This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
File:                     elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json)
Hash identifier:          Ta5cqhzB1OGjMaf+o+jjrANNB9Q2k5YRUVBWKrq3WcU=
Subject key identifier:   C3:A5:3C:CA:96:70:FF:5F:E0:E8:51:AA:2F:F2:D7:59:7E:B2:13:BD
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Certificate issuer:       /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial:       0D24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
Manifest number:          0D1A
Signing time:             Sat 24 Jan 2026 17:41:26 +0000
Manifest this update:     Sat 24 Jan 2026 17:41:26 +0000
Manifest next update:     Sat 31 Jan 2026 17:41:26 +0000
Files and hashes:         1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: +SeqkCdMxVRTmk/Esw3p2Ct89jKCScUUKDsjFj1jVqM=)
                          2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: ZbqSCThADHHYWGKzVNAbVRxCH9aXKYjL/LVme0xsR9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E
        Validity
            Not Before: Jan 24 17:41:26 2026 GMT
            Not After : Jan 31 17:41:26 2026 GMT
        Subject: CN=69750446-20ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:5d:99:a5:48:6b:ad:e4:dd:ae:ca:17:27:
                    54:5f:3b:59:c5:9b:83:09:54:0a:b6:23:d8:e4:6c:
                    18:cc:58:66:20:75:41:9e:95:91:96:e7:db:43:81:
                    52:45:04:6e:8a:53:69:ae:27:aa:6a:95:96:2c:a0:
                    5a:cf:f3:c0:54:78:48:29:cc:e4:23:df:8a:b3:ae:
                    47:56:c1:cb:a1:f6:ed:99:12:a3:29:d0:ba:b2:4f:
                    d8:97:83:e0:4f:4f:58:8f:a8:76:f9:2d:31:22:c1:
                    6b:76:88:d6:85:f1:e9:b4:bd:94:ea:ee:e2:c4:b6:
                    90:6b:d2:4a:bb:c1:79:73:3f:4c:10:ac:b4:6c:1f:
                    e8:c9:77:c4:7d:b8:37:e4:43:39:e1:05:67:af:a5:
                    76:07:aa:8c:46:0b:a9:6c:f9:ad:f6:b0:2b:da:79:
                    33:df:d2:ea:87:65:a2:5a:1e:ed:49:b6:80:f8:d4:
                    dc:26:1f:bb:8c:0c:db:ae:d1:a3:66:ee:7a:eb:1e:
                    80:1a:19:5e:03:ac:fa:ed:7c:2e:76:4b:16:0e:8d:
                    aa:04:6f:c6:f6:f1:2e:05:95:4b:e6:13:8b:66:91:
                    b5:d8:e0:5c:8a:5a:1e:04:a3:60:15:da:20:61:1f:
                    b7:10:cd:1f:31:a8:d4:74:35:7b:db:3e:83:f7:d0:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A5:3C:CA:96:70:FF:5F:E0:E8:51:AA:2F:F2:D7:59:7E:B2:13:BD
            X509v3 Authority Key Identifier:
                keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:d1:b2:d2:58:06:61:bc:9f:34:78:1f:9c:5f:b4:9a:5e:
         c2:96:c0:5c:ec:9f:00:a2:fc:13:17:bc:a4:eb:22:eb:b6:6f:
         fe:83:9e:ef:32:f3:8c:35:d4:a7:9f:43:4d:3e:c0:e2:e0:b1:
         c9:06:63:03:36:63:c3:5c:15:94:db:0b:14:7b:0e:d6:47:5d:
         1a:39:1f:85:1e:6a:de:46:50:99:b0:c1:c8:a5:15:43:b1:33:
         55:05:7e:c1:57:fb:ea:64:b2:4c:ca:ac:96:e7:f5:f6:67:7d:
         d5:fa:52:d0:98:0d:9a:24:87:cb:2c:b7:89:92:50:a7:18:d4:
         ed:1b:a2:d7:14:3b:cb:c6:d5:ab:9b:06:33:0e:ea:56:b3:68:
         23:9d:d1:0b:69:fc:ab:f3:bb:67:39:49:4f:b1:34:97:72:19:
         36:be:dc:65:d2:a3:a6:8e:64:29:54:71:a5:c3:98:e6:10:4d:
         a5:27:52:8e:7f:f9:3c:fa:79:c1:b9:f5:34:cc:23:f6:35:bf:
         44:ba:df:fe:1e:4d:d2:23:03:cb:0e:01:f3:f4:55:45:b3:d3:
         cd:2e:6a:ca:96:07:05:90:b9:79:42:1c:4c:8b:b1:92:59:47:
         8f:8b:8f:5d:82:e4:75:96:43:ed:3c:82:43:76:26:5e:1a:cf:
         d0:31:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:58:35 2026 by rpki-client