This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File:                     rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier:          8/VaSpbx2rhgSsAghgbuLhmNr1yVI5lDOM7KfZlS4Jw=
Subject key identifier:   57:78:D4:3B:13:BA:03:EC:37:BD:0D:93:66:E1:80:EB:B1:AF:01:DF
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer:       /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial:       0474
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number:          0465
Signing time:             Sat 24 Jan 2026 23:24:39 +0000
Manifest this update:     Sat 24 Jan 2026 23:24:39 +0000
Manifest next update:     Sat 31 Jan 2026 23:24:39 +0000
Files and hashes:         1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: 46DkQNQRZKBOBLI2yODuxYxMTbhN086sZswrsbTOrOY=)
                          2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us=)
                          3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: lvLXESJcuRjSmTnSzTV0gfJc2SXdXizZz5eloJwhEZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
                          rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
        Validity
            Not Before: Jan 24 23:24:39 2026 GMT
            Not After : Jan 31 23:24:39 2026 GMT
        Subject: CN=697554b7-2b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:04:37:d3:9e:ae:0f:9e:e1:e7:ca:fb:62:
                    41:61:8d:60:be:e6:59:0f:5e:b7:43:b6:ed:84:30:
                    18:2c:ef:fc:c0:fc:19:9d:31:1a:77:8f:80:16:f3:
                    bf:af:1c:99:35:43:46:2b:8c:e7:3f:ba:da:8d:ca:
                    18:88:54:28:72:eb:98:84:0b:8e:20:a7:d6:23:f9:
                    cb:7f:6b:20:d5:6e:fa:03:e5:d8:69:25:fd:50:5a:
                    8e:a5:87:3b:3f:e1:91:5f:f6:47:3d:33:c1:db:21:
                    fe:0e:ea:27:96:db:4d:4e:dd:09:fc:ae:f4:92:db:
                    fe:06:51:97:47:20:fe:9c:70:99:3f:5e:d2:30:8f:
                    8b:52:13:42:5f:ea:c2:69:bb:67:69:cc:7c:a1:28:
                    79:a6:82:45:b9:98:96:24:18:7a:09:67:dc:c8:1b:
                    95:74:68:91:84:75:52:44:01:a8:92:ea:4f:5a:ae:
                    f8:7d:ac:fc:e0:11:9c:54:7b:3b:c5:d3:c7:33:4f:
                    5e:57:5c:32:43:0c:8d:17:bf:fd:9a:ed:16:9c:b0:
                    45:c9:0b:1a:21:bb:e4:58:25:90:39:20:5c:c8:91:
                    14:1c:9d:59:18:a9:47:00:3f:c4:6d:59:2f:3e:12:
                    3d:1e:2c:fa:5b:37:81:f8:60:7f:5c:46:e1:4c:f7:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:78:D4:3B:13:BA:03:EC:37:BD:0D:93:66:E1:80:EB:B1:AF:01:DF
            X509v3 Authority Key Identifier:
                keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:01:59:28:66:f2:c5:d1:31:04:60:94:50:43:00:65:e7:
         a5:8f:cc:b6:76:45:83:90:5c:92:77:db:3a:5a:87:6b:ca:a7:
         b6:02:03:95:11:8c:a0:de:78:74:d7:4f:d4:45:23:3e:67:fb:
         3c:02:ae:ba:51:e9:5d:bd:fb:fe:5c:c4:bd:c9:47:37:2e:77:
         ac:39:b8:b2:2a:ed:d4:19:54:2f:2c:24:eb:70:c2:9b:8c:8f:
         87:b2:d9:51:54:2e:51:39:f9:8a:ff:85:ee:34:ee:7f:f6:6b:
         af:3e:33:94:56:dd:81:80:31:6a:69:a0:33:21:15:5a:7c:0e:
         23:21:a6:0e:09:93:f0:02:3e:fd:ce:98:56:2b:dc:aa:c0:05:
         d6:07:a0:90:b8:f2:49:e2:75:0e:b9:cb:89:94:69:5a:da:db:
         b1:38:82:c4:2b:71:4c:47:b7:b0:d0:21:ae:c9:9e:c8:27:0f:
         13:1d:48:b4:12:f3:6b:6c:c4:0f:de:f3:0d:39:56:7e:7a:82:
         21:d3:e9:05:de:3a:43:a4:f2:01:91:b6:f0:f3:03:63:cc:e1:
         40:91:83:78:1e:01:98:d8:52:f5:e7:1b:41:f9:9c:f7:f1:6a:
         73:37:75:83:70:16:35:d3:da:4a:63:35:c2:8b:94:0f:62:e7:
         79:c2:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:17:32 2026 by rpki-client