This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File:                     mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier:          NTtG13mQ0x6m7QVZoTgg9liSX4nbd0HLzFfEPUdGZfE=
Subject key identifier:   C9:35:B9:E2:B5:B6:14:D5:9B:E4:9E:AB:CB:89:50:AE:07:62:04:DA
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number:          014F
Signing time:             Fri 23 Jan 2026 03:24:16 +0000
Manifest this update:     Fri 23 Jan 2026 03:24:16 +0000
Manifest next update:     Fri 30 Jan 2026 03:24:16 +0000
Files and hashes:         1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: S9AHWuj2f2oxMBmk3vLqk98PeTRJURQMlzn4PCHiGno=)
                          2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: kcREcr0H0jCGOhIccZ0JE/pjap1r2+uBwBwncwagIzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
                          rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Jan 23 03:24:16 2026 GMT
            Not After : Jan 30 03:24:16 2026 GMT
        Subject: CN=6972e9e0-0acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:ca:54:79:d5:d2:67:c3:31:c7:64:8f:bd:
                    03:45:5f:2c:72:7e:90:4a:a4:72:68:11:21:1e:27:
                    d7:c3:ae:bd:33:4c:d8:71:49:9b:72:cc:40:0f:08:
                    4b:3b:b1:0b:cd:36:33:56:7f:7a:30:bd:3a:ed:e2:
                    03:41:b0:22:50:da:98:59:39:0e:6b:07:55:22:7b:
                    0b:79:ee:a4:b6:f5:df:0f:59:a7:b0:c5:ce:74:40:
                    ad:18:67:8b:08:98:b2:23:85:83:38:36:8f:18:6a:
                    d7:8b:9e:a5:a3:c0:30:a5:3a:d4:a5:84:b4:28:91:
                    bd:57:59:6f:7a:fd:29:02:3a:60:e6:70:6d:6f:f8:
                    34:96:cb:34:1e:1d:18:21:7e:6a:c7:0f:78:3f:73:
                    07:3f:f2:90:d1:0f:49:70:32:7f:4e:58:36:41:4b:
                    79:70:59:2f:55:43:c8:b0:f3:05:d6:3c:8f:19:42:
                    3a:49:0b:8d:0f:e1:c7:6d:db:17:27:08:bf:47:d5:
                    a9:b0:38:c9:03:a3:f8:03:3f:58:55:37:03:10:a6:
                    de:df:91:40:68:6d:39:47:cc:32:5f:ad:a5:c9:b8:
                    02:f4:25:94:d5:b6:ba:83:58:a8:f7:8d:1d:25:c8:
                    a7:f0:87:51:47:b1:e2:16:04:2d:89:f1:8b:d0:fe:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:35:B9:E2:B5:B6:14:D5:9B:E4:9E:AB:CB:89:50:AE:07:62:04:DA
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:ef:b6:0e:40:9e:09:9d:94:83:b3:a7:d1:a3:ec:d7:13:
         99:d4:e7:0d:42:e5:a3:b4:84:90:28:6d:fc:83:54:d6:e8:93:
         e8:6d:82:b0:56:10:db:4b:08:7f:3f:dd:3d:81:67:fe:37:a6:
         08:c2:56:ac:ee:57:1f:fc:27:15:a7:a4:41:04:0c:f6:48:b0:
         54:53:32:ab:3e:6f:77:39:8b:28:75:a9:c7:18:81:9e:8d:48:
         79:25:3f:91:1b:35:3c:26:ee:01:40:28:da:d0:8e:56:04:2c:
         13:25:50:68:a4:a6:62:5c:75:31:2d:e7:30:98:32:ab:cb:a6:
         a5:d1:b7:56:47:56:ec:37:4e:8e:87:c8:6c:c7:77:ff:82:d0:
         97:d2:27:d0:85:67:a4:d6:00:ca:8d:2b:75:1f:37:3c:21:13:
         d1:36:dc:c0:a7:fb:06:61:7b:6b:73:b0:b2:94:47:3e:7a:bd:
         b1:e3:80:cb:0d:3e:2e:8e:95:af:d7:77:4a:e3:0b:6a:64:a4:
         55:44:9a:0d:b3:75:3f:d6:64:7b:3b:ca:07:71:69:6b:58:97:
         70:42:16:78:9c:4b:c3:08:22:ed:a2:88:26:4f:ba:bd:75:65:
         9b:4e:32:da:3e:08:8c:27:35:c4:05:56:34:7b:4b:24:4e:09:
         a6:b0:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:29:02 2026 by rpki-client