This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
File:                     rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json)
Hash identifier:          EGd7I3Fw+pBOgteDteTEJ9nucBSGjL9C8Rrhf3MX1ME=
Subject key identifier:   88:E3:64:1A:4C:56:08:15:30:9C:D2:B8:5B:A0:10:6E:B3:BC:1C:A2
Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
Certificate issuer:       /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
Manifest number:          3F
Signing time:             Sun 25 Jan 2026 06:29:47 +0000
Manifest this update:     Sun 25 Jan 2026 06:29:47 +0000
Manifest next update:     Sun 01 Feb 2026 06:29:47 +0000
Files and hashes:         1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: TimHuY5Ebw+HF++yvdywMaTTbZAv8f58h63dszoaDOI=)
                          2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: iL5Q8l5UWu94q64YaDJD+oexRS/HLLSzlzHuSDLmHTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
        Validity
            Not Before: Jan 25 06:29:47 2026 GMT
            Not After : Feb  1 06:29:47 2026 GMT
        Subject: CN=6975b85b-5bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:54:6d:d9:a5:85:9c:25:3a:7f:4a:ad:10:
                    c0:62:0c:82:8c:ae:c1:3e:aa:ea:8b:e4:b7:fa:d9:
                    48:91:12:a5:fa:d0:28:88:17:65:d5:73:8c:14:cf:
                    f0:81:6d:53:3c:e9:ad:01:1c:db:c6:99:fa:2a:32:
                    30:ee:cb:87:b0:ef:38:48:94:cd:b1:c4:92:9d:26:
                    e0:e1:22:bd:23:fd:6f:ff:b4:a7:6a:0b:b2:e7:e2:
                    6a:79:5a:45:7e:ee:6d:26:f4:1e:01:e4:86:79:bd:
                    62:2d:06:7b:9f:11:33:21:a0:9e:7e:c5:2c:de:97:
                    5b:7e:df:3e:e2:90:9e:10:29:ed:bd:15:7f:37:d1:
                    6b:fd:fb:fc:fa:0c:d7:1d:2e:a8:89:18:fd:12:50:
                    9e:59:bf:aa:2b:79:66:5c:7c:ac:bb:8e:2f:7e:e8:
                    69:94:2a:9d:10:10:c9:c1:7e:4d:49:b9:bd:7f:31:
                    9b:4f:b8:9a:c2:fe:2a:db:01:86:43:97:b1:74:be:
                    85:5b:91:49:9f:55:b8:67:81:b8:75:16:5c:2f:b4:
                    5a:0f:77:1b:18:bd:f2:60:45:60:42:1b:3b:2f:d5:
                    73:fb:56:03:67:65:72:26:6c:d7:ea:52:10:a5:5b:
                    eb:34:d3:85:2f:ba:e4:28:92:b2:9e:cd:c2:50:b0:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E3:64:1A:4C:56:08:15:30:9C:D2:B8:5B:A0:10:6E:B3:BC:1C:A2
            X509v3 Authority Key Identifier:
                keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:a2:96:2b:02:0c:5b:fb:e4:ce:5f:86:a8:9d:09:83:68:
         24:17:99:25:df:58:d1:0f:4c:3d:a3:97:c9:7c:b6:36:5e:0f:
         61:a0:8a:6c:30:5f:8e:8a:0d:07:35:a3:28:b1:e0:d7:33:78:
         f1:cc:7e:72:80:3c:8f:c5:79:bb:5f:f6:f2:12:6a:3c:8f:0e:
         12:4b:4f:53:bd:da:61:0b:41:52:25:00:c8:49:38:5f:09:c4:
         6d:b2:2b:44:57:ee:3e:3e:28:7c:4d:40:19:73:32:20:1e:27:
         45:dc:a4:8f:91:37:19:95:2d:74:c4:f2:27:38:88:19:4d:19:
         0e:be:fe:29:6d:5c:59:f0:fb:ac:f7:5e:a9:60:83:03:f8:a9:
         34:99:26:11:a0:cc:39:f3:c0:47:da:a1:1d:23:40:9b:23:6b:
         b0:0d:84:bb:e4:e7:ad:80:29:03:cb:bb:54:e8:25:e3:fc:98:
         ed:df:0b:d4:6d:7a:9e:80:9b:4a:5f:b7:fd:a5:0f:18:3a:fa:
         35:22:81:81:6a:65:59:a2:4d:4f:84:70:73:f9:29:b7:33:1f:
         8e:d2:48:1f:38:cd:3b:ab:52:d5:88:c8:01:2f:70:07:95:c5:
         a6:90:61:ef:0f:22:15:02:21:70:6e:32:e0:69:4a:00:58:9d:
         6c:d2:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:49 2026 by rpki-client