This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
File:                     M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json)
Hash identifier:          Fntxs5uwkAyv3Hv6M2v63bPcnTNSJqtbrmhF7NheEd4=
Subject key identifier:   CE:70:E3:B6:22:C1:D0:9E:F0:A0:41:09:CB:6E:9A:F3:95:69:43:2D
Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9
Certificate issuer:       /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
Certificate serial:       0A0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
Manifest number:          0A00
Signing time:             Sat 24 Jan 2026 18:52:03 +0000
Manifest this update:     Sat 24 Jan 2026 18:52:03 +0000
Manifest next update:     Sat 31 Jan 2026 18:52:03 +0000
Files and hashes:         1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: vDXA6kvZ+PQtYNMtotxV2imYbf7o/NKNfqy6FsHWZGY=)
                          2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: D5CUsTP2i0/HciFNANN82DTJAFUcohbemvIx6yZbLyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570 (0xa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
        Validity
            Not Before: Jan 24 18:52:03 2026 GMT
            Not After : Jan 31 18:52:03 2026 GMT
        Subject: CN=697514d3-d25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:1c:24:27:af:c6:8e:ed:df:f9:5e:98:c4:
                    76:75:47:01:9d:2d:ff:a2:af:cd:8d:e4:1a:c2:71:
                    3b:8c:da:37:3b:26:bf:27:22:ca:c9:e3:78:27:cd:
                    1c:97:98:2f:8e:17:f6:6a:f0:e6:ff:c9:c1:77:94:
                    8d:d5:5c:ea:03:e6:fe:5b:b9:5f:63:08:6a:d3:71:
                    8d:33:83:b8:38:a2:5c:75:c5:24:6f:cb:0b:a3:76:
                    24:ce:e6:7c:c4:52:e8:a2:3f:02:31:f9:59:b9:e9:
                    94:43:a4:41:70:6c:1a:ff:cb:b2:a8:1c:34:f4:b7:
                    19:50:b7:e6:be:fd:8d:08:dd:ab:65:bf:a4:b2:6e:
                    0d:9b:74:24:49:81:61:e7:b6:10:f7:2b:b1:7a:61:
                    05:25:35:f2:54:31:ba:ec:f0:d5:11:79:c1:5e:27:
                    28:95:03:8c:fa:42:66:21:84:6f:66:4b:0f:d4:28:
                    15:64:0e:7a:35:e6:06:9a:e5:95:89:41:65:ce:a1:
                    f5:9d:e5:2e:c5:ee:d0:b4:bd:6e:b4:7d:64:84:1b:
                    cd:c8:f1:05:da:71:40:75:2b:db:44:29:63:02:22:
                    c3:e0:59:70:11:04:8e:2d:39:f1:68:c6:94:78:c9:
                    e9:1d:8a:33:98:cb:52:6b:7a:a1:32:b8:5c:d7:67:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:70:E3:B6:22:C1:D0:9E:F0:A0:41:09:CB:6E:9A:F3:95:69:43:2D
            X509v3 Authority Key Identifier:
                keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:da:8e:9b:0e:a3:60:25:73:44:b1:fa:f4:55:fd:eb:dd:
         59:91:22:13:42:eb:da:78:c2:a2:be:e7:ec:96:4a:b7:30:91:
         e6:47:37:52:2a:51:52:3a:3b:ce:d0:bc:34:fd:e6:57:fd:96:
         ed:63:4e:b5:0e:b4:1b:64:3f:97:90:0e:2d:c8:de:83:9f:12:
         2c:11:5c:11:27:1e:81:a8:41:f4:23:90:1d:67:71:58:2d:69:
         84:2d:ae:68:af:5c:98:15:e7:c4:86:6f:82:f7:40:05:b4:57:
         86:e6:23:1b:5a:6b:4f:26:ea:cc:3e:85:42:90:6b:e8:19:c1:
         33:a9:e7:91:88:4d:50:46:e3:45:4d:5e:59:b6:cb:71:80:17:
         89:e1:70:72:c4:3f:92:fc:9b:1f:ca:c9:b2:b7:73:98:36:6b:
         12:6b:94:5c:f6:73:a6:5b:18:52:97:40:07:f0:d7:36:8c:6b:
         bf:bf:3e:b5:05:4e:42:df:7d:d6:e4:02:9a:4d:10:e7:99:0a:
         1b:a8:63:80:ec:af:a6:b8:e2:53:1e:92:87:6e:e3:91:42:5e:
         c5:92:07:03:7a:7e:39:e2:2f:4e:34:cb:2b:6f:70:69:db:39:
         34:66:03:f3:73:01:19:30:31:e1:4a:7f:0a:ce:f5:8a:0f:98:
         e2:d8:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:18 2026 by rpki-client