This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          7OJzGglaMYBuOWivelejH4gMXkiE1LIjiNUjSpoGQUU=
Subject key identifier:   CA:50:96:61:28:95:0B:C6:E4:07:FA:AE:BB:8A:2D:BA:4F:B1:46:57
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          02F4
Signing time:             Sun 25 Jan 2026 00:27:55 +0000
Manifest this update:     Sun 25 Jan 2026 00:27:55 +0000
Manifest next update:     Sun 01 Feb 2026 00:27:55 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: hjudEGWdBnRiwzgfm79vNkqwOo0V1cszq1i/EBeLJPk=)
                          2: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Jan 25 00:27:55 2026 GMT
            Not After : Feb  1 00:27:55 2026 GMT
        Subject: CN=6975638b-f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:68:40:9b:15:e0:a8:fe:18:bc:23:cf:60:
                    a2:94:3a:2a:21:49:e9:e3:9f:ff:45:be:27:6a:ec:
                    ad:77:ba:0a:23:ed:45:7e:3b:f6:3a:af:90:06:3f:
                    2d:ab:93:ea:aa:f7:03:59:bf:c6:ce:b1:6d:e6:92:
                    66:fe:52:03:96:a3:a2:59:70:04:44:5f:76:f2:90:
                    fc:0f:42:ae:ef:6b:d9:c3:b3:29:10:52:bf:4c:19:
                    f9:40:62:36:de:bb:c3:a9:e4:70:5f:f0:a6:7a:bc:
                    76:40:4e:07:c6:98:41:89:2c:6b:b2:ef:4d:e0:31:
                    f0:6b:c3:ea:dd:72:01:b2:64:30:14:b2:fb:74:2f:
                    ae:1f:f7:99:ac:2a:1d:02:24:f3:3f:9c:f2:3e:f2:
                    24:a2:d0:9f:ef:5a:93:42:bc:1b:06:51:e4:be:27:
                    f9:69:34:7a:63:4d:9e:81:61:90:9a:8c:5d:ec:f6:
                    c6:1c:92:d3:b6:e1:1e:79:ae:22:1b:93:44:60:5f:
                    fa:59:ac:31:3d:a0:cf:7a:60:44:45:c4:cd:b7:3f:
                    b5:b7:36:6c:bd:ce:34:76:bd:d0:93:01:6c:a3:5c:
                    14:d5:46:b2:f2:35:3e:ea:02:18:78:75:1e:06:2a:
                    d8:2b:78:34:e1:79:42:d8:42:0f:b2:77:39:a7:41:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:50:96:61:28:95:0B:C6:E4:07:FA:AE:BB:8A:2D:BA:4F:B1:46:57
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1d:5c:d5:06:42:43:8f:c6:40:88:1f:5a:ea:af:82:05:e5:
         9d:f1:72:59:12:d7:e4:36:d6:5a:bb:ff:15:e3:83:aa:dd:1b:
         b8:a0:dd:e7:62:ba:72:21:e4:e4:38:23:ef:48:d6:aa:75:23:
         15:e7:73:81:fa:a0:b9:28:82:0f:dd:74:4a:e4:73:75:9d:0d:
         c5:18:33:f4:31:67:2b:a3:10:dc:75:f0:5a:ff:6d:55:41:97:
         61:16:12:b6:16:5d:24:dd:bd:71:fd:03:ce:f6:1c:6f:59:92:
         e2:e7:4f:50:56:84:3d:32:31:71:29:07:a3:75:fa:a3:e9:4a:
         b9:5a:44:76:8f:92:3a:7d:33:2d:6b:8a:eb:2f:98:29:9d:73:
         f6:0a:a5:b9:c8:0f:52:53:ad:66:7a:ab:30:2c:19:f5:69:f4:
         7c:65:8b:07:72:ca:97:d0:76:6a:6f:dd:11:11:19:47:a3:a6:
         9f:2f:a8:5d:aa:31:12:47:62:3f:0d:cb:e7:52:3d:50:06:51:
         68:a4:c8:65:38:ec:11:80:b3:0c:ec:e2:35:91:fb:96:d6:4d:
         ce:c0:2b:e0:15:14:50:53:49:47:79:32:68:46:ff:24:28:ef:
         b2:cd:8c:a6:80:a0:53:e7:f3:dd:2c:79:03:a6:5b:39:d8:42:
         05:2e:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:39 2026 by rpki-client