This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
File:                     A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json)
Hash identifier:          Ao1t7X+MPSatpi1dlQaK8ww+Xsq2IHvsp93yfBnAkb4=
Subject key identifier:   9C:D4:00:A9:70:85:13:E2:78:3F:EA:89:4B:E8:0B:B7:DF:00:EA:CB
Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A
Certificate issuer:       /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
Manifest number:          09
Signing time:             Fri 23 Jan 2026 07:07:11 +0000
Manifest this update:     Fri 23 Jan 2026 07:07:10 +0000
Manifest next update:     Fri 30 Jan 2026 07:07:10 +0000
Files and hashes:         1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: MLkZ4TJbl+218C9MRZv4+eULORDDtgVcDB6ehD65sTY=)
                          2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: vKdQ4FZUJKBpRIglfp7Sr9GKQnFuUFZQuFz7N/Wmk2c=)
                          3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: zmWDQ6MXVf7Ws4JCdCiFHc/NRo6v2SNX8TvU2l+Qkt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl
                          rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A
        Validity
            Not Before: Jan 23 07:07:10 2026 GMT
            Not After : Jan 30 07:07:10 2026 GMT
        Subject: CN=69731e1e-23c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:b7:26:55:64:48:92:ee:80:02:2a:27:23:
                    80:af:fa:a8:06:2f:1c:d0:99:7c:d7:67:ac:b5:ef:
                    8d:df:97:fa:3a:60:21:75:59:20:d2:3e:b5:3f:eb:
                    83:51:d6:17:0a:e2:0c:fd:65:dc:5b:c7:d7:55:37:
                    81:97:04:78:50:fe:e0:a5:19:f9:31:2f:8d:f6:89:
                    40:b8:fd:3d:c6:ea:ba:77:6a:d7:ac:41:40:d0:a2:
                    e2:7f:4b:cc:86:04:89:0a:17:69:c4:02:34:42:bd:
                    50:96:f3:60:1e:87:56:ca:20:8e:91:86:26:94:63:
                    09:df:f3:f3:fd:a2:78:c6:79:1d:91:16:cc:9c:89:
                    98:35:ae:5c:2f:f0:da:6a:8a:be:5c:54:2f:a0:ce:
                    b0:01:ad:11:3e:06:70:c9:2d:be:61:34:a0:67:f6:
                    af:c1:7f:81:a7:94:6c:43:ee:59:d3:15:52:79:16:
                    71:b8:82:f0:af:4f:3f:7a:5b:f6:1f:6a:31:dc:99:
                    d1:d4:4d:2f:2d:1e:46:5e:de:c6:c5:d6:35:a7:56:
                    ee:c7:31:6e:11:58:35:50:3a:6c:e8:56:e7:5a:7e:
                    7d:bf:84:13:a1:52:62:2e:fb:5e:21:db:a3:fb:3b:
                    05:1f:5a:5e:0e:85:71:48:99:13:e2:79:25:ee:61:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D4:00:A9:70:85:13:E2:78:3F:EA:89:4B:E8:0B:B7:DF:00:EA:CB
            X509v3 Authority Key Identifier:
                keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:54:78:a6:dd:6c:d8:c8:fa:77:1c:9a:00:52:9c:78:f4:
         de:14:50:54:97:23:5f:90:2b:d5:0b:26:f2:92:ab:37:9a:83:
         b7:d3:1c:81:05:96:e4:e1:bb:d7:3d:27:8e:c9:81:3e:4b:73:
         ba:1a:eb:df:82:1e:40:c2:a6:a6:e4:d9:c4:76:8d:3f:63:65:
         ac:24:9f:8c:d2:d2:0f:77:0b:fa:87:bc:32:2c:eb:56:f8:db:
         20:57:d5:47:2f:cf:60:5b:c9:88:38:c8:56:77:00:69:0f:d6:
         a5:28:65:d3:70:9f:7c:73:b4:59:80:ad:e4:35:23:e5:89:f2:
         0f:95:a7:50:2a:4a:b4:0a:6c:b4:db:dd:04:de:b1:16:c3:e3:
         48:29:72:ee:bf:10:a0:3d:39:7c:0c:77:69:90:c1:66:ad:1d:
         08:34:eb:e3:45:6c:65:03:9d:a8:63:c3:fa:cb:b3:a9:ee:fb:
         40:8c:c5:b5:a0:6e:d2:65:bc:06:d6:2c:ec:70:7e:f0:31:63:
         53:52:f4:0a:fc:0b:ef:93:72:86:b7:83:60:5a:be:58:da:a3:
         9a:63:24:82:c8:60:4c:11:44:6d:dc:a9:11:3f:3a:cc:85:8b:
         c0:1b:0a:c2:74:b0:8e:cf:1c:4e:bb:ed:2e:fa:ec:cc:39:6a:
         b7:fe:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:31 2026 by rpki-client