This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier:          jjfS9Ss3jnxIPyN6pe90rRG7g7QRBQFHxkNUJTTDbKA=
Subject key identifier:   43:10:52:9D:DE:33:24:94:D8:B7:20:FD:99:E3:7B:87:0C:36:D0:DF
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer:       /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial:       07A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number:          07A3
Signing time:             Sat 24 Jan 2026 20:48:29 +0000
Manifest this update:     Sat 24 Jan 2026 20:48:28 +0000
Manifest next update:     Sat 31 Jan 2026 20:48:28 +0000
Files and hashes:         1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: +tXYNQx3mpAVITRtg69FYUS29ZfaVduxzNtgvaiFl0U=)
                          2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: sf0bjrA5f171sDPL4IUDnTalQU9Tolw288SxpHgMVAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Validity
            Not Before: Jan 24 20:48:28 2026 GMT
            Not After : Jan 31 20:48:28 2026 GMT
        Subject: CN=6975301c-fd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:d5:1f:98:ee:32:8c:15:77:bd:67:90:f9:
                    28:5e:ec:13:fe:d7:b8:69:9e:86:7f:f4:d1:72:5a:
                    0f:17:55:0e:38:43:4f:ec:ed:37:b5:7d:3a:eb:03:
                    71:1e:89:d1:94:4e:26:aa:22:6d:22:be:f6:71:64:
                    ed:d0:e5:57:78:5e:fd:36:24:b0:e9:54:b5:4c:cc:
                    5a:f6:8a:f6:ff:97:6f:0b:df:29:d4:bc:e1:5e:0d:
                    a0:08:bd:1f:c6:04:3e:55:1d:b1:35:6a:7f:76:99:
                    8d:c0:cc:14:cd:ba:35:6a:3e:74:ae:49:ab:a1:10:
                    67:a0:d4:c4:be:8c:5a:fd:66:43:47:62:d2:dc:b6:
                    b0:f4:01:bf:5f:e3:32:53:f4:c9:1b:e5:12:ed:c6:
                    42:03:26:e8:5a:83:2f:f6:f9:d0:82:86:33:78:21:
                    56:65:f7:2a:e6:03:f8:74:5e:77:3d:f2:f1:11:aa:
                    a5:44:cb:90:ad:01:ce:6e:c4:5d:23:43:c0:d1:23:
                    ff:a6:a8:89:94:f3:7c:c6:e8:fa:94:84:be:57:5a:
                    28:fd:df:ca:ef:e1:25:b9:d2:78:3b:63:96:11:3c:
                    9d:19:39:77:8a:cd:8c:cc:f2:12:6d:8c:ca:76:64:
                    17:c1:e7:eb:66:d0:cf:13:8e:ee:7c:f6:a0:05:ca:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:10:52:9D:DE:33:24:94:D8:B7:20:FD:99:E3:7B:87:0C:36:D0:DF
            X509v3 Authority Key Identifier:
                keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:1b:7c:ef:4b:6f:5e:17:e3:ea:78:36:96:b3:49:8a:c2:
         26:5a:2a:4c:2a:53:66:d8:2b:9b:27:a0:fb:8d:a3:cc:1d:bb:
         27:87:01:36:59:50:54:45:09:3d:4f:58:37:99:2c:56:35:36:
         18:ae:5e:e2:39:8f:07:71:6b:d5:b3:f6:d3:c5:11:ae:6a:5d:
         3b:3c:c9:79:44:08:c7:31:3a:da:65:2a:3b:b5:98:84:7e:0c:
         82:bf:88:62:1f:5b:92:2a:47:07:c1:33:13:4d:03:aa:5f:89:
         25:3c:a2:ca:ce:04:66:2c:38:62:73:14:ce:fe:ba:f3:45:5e:
         e3:60:dd:e0:d8:00:36:a6:07:e7:12:bd:1c:fa:19:f6:4e:a1:
         6c:4f:a1:fb:65:55:1f:6e:d0:3d:c3:f7:25:00:93:43:a6:d7:
         06:9a:cd:1d:7e:c3:2d:78:ea:39:c2:ce:fc:7d:ff:54:3a:65:
         ca:04:bd:a4:02:7e:30:9f:05:fb:25:cf:51:51:5f:04:d2:5b:
         46:56:e1:ff:e8:db:4c:99:4c:08:37:28:9d:7f:c0:78:96:76:
         0b:8f:f6:69:0d:76:c6:1b:73:22:94:40:53:43:80:a9:87:2a:
         23:e0:e8:76:ba:d5:d5:36:71:98:ac:db:59:40:91:81:10:ea:
         5f:fc:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:43 2026 by rpki-client