This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
File:                     SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json)
Hash identifier:          +jZMAphpx5WhgEHbWB7leXE8aPcuzy5T9FPdrcdBoAI=
Subject key identifier:   29:3C:76:02:D5:A5:16:76:A8:AA:4C:3A:0C:B7:6C:60:BF:F5:F3:AE
Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE
Certificate issuer:       /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
Certificate serial:       0929
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
Manifest number:          0928
Signing time:             Sat 24 Jan 2026 19:38:55 +0000
Manifest this update:     Sat 24 Jan 2026 19:38:55 +0000
Manifest next update:     Sat 31 Jan 2026 19:38:55 +0000
Files and hashes:         1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: bkAP7DKz47hWxxI6MHxH1DVdlcv0agsXYsoTbTmJluw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345 (0x929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE
        Validity
            Not Before: Jan 24 19:38:55 2026 GMT
            Not After : Jan 31 19:38:55 2026 GMT
        Subject: CN=69751fcf-7257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:7e:c9:5b:10:21:dc:1e:45:b7:07:df:19:
                    73:5f:48:4b:3e:a3:90:69:bd:c5:99:c2:05:2e:4b:
                    fb:78:fa:88:86:f4:00:20:bd:97:36:57:1f:25:0f:
                    c8:2e:04:ee:03:df:55:5d:8c:37:40:1a:56:ad:20:
                    81:7e:43:40:a7:df:25:74:8d:08:cf:9b:aa:32:5f:
                    36:08:2f:2e:9b:0e:da:6e:c5:9f:62:4e:85:3c:cd:
                    a2:7d:21:ff:a9:ad:7d:a9:42:b2:22:d9:c5:74:b2:
                    21:47:9c:6a:6a:bf:f6:e5:b7:3f:53:68:d9:23:fa:
                    ae:88:ce:e8:07:ef:50:4c:03:e9:5c:1e:8b:bd:1f:
                    6c:8d:15:44:a1:34:fd:4b:c9:85:8c:7b:e5:a2:62:
                    64:46:69:99:f6:3d:2a:6a:d4:11:55:72:0d:a2:79:
                    e6:10:59:cf:e0:ce:cb:06:ea:f2:a7:b2:65:ab:82:
                    4b:3e:ce:4d:91:a7:5e:f0:25:c1:92:ff:ba:06:0f:
                    be:71:03:cc:00:99:a4:30:f9:38:6b:19:1f:e0:27:
                    43:85:0b:69:8e:63:dc:f0:23:af:ef:e2:ad:bf:2c:
                    0a:2f:02:f2:5c:10:25:66:3f:e9:c4:38:8e:63:5d:
                    8b:1c:5e:89:84:3c:28:ed:57:10:75:2e:67:de:d7:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3C:76:02:D5:A5:16:76:A8:AA:4C:3A:0C:B7:6C:60:BF:F5:F3:AE
            X509v3 Authority Key Identifier:
                keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:95:c7:09:7f:25:f8:3d:7a:69:97:48:8d:44:9e:73:45:88:
         cb:bd:2f:70:27:05:0d:3d:48:5c:f8:60:8b:0d:9f:fb:1b:0f:
         88:6a:2a:73:8c:5e:f3:06:13:24:87:eb:c3:90:92:4b:70:60:
         fa:61:cc:e1:a3:ca:20:a2:29:34:69:43:69:9c:5d:b9:11:16:
         ee:e7:16:19:35:dd:bb:12:a3:a9:b2:86:8f:4d:8f:67:fa:95:
         89:25:75:cd:8e:70:e4:82:a2:22:67:e7:8c:97:2d:48:40:2d:
         58:65:05:24:d3:61:46:11:44:9b:0e:a2:ed:48:11:09:7d:a5:
         7e:a3:9f:aa:d5:5d:fd:38:91:05:b9:4d:0c:3f:cd:1d:57:d2:
         01:d8:f1:5f:4f:fc:ec:0b:57:a2:b0:21:0f:ea:2c:c7:eb:be:
         d6:86:ca:4a:07:af:f5:c2:30:a0:8c:1d:29:8c:3b:29:8f:a1:
         83:8b:5a:e8:16:69:bd:db:ed:24:f2:1b:dd:bb:1e:f2:99:08:
         2e:b8:e0:d4:dd:93:ce:25:de:7c:03:84:7a:60:9b:98:90:35:
         80:4a:32:16:57:7a:57:88:a3:f1:f4:d8:30:8b:6e:84:95:6c:
         5c:bb:91:76:c1:56:84:bb:aa:a3:06:d3:69:a0:d7:47:12:ed:
         cc:c9:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:16 2026 by rpki-client