This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
File:                     jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json)
Hash identifier:          YNwg7hbD5djaUP3pvH/+R4MFXDjMW+Bw3EhVtQpTHi4=
Subject key identifier:   C4:E9:D2:0D:3A:D1:99:09:2B:C2:30:61:C8:1D:21:B7:8C:73:74:9B
Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
Certificate issuer:       /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
Manifest number:          0196
Signing time:             Fri 23 Jan 2026 02:42:53 +0000
Manifest this update:     Fri 23 Jan 2026 02:42:53 +0000
Manifest next update:     Fri 30 Jan 2026 02:42:53 +0000
Files and hashes:         1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: H8YgZtGn7hE8kGkhsnqJa2sp+LDip3VlCjHdmnGXBq0=)
                          2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl
                          rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
        Validity
            Not Before: Jan 23 02:42:53 2026 GMT
            Not After : Jan 30 02:42:53 2026 GMT
        Subject: CN=6972e02d-3b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:be:55:4d:0d:d0:6b:11:3b:68:f5:16:88:
                    7a:82:ce:66:a5:64:c8:f1:46:8b:76:b3:de:f0:69:
                    ea:7b:94:72:d5:1f:59:99:1e:92:f2:ca:2d:4d:c4:
                    40:9f:f6:a8:0b:7c:bc:05:09:ef:8a:a5:45:90:42:
                    6d:c4:bd:06:fc:4f:e8:b5:0f:72:92:62:45:74:79:
                    3c:36:c1:0a:e7:02:c0:68:90:b0:a6:0d:17:ec:68:
                    91:07:48:3e:ab:c8:18:ed:0f:4b:f3:67:84:26:73:
                    38:b2:e5:47:28:bf:6b:9a:27:d1:f4:89:38:24:82:
                    b3:1a:1c:46:37:b2:6e:1a:66:cd:a1:9d:69:2c:3d:
                    ac:bf:de:53:fc:b3:cb:2e:02:88:62:9c:80:d8:01:
                    4c:47:3b:88:b6:7e:90:64:cf:1d:ff:19:22:96:14:
                    b1:90:a8:b8:a0:5d:68:c2:de:c2:99:b3:ea:32:57:
                    cc:c5:a1:bf:a1:f5:2c:13:45:23:07:8d:e7:a5:a9:
                    3d:9f:81:22:9f:7c:31:33:fc:56:06:50:d5:be:bb:
                    1f:83:21:65:99:ba:35:f9:11:e9:ca:51:af:0b:7f:
                    7d:76:42:7d:41:3f:98:0b:e9:8d:73:23:4c:89:4b:
                    a7:df:df:9d:9a:72:57:de:13:70:75:fa:d9:c7:7b:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E9:D2:0D:3A:D1:99:09:2B:C2:30:61:C8:1D:21:B7:8C:73:74:9B
            X509v3 Authority Key Identifier:
                keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:08:07:cf:73:cc:0f:04:fa:83:fb:6b:c8:a8:2d:43:e7:62:
         43:97:dc:3e:c7:51:aa:ea:f1:01:fe:bc:f2:ec:08:28:fe:1a:
         1a:e4:c5:90:30:f3:1a:ad:ca:99:d1:76:f2:be:27:70:25:e4:
         96:b5:7c:7f:1e:2e:a7:7e:c9:5a:b1:75:1e:ae:84:18:f3:12:
         d9:0f:47:a9:8a:03:2e:da:c8:aa:0b:8d:94:1a:37:ae:9f:00:
         8f:8b:e2:dc:a3:1a:53:0b:8b:d3:f6:48:63:87:2e:53:86:97:
         f6:b0:d3:18:99:55:df:37:d6:af:63:89:4b:dd:a7:21:55:f8:
         bd:fa:bf:95:d5:dd:9a:2a:5f:05:49:0a:1d:a4:8f:39:c0:9c:
         24:ce:d6:f5:16:63:95:86:57:f8:3e:78:9d:4a:40:80:ec:0a:
         c4:3a:7e:5e:39:c8:fd:ca:5a:07:94:19:9b:88:9b:c4:ae:b8:
         c4:9c:c0:be:9c:eb:c6:fe:24:fc:8e:8b:9e:0a:be:3c:6f:ba:
         cb:91:c3:96:58:1c:ec:2d:55:3d:bf:9b:01:13:59:fa:c2:90:
         bd:cf:c3:68:97:80:79:41:4e:0d:84:2c:21:58:3f:d2:75:db:
         bc:80:f6:fa:c5:97:40:1e:87:94:6f:8d:ad:f7:ce:5b:c0:7c:
         1a:13:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:15 2026 by rpki-client