8:07:37:cb:f8:
                    15:3e:91:b5:9c:0c:a6:ed:2f:a4:11:04:82:4b:35:
                    a0:d7:51:76:8c:02:32:da:a1:b8:78:74:37:2d:44:
                    1e:e0:27:99:fa:f3:d6:09:da:e0:9f:5e:9c:4d:c5:
                    a9:57:44:d0:59:80:d0:68:62:fb:1a:4b:09:70:7c:
                    10:42:88:02:1e:5a:47:89:b4:c2:bf:f6:b4:a3:34:
                    47:06:f6:5a:1f:ba:d8:10:ee:f2:b3:a5:3b:49:85:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A5:70:44:13:37:89:AE:66:48:B6:82:EE:2A:E9:99:DD:52:68:DB
            X509v3 Authority Key Identifier:
                keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:61:a8:97:bb:b4:c1:d8:ae:6c:7d:6d:1c:01:49:1b:9e:3a:
         74:91:57:88:f8:34:cf:5b:71:39:d1:8a:34:d1:a0:3c:0b:d8:
         2b:4f:01:06:f0:ab:2c:5b:c3:38:ba:31:e5:17:de:dd:db:00:
         d8:fc:28:bb:38:d4:4d:ee:28:01:b4:f3:ee:6f:bc:de:2b:59:
         cd:90:59:af:7b:bb:73:dc:1d:21:e3:bd:76:97:3d:6b:04:cf:
         60:06:e9:f2:32:d6:27:dd:74:6e:63:2c:f1:0a:18:3f:9b:4b:
         b2:72:34:b2:08:e1:e9:8c:96:0e:5d:e2:ac:54:24:25:24:3c:
         e0:e8:32:c3:75:bb:04:63:af:c5:fd:5c:3a:08:61:e4:2c:26:
         06:04:b2:f7:0c:e1:9f:9a:4b:72:30:fc:f2:73:69:58:29:a0:
         d3:08:c6:df:79:8d:f7:9e:67:13:62:4a:a4:c5:ae:ae:cb:39:
         43:84:cb:1e:9f:8d:4a:7a:0f:02:99:8f:aa:f3:d3:0f:51:b8:
         04:31:b5:78:68:b0:be:38:48:21:43:e9:2a:a5:49:11:44:09:
         f8:2b:85:bd:4a:66:6a:89:37:d2:ed:1d:f6:c5:f2:43:a5:ff:
         48:72:90:fe:7a:25:0f:0c:b2:92:bb:37:6b:20:ab:a4:52:ce:
         bb:e6:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:28 2026 by rpki-client