This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
File:                     n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json)
Hash identifier:          LlTups14wVu3MnUzkPxcMTTGBA7vKN1V3bA2VUVOytU=
Subject key identifier:   5A:17:8F:E2:63:EB:61:96:0B:D6:2F:2E:D8:BA:E6:19:E6:F5:EE:78
Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF
Certificate issuer:       /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
Manifest number:          024B
Signing time:             Sun 25 Jan 2026 00:25:50 +0000
Manifest this update:     Sun 25 Jan 2026 00:25:49 +0000
Manifest next update:     Sun 01 Feb 2026 00:25:49 +0000
Files and hashes:         1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: weJ3VZCkMWMztueNkemRm2cgjIiDMv9myNZQk0UYJl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7, serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
        Validity
            Not Before: Jan 25 00:25:49 2026 GMT
            Not After : Feb  1 00:25:49 2026 GMT
        Subject: CN=6975630e-dc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:6f:ec:55:88:56:4b:f8:d6:4a:5d:82:68:
                    95:c5:74:0e:0b:2a:6a:8e:49:0f:f0:12:41:6d:b3:
                    b6:9d:02:8f:d4:fa:95:43:51:69:2e:b4:7d:53:99:
                    2e:ee:83:cb:b3:78:90:83:34:f1:8c:f6:ee:be:1c:
                    55:88:ff:6b:87:1a:88:99:c6:8e:14:ff:d7:34:1c:
                    ac:fa:a2:ea:ae:f4:2a:dd:46:1f:c6:47:41:5a:4f:
                    5d:f2:4a:fc:28:dc:38:5e:b9:0d:bf:e5:27:45:34:
                    d5:98:8c:53:29:fb:73:8a:c2:88:ce:03:6e:cb:6a:
                    3f:0f:61:3d:49:42:96:e3:2d:91:3c:1c:7f:4e:07:
                    53:fc:a5:d7:8b:02:4c:2e:94:d4:6e:6b:e5:88:fd:
                    f3:e9:fe:4c:5f:5a:c4:b6:13:79:8e:08:26:7d:9a:
                    e4:a0:85:16:f0:d0:ad:b9:5b:dc:af:0e:13:f7:a5:
                    54:9b:04:ca:2f:58:d5:d6:2d:a4:ec:4b:de:78:bd:
                    31:8f:86:01:f6:1f:f5:77:9f:71:89:d4:2e:1b:17:
                    af:43:fd:0f:8a:4f:dc:d3:05:aa:48:1f:e1:58:82:
                    a1:45:b9:e5:f6:47:45:36:a8:25:eb:da:7b:c6:ac:
                    cc:8b:6d:53:5e:aa:42:9b:19:fd:4d:42:7c:90:a2:
                    39:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:17:8F:E2:63:EB:61:96:0B:D6:2F:2E:D8:BA:E6:19:E6:F5:EE:78
            X509v3 Authority Key Identifier:
                keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:83:6f:f6:33:42:85:84:3e:d4:e7:50:c7:7c:aa:10:23:
         94:98:05:c8:7e:91:a2:de:7b:e6:19:e0:f7:49:59:15:e1:d0:
         e2:79:06:73:03:c5:80:1d:71:60:5a:e9:0e:36:c7:ba:3a:32:
         30:30:c9:06:b0:78:31:e6:39:5b:3a:d4:55:db:44:85:c1:92:
         87:49:30:86:1d:54:57:a0:52:ca:20:08:c6:e5:cb:8b:a8:6a:
         ee:43:65:3a:f9:6d:ba:40:6f:94:e4:6e:3a:73:a6:93:b2:11:
         34:2e:b5:80:26:35:b1:91:83:c5:ce:0a:72:ba:51:12:0e:45:
         7e:9e:ee:2a:6d:d2:6e:03:eb:b4:b6:fe:35:0e:65:36:ef:84:
         4c:c7:97:79:7d:a6:72:c2:48:ae:b6:46:d2:65:c5:97:b6:61:
         33:43:3e:74:d2:6b:63:f3:77:e1:55:10:36:8a:76:02:44:53:
         e0:36:11:9b:f2:23:24:a1:0a:55:d7:6d:d3:e0:cb:ea:87:92:
         60:82:18:99:28:e6:f2:bf:71:52:27:4f:d0:3f:ea:d1:aa:cc:
         a4:13:97:f6:50:b0:31:cf:68:b0:10:45:09:0d:6c:ab:96:b9:
         0e:08:58:25:1d:06:bb:16:91:3e:b3:7f:46:39:a9:bd:d3:30:
         51:7e:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:42 2026 by rpki-client