This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
File:                     RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json)
Hash identifier:          /BxRdwqUP8yl7MksffeRx+kaq27Pf9aOphYLts9+vMg=
Subject key identifier:   8B:38:2A:4B:83:F2:5F:52:EB:D6:2A:2C:59:89:E0:41:35:65:BE:4F
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Certificate issuer:       /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
Manifest number:          02F4
Signing time:             Sun 25 Jan 2026 00:25:47 +0000
Manifest this update:     Sun 25 Jan 2026 00:25:47 +0000
Manifest next update:     Sun 01 Feb 2026 00:25:47 +0000
Files and hashes:         1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: KvxtyKCmnv1SZH9MDkSh74KwKH2iO9IwCw56EMCXCIM=)
                          2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: M5cm8ltbxVdRcxdqwX20eH12vgkHWhKoQMG7Vy7tBQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
        Validity
            Not Before: Jan 25 00:25:47 2026 GMT
            Not After : Feb  1 00:25:47 2026 GMT
        Subject: CN=6975630b-e2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:06:8f:7e:3f:4a:fc:5c:e0:7a:e0:4f:d5:
                    eb:30:45:a3:fc:7c:4e:19:1f:d4:c3:da:c6:0e:32:
                    a9:5a:a6:e1:83:fb:15:a0:f9:92:d0:fb:f3:d2:52:
                    90:83:76:bb:b5:c9:93:21:bc:16:98:e3:a4:9c:6a:
                    8e:99:6a:11:39:63:1d:36:72:be:23:16:29:0b:18:
                    f3:0d:73:dc:ce:08:d3:ba:a0:19:c8:91:8a:79:71:
                    d4:7e:85:d3:f6:a1:a0:73:e2:12:96:44:0d:ab:37:
                    0e:8f:c5:93:b2:ef:1f:e2:0f:6e:2a:5c:6c:62:12:
                    3d:09:14:fd:39:fa:76:30:fc:85:9b:f3:27:81:ff:
                    26:c6:e3:fe:99:5f:b5:91:ad:fb:37:26:78:21:fa:
                    0b:30:31:49:48:34:be:bb:f7:ba:15:53:7e:d3:57:
                    de:02:18:5e:24:f6:c7:6a:39:42:40:84:32:b0:3a:
                    f4:4b:95:de:a4:67:d7:67:88:73:69:20:7e:32:76:
                    43:dc:b1:dc:4e:32:52:ca:83:84:1c:4e:ae:55:59:
                    c7:49:0b:f2:4c:17:c6:2a:6a:f3:09:e2:ea:d4:c3:
                    6e:9f:34:df:aa:a0:68:23:a7:dc:ea:c2:d3:21:2b:
                    b4:75:76:0c:80:2f:57:ff:cd:bc:db:5c:27:32:b1:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:2A:4B:83:F2:5F:52:EB:D6:2A:2C:59:89:E0:41:35:65:BE:4F
            X509v3 Authority Key Identifier:
                keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:38:7a:2f:e8:88:f9:df:09:1a:22:8d:9b:7d:3f:93:83:
         9e:1b:3c:84:ec:c9:3c:47:2a:c2:84:ae:d3:c2:d1:9a:d1:59:
         fc:16:ac:9f:d0:b4:16:1d:7e:c7:fb:7c:c7:d9:e4:2d:c3:8c:
         48:17:1b:25:a8:5e:91:cd:68:33:6e:8b:10:94:1c:ed:a8:18:
         f6:f7:bf:01:5e:27:f2:bb:de:58:5e:76:a3:49:8a:55:65:e7:
         63:bc:f9:52:03:c6:dc:0e:bb:3a:1d:b7:03:d3:57:47:e6:88:
         16:e4:6b:45:58:48:d3:35:84:ee:4b:ad:1e:cf:c9:b6:46:c0:
         ea:1c:14:2e:53:81:18:c2:a9:a5:4a:e4:f5:7f:cb:01:2d:5e:
         c4:1c:c4:5d:0b:3e:5d:da:c4:80:10:a1:18:6c:d4:96:0c:88:
         8f:f8:ce:f7:b5:e9:05:db:74:a2:3e:49:d2:49:b5:6b:b6:b7:
         3f:a7:b5:13:8a:03:c9:c2:67:d3:74:3a:fa:d0:44:cc:ee:c0:
         4d:d0:76:69:ee:06:44:5c:cc:30:63:ca:b8:11:bc:e6:ce:40:
         6d:56:22:3d:ce:08:bb:95:b5:66:b9:3a:42:61:a7:9e:8e:d3:
         86:e2:af:6f:89:6b:c5:ce:f7:e9:e5:9f:0e:88:b9:59:72:75:
         24:bf:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:04 2026 by rpki-client