This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
File:                     cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json)
Hash identifier:          1qenj7Ecmy5zlxhqC6bPXVgYSwvaKx4vr+McAhqgyiw=
Subject key identifier:   C4:17:20:2E:2C:C4:D9:95:C4:5B:7C:43:A0:44:BA:C2:CC:38:85:A1
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Certificate issuer:       /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
Manifest number:          040D
Signing time:             Sat 24 Jan 2026 23:36:32 +0000
Manifest this update:     Sat 24 Jan 2026 23:36:31 +0000
Manifest next update:     Sat 31 Jan 2026 23:36:31 +0000
Files and hashes:         1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: 7jHTAeOegcpPQh8Sb8PzqUpAhd9HtYcFJ7HZJhxjR/Y=)
                          2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
                          rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
        Validity
            Not Before: Jan 24 23:36:31 2026 GMT
            Not After : Jan 31 23:36:31 2026 GMT
        Subject: CN=69755780-2a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:7e:40:ee:83:11:95:11:61:7e:9c:b1:1d:
                    61:90:b6:96:36:ae:49:1f:29:f5:58:8e:ea:f9:9e:
                    89:0a:7a:c6:82:eb:e7:07:7a:44:ee:85:8e:4c:9e:
                    3a:8e:f2:f7:84:55:cc:bf:1f:ea:87:e6:ef:ca:40:
                    6a:67:27:01:ff:4b:fc:52:63:cb:8b:19:18:5d:22:
                    cd:63:b5:ef:75:96:fa:fe:9a:46:8d:c5:12:78:7a:
                    5b:b3:81:37:fe:6e:64:1b:2f:2d:07:9e:88:b2:41:
                    20:c2:03:ee:3d:a0:a7:bc:8f:d1:db:e8:33:00:71:
                    53:0f:e2:9f:b6:e0:fc:cc:78:e9:10:40:fb:bd:d4:
                    51:55:cb:59:e6:f3:db:a0:a0:b3:63:e6:34:26:a4:
                    2c:48:eb:43:b7:f1:b0:5e:b0:ac:22:93:80:be:2a:
                    e5:21:9e:8c:e5:53:a8:63:7d:68:58:76:e5:aa:63:
                    9b:bd:c6:07:fc:cf:62:37:67:16:56:d7:eb:af:a4:
                    02:0e:f9:ff:0e:0d:40:08:50:5a:d7:1d:82:78:74:
                    2d:3a:47:4d:35:6e:ed:73:c8:23:9f:16:28:0e:84:
                    d5:aa:7f:7c:7f:f1:bd:6c:d3:20:45:1e:de:6b:38:
                    54:2e:0d:ca:f3:16:6b:36:11:0e:b2:0f:72:37:0e:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:17:20:2E:2C:C4:D9:95:C4:5B:7C:43:A0:44:BA:C2:CC:38:85:A1
            X509v3 Authority Key Identifier:
                keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:cc:2b:b8:78:85:ae:fa:ec:9c:f1:d2:d3:43:e0:a7:62:
         bc:fd:20:7a:9b:c8:f5:0d:7f:b4:86:5b:20:3d:68:ad:ba:f2:
         99:c1:b5:1f:58:42:ea:57:86:12:80:c1:1d:fb:f7:69:8a:9a:
         bf:94:9b:81:e9:0e:35:09:ad:98:ef:74:8e:16:c9:eb:e0:86:
         78:1c:06:22:3d:93:96:c7:bf:7b:be:21:e5:9a:fe:f4:23:e4:
         e7:01:9f:1b:98:53:e2:da:ce:43:89:4e:10:dc:50:6e:6f:32:
         30:f0:e3:74:88:3d:d6:1e:3f:97:f1:f1:f5:b1:51:49:df:43:
         69:d4:df:c9:47:79:c2:58:66:0f:41:81:e2:1e:ae:d4:26:84:
         7c:2a:e6:91:1d:55:50:71:ac:df:d6:3b:3c:11:a9:a9:ab:d3:
         d5:b3:b8:08:ed:60:99:c9:2a:10:2c:52:0e:7c:53:9f:1f:b8:
         9f:00:06:3a:73:17:0e:da:8b:c4:ba:5d:af:5e:92:28:05:1c:
         9e:ef:5d:8c:3f:da:3c:2b:ae:f9:ec:fe:fa:d0:81:a8:6b:cf:
         57:90:04:d1:6d:40:69:f5:b3:13:c7:cc:91:9a:e9:0d:cd:7c:
         ef:3b:29:dd:e2:1f:38:7b:32:52:9d:e9:6a:3f:48:bf:f1:8c:
         ec:7c:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:17 2026 by rpki-client