This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File:                     S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier:          CZFkn+1zVeiFfOJpi8l1qaHG7n1oIzLMxkLlWhn42yY=
Subject key identifier:   8F:F8:9A:26:F1:52:F8:3F:E1:EE:EA:94:AE:DB:EE:5A:A8:B9:0D:A4
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer:       /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial:       0703
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number:          06FA
Signing time:             Sat 24 Jan 2026 21:19:12 +0000
Manifest this update:     Sat 24 Jan 2026 21:19:12 +0000
Manifest next update:     Sat 31 Jan 2026 21:19:12 +0000
Files and hashes:         1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: epvjdRG774jMK55FkjwU286BGobw5Lfm1Vr9Q/Cv8uQ=)
                          2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
        Validity
            Not Before: Jan 24 21:19:12 2026 GMT
            Not After : Jan 31 21:19:12 2026 GMT
        Subject: CN=69753750-179c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:17:bb:0c:3b:f1:fe:7b:93:e7:2e:6c:30:
                    16:a8:e0:fc:67:e5:e3:89:c0:79:b1:cd:ca:6b:a4:
                    19:ed:16:19:1b:5b:56:c7:d9:52:35:46:e5:59:d3:
                    e3:c3:4b:25:17:93:b9:40:45:d4:44:35:0e:52:69:
                    22:62:dc:c1:ca:cc:a2:b5:65:96:0a:dc:fa:1a:50:
                    0d:80:33:45:53:42:72:80:40:c9:ea:d9:92:2c:46:
                    b5:dd:5d:2b:51:5a:36:79:b0:86:4a:c8:8b:28:de:
                    83:aa:60:33:3f:78:e6:e0:3b:8e:5b:67:87:a7:0c:
                    46:87:e9:45:c2:db:48:d0:10:d1:66:c5:88:47:5d:
                    84:40:26:dd:6c:4d:93:bf:a6:90:a3:47:b0:34:47:
                    7f:6b:a1:53:3d:22:40:b6:49:e3:70:44:77:61:59:
                    30:51:e8:41:da:47:08:88:ba:70:6f:cd:af:2e:75:
                    4b:4c:bf:1e:45:8e:52:51:79:9d:0f:bc:b6:5e:0d:
                    bb:ec:1c:7c:74:3b:8c:de:3d:0c:17:35:7a:6f:2f:
                    d6:36:28:11:8b:28:c5:71:f6:d5:f7:17:2c:aa:4b:
                    11:47:70:3f:29:cd:d8:3c:6e:43:29:5c:74:a6:85:
                    8f:b4:40:cd:fc:3f:89:f0:83:61:4a:80:3e:f8:46:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F8:9A:26:F1:52:F8:3F:E1:EE:EA:94:AE:DB:EE:5A:A8:B9:0D:A4
            X509v3 Authority Key Identifier:
                keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:18:b4:a7:51:28:29:e4:ef:14:24:ba:1f:9a:56:d8:fc:e8:
         b5:60:07:06:12:9b:a5:e7:ab:29:6a:8e:d4:70:31:fe:69:71:
         07:47:50:a4:04:cd:59:5f:4e:10:01:68:e3:a4:5b:5e:c1:cb:
         e2:e0:92:ae:84:d1:c5:7d:f0:ae:6e:5b:3d:b0:d4:2a:5e:a2:
         be:e4:cd:3e:fc:fe:92:f7:0c:b9:cc:29:f9:a3:61:c5:ae:03:
         94:57:57:ef:35:9b:fb:5e:c5:98:1c:50:10:c8:75:e9:27:6b:
         0c:d8:4a:9e:f8:bd:ad:74:f3:be:46:60:c1:de:03:ce:8f:1d:
         62:19:08:92:f1:f8:69:e6:25:ba:aa:4b:a0:16:8d:d2:0c:0c:
         63:91:2b:b5:db:96:67:e6:09:ff:38:1c:60:be:68:5e:c6:48:
         51:c8:79:d4:78:8d:86:a3:3b:f3:cd:51:99:16:5b:66:5b:98:
         03:56:11:84:ed:ae:7e:32:75:77:d0:9a:a6:f4:d2:98:ec:05:
         65:7b:de:34:fe:3e:44:65:1c:58:7a:21:89:66:9a:8b:eb:9f:
         5a:05:3f:16:e9:bf:ed:6d:9c:4e:db:a8:49:3f:a3:3e:8d:8a:
         e3:74:b6:0c:3d:dc:bb:e9:ca:1c:d6:d9:81:98:a8:e3:be:63:
         b6:8f:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:39 2026 by rpki-client