This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File:                     PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier:          lLNZUVIU2lRkV7MQ5hlUI/Az5eIF/Y1gMjHtgZxW9So=
Subject key identifier:   75:71:C4:20:5F:63:A7:37:C8:9D:3A:B9:36:1B:01:F2:D9:53:84:9D
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer:       /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number:          01CA
Signing time:             Sun 25 Jan 2026 02:18:41 +0000
Manifest this update:     Sun 25 Jan 2026 02:18:40 +0000
Manifest next update:     Sun 01 Feb 2026 02:18:40 +0000
Files and hashes:         1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: 9L9FCJctzE2i6SoIP8wVLd8THG5hABenUKR3WYKaNXQ=)
                          2: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lp3xmOm8VpMKZjMN4wnKudx9lNNJk9A7QEoVNpNZM/Y=)
                          3: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: zLJmvWY7239Phf4yPfDTSksmKOjgZNQc6mllvDN5PGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
                          rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
        Validity
            Not Before: Jan 25 02:18:40 2026 GMT
            Not After : Feb  1 02:18:40 2026 GMT
        Subject: CN=69757d81-cf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:cb:f7:04:be:8f:db:f5:cd:31:6f:44:e0:
                    69:8d:c1:73:73:d2:66:79:61:d8:da:fa:7b:b4:32:
                    41:5a:f7:3c:00:0d:ee:a1:77:63:51:ea:9f:49:68:
                    7e:69:a5:fa:d5:42:5a:8d:be:b0:e6:86:99:ba:0f:
                    e2:98:09:27:df:81:bc:0c:10:42:d7:46:7b:f4:8a:
                    a1:95:f6:8f:28:30:f5:2e:32:06:71:35:55:53:1f:
                    26:83:69:5f:0d:ef:4d:77:6e:bf:ab:9b:d7:56:b9:
                    cc:9c:1a:7a:b8:21:47:17:86:00:9b:88:cb:98:0c:
                    2a:3b:16:13:eb:e8:9f:16:2a:8f:3b:5f:89:55:0d:
                    37:cb:be:8c:b7:cf:75:bf:2f:57:89:9f:4d:39:de:
                    92:b7:f2:fc:c4:1a:36:7d:6a:3f:fa:2f:77:b3:55:
                    ca:de:68:1f:9f:0a:95:43:b3:9b:62:95:09:60:97:
                    ad:99:a1:2a:54:d1:76:21:4f:85:6e:30:b1:9f:d1:
                    9e:42:b2:2d:bf:b6:88:02:94:15:47:7a:1f:e4:27:
                    84:e6:fc:49:eb:48:32:f9:0f:12:32:7e:81:56:8c:
                    7b:cb:bb:49:ea:4c:b0:e4:6d:74:c0:7d:fc:53:61:
                    23:86:0c:ac:0f:6a:58:c5:36:fc:66:bd:d7:c0:be:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:71:C4:20:5F:63:A7:37:C8:9D:3A:B9:36:1B:01:F2:D9:53:84:9D
            X509v3 Authority Key Identifier:
                keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:8a:f1:60:85:37:4a:52:75:a5:96:38:41:ad:6f:b3:df:
         84:44:57:5a:c7:65:55:1a:c3:10:f1:71:8f:e5:84:c9:86:f7:
         89:0b:bc:ab:f4:9f:5d:20:87:53:3a:3e:c9:48:16:e9:c4:ed:
         38:f9:4d:12:5a:40:97:93:cd:eb:01:75:f5:ad:ed:20:d0:ef:
         93:5c:ee:46:df:07:9f:d9:07:df:be:a9:21:3a:85:67:5f:45:
         2b:a6:bf:49:4f:f6:fc:f3:54:d2:f2:72:ad:36:4a:8f:d7:d4:
         a4:e9:96:c5:19:0f:7b:52:eb:47:35:1e:c2:7f:19:53:0b:b9:
         e0:bb:28:21:dc:49:2f:08:eb:1f:cb:ad:63:9f:f7:dc:56:92:
         8f:3e:b0:f3:a3:ac:94:ce:47:69:fc:4f:99:89:d3:b7:0f:1c:
         c0:c4:a8:9a:86:78:15:e6:3d:ba:b8:45:62:c0:01:b5:f8:80:
         a6:0b:c8:b6:3c:9e:61:c9:24:a7:89:11:9a:84:ad:29:46:42:
         cc:07:3a:2d:05:28:bc:26:c3:4d:07:39:77:54:4c:52:f9:57:
         4b:1f:38:e9:d7:ec:fd:14:91:cf:37:86:a4:96:ae:f9:97:4d:
         4f:b4:c5:75:fd:e1:6b:e2:7e:af:c8:43:4e:5a:32:d6:ea:34:
         a7:29:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:39 2026 by rpki-client