This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
File:                     N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json)
Hash identifier:          E78NOj0tLOZHwBAz/0icFI3LAiug9idruyoF3nG/iFs=
Subject key identifier:   65:29:2D:36:C8:1D:A9:7D:DD:B2:62:CB:7A:E1:8F:3E:01:BB:35:46
Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
Certificate issuer:       /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
Manifest number:          01B4
Signing time:             Sun 25 Jan 2026 02:25:11 +0000
Manifest this update:     Sun 25 Jan 2026 02:25:10 +0000
Manifest next update:     Sun 01 Feb 2026 02:25:10 +0000
Files and hashes:         1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: +2QqgdBUof0VQ6r7KnjgpkvbPcv/ac2KFwHbhLfeS54=)
                          2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
        Validity
            Not Before: Jan 25 02:25:10 2026 GMT
            Not After : Feb  1 02:25:10 2026 GMT
        Subject: CN=69757f07-d4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:91:8e:b3:8b:5b:27:a7:33:c5:2c:0c:1c:
                    76:4b:58:b0:1b:df:c2:b3:a3:e4:a8:0d:38:f9:d6:
                    4e:f0:6c:bf:95:8e:e9:40:46:a2:57:f2:0b:36:f7:
                    85:60:92:95:10:6d:9f:26:ac:b1:fd:6f:f9:90:52:
                    7b:04:c4:bb:a1:6d:80:b4:c8:6c:61:74:9f:7a:35:
                    74:ba:f5:c6:a4:a7:03:88:bd:73:1f:aa:6c:0d:38:
                    f5:8a:57:45:12:fa:2c:5d:96:a0:f5:a5:c3:ed:0c:
                    de:d1:e1:24:88:5a:31:54:22:f8:8d:69:32:70:6c:
                    48:67:09:21:42:00:be:15:40:0b:fc:37:64:80:1f:
                    16:53:d9:9b:d6:2d:b0:1c:5d:89:f0:8f:d3:d2:63:
                    24:7c:1d:d6:e4:59:6c:9d:b1:4f:9b:f3:c1:27:5b:
                    03:10:7b:b2:63:17:ff:b5:6e:e1:37:78:ca:8b:f1:
                    bc:da:58:d1:d8:da:53:a1:3f:fb:cf:ae:4c:56:19:
                    cd:ba:9a:cf:d0:b4:f5:94:cc:81:5f:de:b6:3c:05:
                    04:61:76:3e:ea:2a:44:3b:7a:64:18:b7:aa:a4:b1:
                    39:2f:73:5c:06:b8:67:ff:42:14:af:dc:2f:c0:b9:
                    28:9e:a8:39:11:e3:db:12:f4:e3:a6:3b:bb:ba:5d:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:29:2D:36:C8:1D:A9:7D:DD:B2:62:CB:7A:E1:8F:3E:01:BB:35:46
            X509v3 Authority Key Identifier:
                keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:ba:f4:b9:b9:8c:11:83:84:69:8c:a2:f3:27:32:ad:f6:
         3c:01:8b:6e:93:b1:35:c9:8f:d7:7f:9b:00:31:2c:a4:b5:66:
         5d:86:e0:00:98:da:a2:5c:52:12:70:2d:a9:d3:81:43:8f:d5:
         d5:e6:37:f8:65:9f:e9:54:0a:4a:7b:63:3f:1e:d5:65:c2:53:
         42:6a:7d:b3:93:97:12:67:c6:88:a8:3a:44:7d:05:6c:d9:56:
         e1:f2:de:33:22:b3:df:2b:7b:30:26:78:f8:34:c1:c1:3c:e5:
         3e:d5:0f:67:36:d1:86:fd:76:1e:2d:e5:61:99:a8:28:ce:41:
         7f:ce:ab:b0:92:da:a5:10:dc:f5:08:3f:38:57:c6:97:49:61:
         d1:4f:ba:d8:d4:35:06:80:b1:3c:14:e9:e9:4d:46:5c:86:ee:
         06:06:65:13:9f:1d:39:aa:11:ae:17:89:67:b9:59:41:5c:6e:
         a9:4e:46:57:e1:ab:ec:5b:01:b6:52:eb:70:36:24:6e:d4:f3:
         09:e2:a1:13:64:90:f1:4d:c2:c9:e2:dd:ad:7c:eb:be:a7:7d:
         52:30:91:ab:0a:2a:35:ac:69:d4:1f:51:b8:e9:a7:5e:e6:e3:
         e9:b4:49:5c:b1:61:66:5d:0e:91:22:74:83:30:51:7d:46:6d:
         ae:b3:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:41 2026 by rpki-client