This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
File:                     JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json)
Hash identifier:          lfMAAcxsfV/DGSpoN9UnbhatVRj9Ogm7l1V8gvTNiPw=
Subject key identifier:   48:49:26:9D:D9:A7:3F:87:56:C9:01:4E:C7:9F:6A:5B:8D:FB:C5:D4
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       07B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
Manifest number:          079A
Signing time:             Sat 24 Jan 2026 20:52:38 +0000
Manifest this update:     Sat 24 Jan 2026 20:52:37 +0000
Manifest next update:     Sat 31 Jan 2026 20:52:37 +0000
Files and hashes:         1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: 1TwoLYmhffNvzLfcKXxEeXkmlOHbYu7GTRkEO8gxZ4w=)
                          2: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: R4hJWTd6VbmXqGeT9fBJVuJc7yCjp6bOssVRsthNf94=)
                          3: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: 9avL2Ad9M1e51xqr+g4Ok7rpofizFz/lEbEixkRcZkk=)
                          4: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: Q4VBl6t7IxgDUfIveQUTPQulCitna2Ej85qnHBLGKO8=)
                          5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: YBYY6RrsWzS4ijJ6zt44OGC0XzSR6EQ0weLmwo+ie00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Jan 24 20:52:37 2026 GMT
            Not After : Jan 31 20:52:37 2026 GMT
        Subject: CN=69753116-8b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:49:dd:b3:72:ee:12:ea:84:68:18:2a:7d:
                    e5:dc:ae:db:0f:49:f9:3e:62:fa:b7:50:a4:d8:8b:
                    4a:89:d9:02:4f:35:6a:da:42:d6:aa:e9:93:1e:54:
                    8a:b1:94:68:61:d6:e8:1d:5e:f8:a5:58:6c:77:77:
                    0c:27:af:76:e8:df:42:af:4c:7a:20:79:82:62:6c:
                    7e:e5:f2:8c:28:58:52:6a:24:7e:d3:64:03:b8:ae:
                    0d:68:8d:75:e6:cf:04:71:0a:0c:26:19:b8:59:c9:
                    f4:c1:5b:48:e0:11:96:95:11:59:f6:80:fe:98:b5:
                    52:b6:10:d1:ed:77:e7:90:29:1b:77:54:d7:6d:69:
                    18:da:d0:88:39:60:1e:89:61:17:a7:3f:5b:e4:a9:
                    a4:3f:ac:de:46:5d:df:bb:af:cf:08:7d:67:36:ff:
                    60:c4:bd:12:8b:91:01:a3:6e:49:3e:6b:82:21:d7:
                    9d:66:3a:f3:21:e1:d6:78:49:32:d3:a9:0c:63:d0:
                    09:d1:26:88:17:cf:ac:4e:19:ea:13:4a:87:8c:24:
                    f4:a6:ff:5e:3f:65:37:b1:a7:66:2e:52:28:df:53:
                    de:13:6c:ea:ce:ea:64:f4:5f:ba:b6:31:bd:29:fb:
                    da:4a:14:52:4d:6d:40:f2:dd:64:95:29:be:e5:1d:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:49:26:9D:D9:A7:3F:87:56:C9:01:4E:C7:9F:6A:5B:8D:FB:C5:D4
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ea:1e:09:04:08:dd:b3:92:b2:88:b0:83:db:3c:de:b7:97:
         45:58:7c:11:43:32:fe:23:ea:63:a0:a6:79:fa:2b:59:e9:d3:
         12:26:3c:4d:49:5b:aa:b7:b0:41:70:7f:c3:00:fd:88:b1:9c:
         62:9b:6e:fb:7a:f4:c8:4f:6d:cc:ff:9b:a3:f1:77:be:41:ed:
         5d:fc:5e:d5:f6:ac:f3:d4:fe:ab:4a:56:5c:21:51:c4:46:f2:
         83:8a:d4:b0:0c:65:d4:a5:51:bd:4a:d5:4d:19:f1:14:4c:1c:
         51:bf:ec:73:95:22:cf:7c:5c:1b:8c:81:67:86:53:d8:42:bb:
         ec:67:67:84:8d:01:83:56:82:f3:51:4b:3b:f6:13:ac:7a:b0:
         cf:1c:af:c6:3a:5b:53:b3:c7:8e:fe:24:a6:9b:dc:f6:6d:16:
         fc:16:a4:63:2f:65:32:24:b8:c0:8e:19:58:f9:15:a1:8d:31:
         fb:3f:e4:42:41:1c:d4:c2:40:7b:c8:4b:82:8a:b7:d8:ad:d9:
         fa:73:c5:d8:c7:d6:ab:17:ed:9c:20:39:a1:ce:c4:f4:9f:55:
         fe:eb:65:38:1f:d0:5d:53:dd:13:bb:5b:99:c5:55:40:1c:8f:
         41:7c:29:23:42:da:84:c5:b7:1a:ee:65:c3:ad:13:35:44:e3:
         5f:31:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:54 2026 by rpki-client