This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
File:                     odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json)
Hash identifier:          sONcswbyzUZLsKQcwHg6xbDYZAhIRJMTNUinVpSEBGU=
Subject key identifier:   72:32:21:DC:CF:F3:55:90:93:34:0F:D3:12:33:1A:C3:DD:BB:CB:D1
Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8
Certificate issuer:       /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
Manifest number:          0104
Signing time:             Sun 25 Jan 2026 04:18:30 +0000
Manifest this update:     Sun 25 Jan 2026 04:18:29 +0000
Manifest next update:     Sun 01 Feb 2026 04:18:29 +0000
Files and hashes:         1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: O3Xyq2xI9jBxPGXCBhGgRo8x+Ggi1UK0BCX8NEYaYfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8
        Validity
            Not Before: Jan 25 04:18:29 2026 GMT
            Not After : Feb  1 04:18:29 2026 GMT
        Subject: CN=69759995-dcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:25:4e:1e:70:1e:c1:fa:7c:91:f2:19:4c:
                    dd:9b:50:7a:9a:c9:71:19:e1:eb:ae:56:14:46:c0:
                    7b:6b:fa:60:47:ee:43:52:14:1d:63:ad:79:15:d1:
                    71:09:5f:b2:72:b8:00:dc:be:3a:01:0e:5b:6a:7c:
                    86:3a:1e:5f:e6:9e:11:b7:95:25:bb:ef:cb:14:be:
                    a9:ec:c9:e7:67:87:dd:06:2a:e3:60:fb:fa:4a:3d:
                    31:39:c3:1b:ec:8d:a1:ab:b9:b2:c5:0a:63:ec:f2:
                    ec:ad:38:d1:db:f9:a4:53:b2:e1:cd:9b:f6:fa:93:
                    63:18:88:ae:9b:cf:34:3c:58:a5:d0:bc:7e:b2:5a:
                    12:a6:82:98:ed:6a:17:03:97:d2:ed:bf:5e:13:7f:
                    5b:d8:47:44:ed:92:6c:d3:b8:cb:f7:77:46:86:9b:
                    ab:98:4a:c4:2c:f3:d0:91:89:ad:1c:3d:01:45:5e:
                    e3:1b:ff:05:03:d0:f4:0f:52:34:34:13:59:d8:69:
                    8b:1d:2c:d8:64:ac:e6:fd:c0:51:c9:0f:5c:b2:f5:
                    0c:e3:49:86:90:6b:1a:c3:7c:b6:3f:4f:9d:14:e1:
                    29:b6:7e:06:27:93:78:09:b3:02:c8:1f:ed:ae:66:
                    32:cb:25:03:91:34:78:2d:54:25:8d:b3:c7:f6:ef:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:32:21:DC:CF:F3:55:90:93:34:0F:D3:12:33:1A:C3:DD:BB:CB:D1
            X509v3 Authority Key Identifier:
                keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:14:41:06:a4:79:69:cb:68:7a:04:94:bd:ad:d9:64:e6:1b:
         57:f7:80:0a:0c:62:96:73:d2:53:4b:89:29:b7:af:08:46:e4:
         0a:57:83:c1:40:e2:e2:61:82:f7:36:7c:56:ae:8b:8c:ad:43:
         26:08:42:17:c7:a2:8e:59:16:02:95:92:0f:40:67:34:6b:ea:
         f3:02:ef:68:92:f5:93:0e:b6:36:b6:15:80:6d:50:07:6c:d7:
         de:4b:d7:95:0a:a7:86:49:45:56:25:a8:a8:c1:c4:53:e1:11:
         51:ea:a6:a0:46:03:f2:7d:4e:16:f4:9e:5c:30:96:30:c0:6e:
         cf:da:5d:9a:39:bd:3b:e1:ac:ee:56:cc:b2:d9:38:6e:4b:13:
         f3:aa:54:39:e1:68:5e:02:01:b4:2b:49:74:0c:27:a4:b6:f1:
         02:97:b2:26:41:66:81:36:3e:71:f0:d9:1a:9b:21:e3:ab:82:
         9b:8e:f8:b4:6d:1a:78:08:0c:46:88:15:a7:85:77:b1:a0:a0:
         e7:50:96:0c:53:7c:fd:98:67:d1:db:85:73:a3:d7:cf:ec:08:
         ec:e2:1f:bc:6a:1c:8e:64:4a:51:81:a1:68:27:d3:c3:b9:84:
         1c:49:72:34:2f:a9:bc:51:98:4f:83:d9:48:9d:2c:c7:b1:f8:
         0d:a7:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:49:29 2026 by rpki-client