This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
File:                     sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json)
Hash identifier:          DFQ0ZIQfo5U23/8u4YVHJWsU31/JSjPAU+dh+CBEUDE=
Subject key identifier:   90:43:31:00:C1:EE:82:12:30:BD:2A:19:1B:DA:BD:37:1B:4D:3F:6F
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Certificate issuer:       /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial:       3503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
Manifest number:          3500
Signing time:             Sat 24 Jan 2026 14:59:29 +0000
Manifest this update:     Sat 24 Jan 2026 14:59:29 +0000
Manifest next update:     Sat 31 Jan 2026 14:59:29 +0000
Files and hashes:         1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: SprXswT+KXAn6YsMzoxKe0NOy81r7R2Uyf06eRcqYpE=)
                          2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: PxmSFkrKdWSS0b/4HxHMD4OMFaotkeq0lZg48oiZtE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13571 (0x3503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
        Validity
            Not Before: Jan 24 14:59:29 2026 GMT
            Not After : Jan 31 14:59:29 2026 GMT
        Subject: CN=6974de51-c5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:be:7b:60:4a:fa:af:64:9d:f1:9e:ed:49:
                    91:50:ea:0a:dd:29:11:9f:14:5a:ce:5c:ef:18:50:
                    91:c7:9b:e9:b5:e6:34:bd:82:66:0b:e3:49:0f:82:
                    4d:3f:6d:21:3a:ad:f6:b5:c2:53:42:20:8f:8f:f7:
                    92:83:8a:81:42:81:d1:62:bf:cd:fb:3f:79:f0:5c:
                    65:27:83:86:87:ed:0c:fb:78:cc:58:c2:ce:ac:9a:
                    d5:67:30:9b:26:e9:a5:5b:54:52:e0:e3:e2:9d:54:
                    e6:19:be:05:f8:a8:57:79:26:43:5d:58:35:da:e3:
                    f3:2a:c8:51:48:bd:1d:78:14:22:e4:d0:c5:cf:48:
                    4f:d2:98:2e:62:33:d0:7d:98:74:36:ea:f2:9d:98:
                    4e:66:9f:9e:44:e3:49:80:04:11:6b:df:ca:db:44:
                    12:fd:8d:9f:7c:4a:d7:fc:72:88:a6:9d:2c:f1:e2:
                    db:54:c2:e1:ba:5e:94:98:57:28:20:95:72:4b:ef:
                    44:e0:5c:b9:ad:2d:ed:5e:ca:52:67:3a:33:33:8d:
                    27:c1:f0:1f:35:a7:85:81:20:6b:65:50:17:cc:51:
                    ec:40:df:ce:df:6a:6f:6e:80:1e:b5:66:e0:a4:31:
                    12:82:d7:c7:71:d7:1b:31:94:eb:46:82:d1:67:d6:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:31:00:C1:EE:82:12:30:BD:2A:19:1B:DA:BD:37:1B:4D:3F:6F
            X509v3 Authority Key Identifier:
                keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:93:c7:7f:b2:f3:b1:b9:21:8f:b2:cf:a6:4b:fa:52:65:b8:
         8a:9c:a6:fa:b7:26:ec:bc:d1:50:49:92:5e:5c:dd:cf:c1:44:
         b7:28:a7:93:b8:18:51:37:a3:0a:49:4d:10:72:14:ca:6d:c0:
         6c:df:2e:49:ec:ec:3b:6e:f9:6d:03:a4:8f:8f:40:fc:71:bf:
         42:82:87:31:c6:43:db:e1:28:0f:fb:b5:0a:f9:10:ef:e1:9e:
         00:38:46:8b:d2:ca:93:ba:20:71:1c:46:02:f4:04:86:65:62:
         c9:dc:42:3d:58:62:28:a1:69:85:9d:f0:9b:1c:e1:47:3b:45:
         1d:f1:f2:50:f9:de:7f:a2:37:6e:d2:f8:7a:89:89:2c:f9:51:
         8c:6e:5a:78:b2:d2:cf:2c:97:a6:eb:be:af:57:86:af:bb:99:
         b0:ff:77:6e:32:db:35:d8:9a:8c:49:9b:ad:37:05:74:73:21:
         79:9b:2b:11:6b:ed:94:08:1c:8f:02:6d:15:c5:d7:d9:11:d6:
         7b:62:6c:44:fa:07:f3:04:7b:cf:6d:ac:eb:0d:ff:b3:4b:2a:
         03:ca:90:9b:de:51:87:7b:2f:aa:3e:e5:b7:b5:c7:d2:8e:90:
         00:53:85:82:a9:0a:9f:2f:78:06:7f:c1:72:23:5e:44:cd:77:
         ca:f3:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:04 2026 by rpki-client