This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          mktLl7Kzwc/4UBnpV9z2OzF9R0t/eRtSmY10Iiyl7o4=
Subject key identifier:   E0:6A:3A:2F:8E:28:2B:79:46:4A:59:B0:F3:88:CE:82:BE:6E:9B:C6
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       087E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          082F
Signing time:             Sat 24 Jan 2026 20:28:07 +0000
Manifest this update:     Sat 24 Jan 2026 20:28:07 +0000
Manifest next update:     Sat 31 Jan 2026 20:28:07 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: pq817f0QQ7SpDn/CBASw9FMbqyN+oTi5n3KwJshS0NI=)
                          2: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: uEpcGMfb+CGF0z9h3Ele0SfHW0qliwyiiR2UENjBIPQ=)
                          3: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: jmaQJtuQ6vSq6YYc8AsEnJn997H4f/GRY+0oxDMtloE=)
                          4: 0989F3EE120911EB83107638C4F9AE02.roa (hash: DUQq8P61M4M6+etTKG7c0xOZ7LZFpErrHGfiypMoOQs=)
                          5: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: dVyRa6uQinj6rgpm/KJU/KE97sLzC0gECUdWL7tkdrs=)
                          6: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: 5xWWm5B7YxaTci+cj4GRnwpowZUui6TAGk8vPkARCxI=)
                          7: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: VkWJzJFrrUcjfw7Whrx8quFhXrqF53pxpjDYVlqErEw=)
                          8: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: TFKRxnOklHqBqHXkm8eeXU3NFE2mAwrypGYRlqO2PKA=)
                          9: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: rDpjDMpANY5UP6fw4xa4nyyZLU0t3Hrc+biZaf2hOUQ=)
                          10: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: RWYwT5yolPmZnCIMSVF9rkeuAXuXhvKasppBIkRvvpg=)
                          11: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: RhTeRHpmCccyQhXwsz/bPbzoRbw66rFE3vQDJJkIS6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Jan 24 20:28:07 2026 GMT
            Not After : Jan 31 20:28:07 2026 GMT
        Subject: CN=69752b57-d383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:53:60:72:db:37:58:c4:02:6d:4b:67:d1:
                    50:ee:68:66:1e:98:53:b3:d9:a6:4f:3b:d6:b3:59:
                    99:11:4d:72:83:89:e5:d3:fb:bb:2e:a2:21:a4:55:
                    70:1c:e6:45:19:a1:a1:cd:1b:78:3d:bb:e3:ca:50:
                    6f:c1:18:5f:32:3c:46:cd:bf:b4:6e:2c:80:b0:98:
                    dc:e9:38:02:b1:25:64:6e:ef:fa:69:c2:b6:8d:2c:
                    b8:e0:1a:1a:89:5a:d0:6b:a8:0a:b5:43:5f:1b:10:
                    e3:3a:24:ab:40:59:df:d0:51:5a:91:27:59:f5:09:
                    b0:c7:41:ab:74:98:a6:a4:aa:c5:d6:59:43:fd:23:
                    44:56:35:bb:b2:4d:c6:27:60:5b:65:f2:b3:8b:89:
                    50:d5:ff:a8:b3:9b:eb:1c:0a:87:0b:5f:8f:a5:b5:
                    e3:52:c4:7e:33:98:f4:d4:75:33:22:10:63:c5:70:
                    82:be:ad:c2:1f:41:f5:fd:78:be:be:40:9f:40:6f:
                    d8:b0:a0:c0:32:f6:d2:9b:67:3a:e0:24:50:2a:86:
                    e9:7d:c3:41:4c:8a:42:70:75:1e:af:6d:6e:a2:16:
                    d5:54:40:6a:70:f3:a3:e5:61:ca:33:2a:13:17:3a:
                    18:7b:fc:65:6e:78:31:1a:69:49:f4:7f:5b:79:ef:
                    95:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:3A:2F:8E:28:2B:79:46:4A:59:B0:F3:88:CE:82:BE:6E:9B:C6
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:75:67:af:62:90:16:a5:00:df:b9:71:f7:b4:24:08:53:
         72:c2:73:ad:4e:15:61:97:bc:ef:1a:9a:05:a0:14:52:cd:0a:
         0c:25:b0:3a:c7:53:33:2b:1f:71:38:3a:18:0a:0c:bb:1a:55:
         76:ca:4b:88:65:bb:ed:f5:83:13:96:1e:3f:3f:4b:1a:a5:49:
         c9:f4:a9:47:55:9f:85:71:c9:dd:ef:95:82:9e:a6:9d:11:73:
         c1:49:cb:e3:86:11:b8:e3:bb:ac:46:66:81:b2:6b:bb:35:00:
         0a:b5:d6:21:f4:63:ca:de:66:d4:14:f6:cb:f9:90:7a:47:17:
         c1:8b:6e:31:16:f3:cd:02:18:f8:f4:25:07:ce:46:65:da:58:
         32:10:f6:df:93:29:9b:c5:c8:49:f8:8a:a9:dc:04:99:80:2a:
         23:b1:f5:bb:ae:0b:7d:0d:de:46:dc:ec:ee:e2:70:5d:17:a1:
         ff:df:28:4c:6c:36:84:0a:56:69:84:6c:a1:2a:4e:ce:2b:a4:
         3f:2f:f0:d7:ad:ac:4b:e6:a5:1d:7a:93:19:3f:d5:04:ad:b8:
         42:92:81:11:65:de:e7:d1:61:22:04:0e:01:0b:22:ea:39:0b:
         7b:67:36:cf:56:52:e8:da:a8:6f:89:5c:0f:8b:95:12:05:47:
         c0:3b:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:48 2026 by rpki-client