This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File:                     aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier:          frvR56ucWPvSGkXiG5Amy9luojaSm1XvIKaf/vW/W5U=
Subject key identifier:   B5:1D:77:6B:0E:1E:A7:21:0E:E4:32:5F:1E:D8:A2:47:B2:E5:44:80
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       0A48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number:          0A42
Signing time:             Sat 24 Jan 2026 19:09:22 +0000
Manifest this update:     Sat 24 Jan 2026 19:09:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:09:22 +0000
Files and hashes:         1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: FohgWbi3QGUXvIl0g2SxAw/Rpx66ikrNkh/zlTOfVRw=)
                          2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: Jan 24 19:09:22 2026 GMT
            Not After : Jan 31 19:09:22 2026 GMT
        Subject: CN=697518e2-1fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:83:86:60:f4:c4:db:ae:71:a6:fa:59:ed:
                    d4:21:58:69:b3:cd:79:16:b6:e0:d0:2e:be:88:dc:
                    d7:8e:ee:9c:9a:f4:74:09:12:2f:80:83:ec:a4:6b:
                    5d:6a:cb:24:e2:33:2e:65:7b:e6:03:8b:56:c6:7d:
                    fd:24:cd:25:73:8b:33:38:13:65:7b:d9:61:16:cb:
                    96:f3:6d:6f:80:36:54:59:a6:eb:00:f5:51:04:84:
                    d4:88:2a:17:fe:15:60:d8:77:73:a6:70:8f:46:fe:
                    2c:6b:d8:72:8b:02:8e:cb:ea:31:f8:a7:40:1b:15:
                    a9:e0:a9:1f:a6:81:30:dc:fe:f9:d4:6c:0c:89:03:
                    ec:20:77:06:6f:83:9a:55:b3:c3:dc:3c:ed:09:36:
                    36:b4:f7:32:67:ae:a6:4e:3e:75:2c:ff:c9:bb:67:
                    b5:58:12:ac:ee:85:e1:25:10:23:0b:64:12:f1:93:
                    a1:05:30:0f:a0:bd:ec:f1:60:a0:a7:c1:eb:a1:2c:
                    90:80:5b:5a:81:25:16:d7:5f:10:37:99:da:d5:e1:
                    2d:8f:a5:5e:d2:57:b1:b8:8d:44:c3:2f:a2:99:9d:
                    8a:63:56:6c:70:21:73:4c:27:67:05:6c:52:d1:b5:
                    39:79:eb:73:37:cc:75:20:f9:0e:d1:e4:41:7a:2f:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1D:77:6B:0E:1E:A7:21:0E:E4:32:5F:1E:D8:A2:47:B2:E5:44:80
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:05:db:54:c9:c6:c6:d2:d2:6b:19:f9:82:0e:74:be:a2:8e:
         0a:a4:6f:57:18:00:b0:93:24:c5:22:d9:1b:e0:1e:d1:64:6a:
         97:66:da:aa:54:1c:7a:39:62:0e:54:f1:52:a0:1f:06:3f:fe:
         0d:51:3e:aa:56:ca:ed:5f:64:38:16:94:44:be:db:9c:eb:1a:
         07:9d:32:5b:25:b6:0d:e1:72:46:33:0f:57:86:54:1b:9d:6b:
         86:11:75:81:a3:8f:68:3b:49:b1:67:fe:21:6a:0d:04:5a:3f:
         3b:ee:58:12:85:fb:e9:69:8a:e1:3b:b7:81:3d:4b:8a:82:c8:
         91:a7:9e:b9:a8:3d:fc:8d:72:a1:be:7b:bf:46:59:8c:a2:38:
         d9:9e:74:a7:57:fb:17:23:89:53:e6:c6:48:c3:ec:5d:62:72:
         a6:a2:23:e9:8a:30:f0:b0:9a:07:e0:33:df:48:a6:d2:a3:42:
         64:95:c1:1d:25:07:70:20:8d:f7:93:e7:ff:51:9e:22:0e:77:
         8a:21:b3:a9:17:d7:23:cf:38:89:f0:3b:7a:3b:a5:cc:51:3b:
         1f:36:37:85:88:49:21:70:e9:fc:2a:92:8d:ca:ee:17:51:11:
         f4:b4:5f:66:de:14:c8:e6:46:5e:4f:d9:ff:7f:d4:60:3a:ea:
         c2:3e:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:53 2026 by rpki-client