This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File:                     p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier:          srq7Tq2HVuE4ACCOrSqMj2pdG/46AUADIeWwKI54GY0=
Subject key identifier:   0D:A1:D1:F7:55:43:A1:3F:99:69:A7:07:DA:AA:40:15:5A:9D:81:AC
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer:       /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial:       0DD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number:          0DC3
Signing time:             Sat 24 Jan 2026 17:33:03 +0000
Manifest this update:     Sat 24 Jan 2026 17:33:03 +0000
Manifest next update:     Sat 31 Jan 2026 17:33:03 +0000
Files and hashes:         1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: p5Z5AK56Eag6FXoik8ikINYJnk+OzydFPIdP7JzAAOs=)
                          2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: SkBXJ2Cg15YTINlEK8cWxPkVEnzJM9DWZ0n7aJtqwN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
        Validity
            Not Before: Jan 24 17:33:03 2026 GMT
            Not After : Jan 31 17:33:03 2026 GMT
        Subject: CN=6975024f-40ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:bf:01:e2:d8:b0:fb:57:7a:5c:26:a6:97:
                    d8:d0:7c:4c:8d:20:52:10:f6:4f:f0:5f:7c:0a:98:
                    f9:00:d3:1d:33:36:28:2d:f6:00:b0:d5:9e:0b:a4:
                    71:19:86:4b:67:17:34:26:03:2a:ca:5b:62:22:18:
                    88:57:f2:47:0c:29:a4:2d:55:6b:1e:1e:f9:90:98:
                    78:59:73:82:43:67:06:90:45:d1:98:a8:3a:13:a5:
                    c5:21:b4:45:70:c4:b0:c3:69:18:7d:09:5c:d0:15:
                    6e:cb:73:e8:46:5f:a5:21:ef:00:d5:09:43:37:d4:
                    a9:4f:38:91:ad:f6:3c:13:8b:8d:3a:b2:30:2c:9a:
                    cb:ac:d5:31:cc:8f:6a:79:d1:45:5d:24:f5:4c:34:
                    ea:6f:f5:86:0f:5e:44:9a:cf:5e:5f:51:3f:08:06:
                    da:4c:4d:ce:79:91:36:11:94:cd:a0:a6:85:82:e3:
                    df:28:bb:d8:74:f3:aa:69:7d:3f:a8:23:9b:c2:7f:
                    cb:a7:67:7f:4a:15:f8:d0:68:df:ad:d8:eb:c7:64:
                    62:20:ce:71:2b:d8:a3:6d:1a:ea:5b:eb:36:f1:02:
                    9b:30:15:1b:0e:3d:5c:2c:be:20:0f:b3:b5:15:80:
                    11:6c:cc:42:ea:4d:fe:b7:3e:25:fb:cf:ad:e5:56:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A1:D1:F7:55:43:A1:3F:99:69:A7:07:DA:AA:40:15:5A:9D:81:AC
            X509v3 Authority Key Identifier:
                keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:29:4c:51:54:c8:66:fc:1e:b9:69:d7:37:4f:e6:48:4c:
         18:c2:2e:cd:f0:6c:ea:e7:bb:23:3a:61:cf:f9:07:b0:6d:71:
         42:c3:e9:e5:d6:b0:fd:6e:45:8e:30:b6:3d:c4:1f:ad:e7:92:
         d3:91:14:cb:57:3a:d5:45:91:5b:1e:78:3c:e9:94:88:72:96:
         95:ce:d9:24:3d:f6:11:45:8c:11:2f:86:49:18:dc:df:48:34:
         e5:bb:32:46:46:6c:0e:68:25:7d:c4:71:f7:31:ca:c0:af:5d:
         b6:8d:7c:79:5c:4d:4e:3b:2a:df:53:f1:0a:ea:0d:ae:5f:90:
         08:c9:9e:b2:3b:81:0a:2d:2c:cd:57:2b:84:22:df:09:f8:12:
         d6:d7:ef:e9:2d:e3:f9:13:6d:58:6c:4c:12:ed:96:01:2d:42:
         07:00:00:a7:ff:a2:58:0b:9f:d0:50:35:b8:6b:54:ed:02:7b:
         53:08:6c:87:46:4a:6d:37:46:c5:82:36:27:21:47:93:45:59:
         50:99:29:8f:6f:dd:bc:52:f5:d5:0f:4c:4f:2f:df:d2:52:1e:
         e6:e9:82:d2:b0:a4:9c:7d:29:49:30:85:6a:7a:89:ce:9c:e2:
         c7:e7:ad:73:01:ff:e8:df:1e:b8:fd:ac:5e:83:40:0a:2d:73:
         98:bf:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:37 2026 by rpki-client