This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          9ey5H53hNH63pWJARNdx4XSyMMQws4sMWsH0StQoD4c=
Subject key identifier:   84:79:F0:3D:D9:44:6F:B2:9A:EE:88:58:5F:54:E7:17:FE:1E:F8:78
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          01B1
Signing time:             Sun 25 Jan 2026 02:30:14 +0000
Manifest this update:     Sun 25 Jan 2026 02:30:14 +0000
Manifest next update:     Sun 01 Feb 2026 02:30:14 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: YG/ftFytseoLLgiUQI4UJ5F+vh3VMCkIs+KxhyPtUbE=)
                          2: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: sUPjSnVrnjmDdoMwCFJp2zuEZdscR4LvuhmHJ1v7ZYI=)
                          3: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: zgC2BukFvqF6vF8m1zT1OqU7vAyEsCa9SdkeX8vwSl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Jan 25 02:30:14 2026 GMT
            Not After : Feb  1 02:30:14 2026 GMT
        Subject: CN=69758036-d6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:01:69:f0:8d:86:1e:4b:cd:ee:cf:53:4f:c3:
                    6a:c1:fb:09:63:16:df:35:1f:5d:73:63:8a:08:ad:
                    21:68:3e:ef:a5:e7:5c:0b:90:73:30:4d:58:07:59:
                    7a:f8:82:b6:87:3a:8a:b0:d6:08:db:95:56:4c:89:
                    ae:7f:9c:26:78:67:08:48:c0:43:83:cd:f0:7e:5a:
                    e6:69:16:e8:52:33:ed:ac:b8:a5:af:a1:d9:24:d1:
                    b9:86:6d:fe:71:08:b4:e9:54:b2:25:81:96:cd:f7:
                    9a:c4:5f:55:94:26:0a:88:1d:b3:71:54:a6:62:01:
                    27:8c:41:e7:62:a1:f3:1c:7a:b6:25:06:62:5f:e5:
                    ff:aa:7e:a3:99:de:34:37:2b:e4:2e:b4:a0:9f:62:
                    bb:8f:91:75:d7:2c:31:06:45:26:cd:b3:5e:49:14:
                    98:ed:ab:7c:7d:60:24:3b:6c:5b:9f:42:81:e4:75:
                    40:99:54:e7:88:64:70:f0:a5:b9:e7:48:4d:35:0f:
                    01:44:be:91:c2:04:28:8d:1d:92:6d:0d:78:bd:8a:
                    b7:8e:b7:62:50:fa:e7:66:fb:39:0e:1d:46:9c:ef:
                    59:05:be:d8:ec:bb:a4:3b:64:c3:31:98:47:a3:b3:
                    4d:a4:c8:de:06:05:7a:a9:51:91:47:c4:f1:83:ff:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:F0:3D:D9:44:6F:B2:9A:EE:88:58:5F:54:E7:17:FE:1E:F8:78
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:7c:56:1d:0a:56:3f:99:c7:eb:75:74:c5:f4:11:98:1c:
         94:73:c1:2b:74:f2:e2:50:8d:4a:78:ea:98:0e:a4:b8:be:67:
         9d:28:70:bb:02:47:25:cc:15:e8:62:15:0b:ee:b7:43:b9:42:
         2d:1a:f9:21:b4:b8:71:d5:c0:f0:93:3a:40:54:cc:c2:f3:9d:
         52:2e:7b:50:6f:49:2a:71:8e:60:42:ee:07:89:19:50:87:9c:
         00:10:6f:1e:b5:48:32:14:e4:a9:af:b5:fa:fc:56:2e:5e:d2:
         fb:ec:96:cb:0d:f8:ff:2e:62:ee:90:52:dd:c4:08:b8:dd:60:
         64:e3:29:7a:a4:67:c1:87:7c:14:b9:30:2d:40:f8:45:63:03:
         8d:c1:09:9b:c9:4c:b3:93:1b:a5:64:65:2d:66:5a:10:80:43:
         ec:81:25:64:10:b5:26:3c:a5:74:49:b7:1d:e3:85:e8:24:17:
         a4:6a:64:c2:0e:27:d0:4d:3a:ef:45:78:61:b0:f8:e6:f5:e0:
         ef:3d:c8:95:31:e4:2e:a5:2d:5c:d1:96:8f:e8:42:bc:50:43:
         41:85:05:e9:5c:c2:9f:51:a4:d9:02:9f:d0:32:8b:1d:cc:6d:
         da:86:88:e3:51:92:56:5b:a7:9a:3b:d7:ca:d4:21:62:48:8a:
         7d:3f:0a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:27 2026 by rpki-client