This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
File:                     3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json)
Hash identifier:          zv+VeGoPFzPUI7U7T/gJ4iKlRBUF/OXqi1mpd1RynGk=
Subject key identifier:   0A:73:4D:8D:6F:4F:E9:D8:7B:4E:0F:D6:31:0B:0A:BA:A6:B1:68:57
Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
Certificate issuer:       /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
Manifest number:          B6
Signing time:             Fri 23 Jan 2026 05:12:25 +0000
Manifest this update:     Fri 23 Jan 2026 05:12:24 +0000
Manifest next update:     Fri 30 Jan 2026 05:12:24 +0000
Files and hashes:         1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: evJlgc+S58JOkapo+HxyKCVhh4SfKaK4uAjSNWLPZ+8=)
                          2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: K1TsrB7lXsH/fW2abyndjpFmYzXZ1LPW0tQouW6VlW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762
        Validity
            Not Before: Jan 23 05:12:24 2026 GMT
            Not After : Jan 30 05:12:24 2026 GMT
        Subject: CN=69730338-b796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:f9:d8:ee:2e:e6:33:e8:20:74:0e:d3:a1:
                    59:13:b5:44:41:f2:69:64:30:3c:5f:78:83:2b:03:
                    61:6c:77:86:6a:c9:30:b5:e6:8d:27:51:b3:fd:94:
                    82:e9:05:12:7d:a8:cd:8a:66:0c:68:70:be:cf:85:
                    fa:cd:73:64:38:76:8f:8f:5a:13:8a:12:f8:f0:c5:
                    df:24:50:f5:38:8d:e9:ed:00:2c:e7:8d:eb:5f:3a:
                    68:66:49:8b:de:31:dc:90:f9:ec:0e:67:ed:94:e6:
                    d7:43:b8:07:4a:96:60:36:ac:56:fb:13:44:47:aa:
                    23:7d:ad:09:77:5a:ef:55:c1:3f:90:e4:4c:d4:0b:
                    69:14:17:c9:ea:22:f2:91:af:3b:61:7c:21:4f:cc:
                    63:01:a2:f8:38:fd:a8:d4:29:dd:33:f5:c9:53:47:
                    61:a8:8f:6d:e0:8b:e0:85:65:47:1d:52:b8:cb:7e:
                    6b:f0:73:24:2a:c2:3f:15:2e:dc:05:76:0d:d7:f2:
                    5e:90:ec:9a:f4:47:49:ab:b5:8d:17:b8:13:ac:ee:
                    33:21:18:7f:05:0c:ec:fa:0f:51:af:3b:a6:f2:0f:
                    b2:76:9a:cc:be:e4:0d:60:3e:d9:a6:a2:8e:32:ab:
                    5e:f8:44:78:36:61:73:cb:a2:ca:c4:34:72:7b:01:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:4D:8D:6F:4F:E9:D8:7B:4E:0F:D6:31:0B:0A:BA:A6:B1:68:57
            X509v3 Authority Key Identifier:
                keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:9a:49:24:e0:3a:92:dc:89:51:08:dd:fe:53:db:e4:87:
         07:cc:41:56:07:ea:77:26:37:0c:3e:20:90:42:3a:71:33:3b:
         a7:61:00:81:06:4b:23:c3:64:a2:14:61:70:68:9c:e2:b6:7b:
         a6:48:ee:42:24:99:76:97:32:52:26:9b:54:8d:69:47:a4:ab:
         92:c5:f0:79:9a:ff:c9:41:9f:89:79:92:e6:fa:99:8f:09:03:
         56:74:06:69:b3:6a:ab:04:ea:e1:94:25:43:9b:ef:9a:60:e4:
         96:77:10:52:ca:f1:5e:d6:fb:9b:d9:c7:69:50:80:a4:76:eb:
         79:6c:0d:80:d7:e5:b1:a6:ed:ae:ed:ef:a0:b9:44:42:53:d7:
         72:ca:68:9b:90:f9:ce:a9:43:bc:0f:3d:d0:57:8d:56:d4:7c:
         b2:a2:fa:aa:1a:6e:32:20:e8:6d:6f:2c:1a:ec:32:db:ae:3d:
         ba:d6:61:e6:f6:85:7d:3e:8e:58:eb:98:7a:56:04:28:04:5e:
         29:9c:c4:ce:08:f9:59:44:49:dd:aa:4b:89:50:65:a8:e3:a1:
         41:4f:65:d4:f1:91:6f:cb:1c:c8:b9:9d:b5:1f:64:ba:a3:ce:
         02:cd:47:4b:cf:b2:64:99:d6:98:e4:4a:e3:6f:cd:b9:95:3c:
         f1:62:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:12 2026 by rpki-client