This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
File:                     Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft (raw, json)
Hash identifier:          wJwEuoKxjDNziFg7D7p6UFNpw5MQRN7muA4YQgOtf+0=
Subject key identifier:   90:C5:E1:D3:57:15:2B:FC:EF:69:85:2F:59:EB:D0:C5:4B:91:62:54
Authority key identifier: 36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26
Certificate issuer:       /CN=A91B67B0/serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
Certificate serial:       05ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
Manifest number:          05E4
Signing time:             Sat 24 Jan 2026 22:14:44 +0000
Manifest this update:     Sat 24 Jan 2026 22:14:44 +0000
Manifest next update:     Sat 31 Jan 2026 22:14:44 +0000
Files and hashes:         1: Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl (hash: tCQYb5QzjoA2jtnDCI7kif025U/pNVC8Poo0bH1QK1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl
                          rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67B0, serialNumber=36BFDF4C65CDEE6BB76E9F3E608034661A9D7A26
        Validity
            Not Before: Jan 24 22:14:44 2026 GMT
            Not After : Jan 31 22:14:44 2026 GMT
        Subject: CN=69754454-f3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:93:bb:31:25:a2:9f:81:a6:6f:09:c4:bc:
                    96:77:14:fb:43:b6:a6:b8:72:7e:48:e6:2b:d2:c9:
                    c3:74:47:ce:0b:73:2b:4e:0b:7e:77:de:82:11:e1:
                    99:5e:ec:30:2b:c9:7e:28:a8:94:0a:f6:68:34:fa:
                    85:6a:c8:6b:0c:11:60:21:79:52:06:c3:d6:f2:2c:
                    d2:d1:22:2a:ae:dc:17:a6:c5:7e:46:f2:59:b9:8d:
                    db:55:04:2c:81:fe:9a:bd:aa:8f:0e:33:b2:12:82:
                    1b:71:26:24:fe:ee:f3:6d:b1:8e:05:12:6d:83:ea:
                    b2:2e:aa:32:8d:09:82:43:43:d6:b5:8e:3a:df:26:
                    8b:1d:15:2b:9f:73:fb:b8:58:4a:1d:27:62:de:27:
                    3a:41:ff:ee:14:8e:11:d9:f2:f3:f7:ca:46:3f:64:
                    87:47:c2:76:96:a5:42:7a:9c:fc:b6:43:37:f2:56:
                    b8:a2:8a:3d:c5:cc:6d:1b:2e:64:fa:a1:37:4e:57:
                    a0:8b:b2:34:36:f2:1f:9f:cb:b9:5e:7d:d1:f5:4b:
                    96:6c:18:8f:08:42:bc:18:ad:6e:fe:06:ee:eb:d9:
                    ea:66:a0:35:8e:87:d4:b0:1c:e8:2e:40:1c:a9:3c:
                    6e:89:f1:1b:7f:2c:5a:e3:05:d2:e6:1a:9e:49:5b:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C5:E1:D3:57:15:2B:FC:EF:69:85:2F:59:EB:D0:C5:4B:91:62:54
            X509v3 Authority Key Identifier:
                keyid:36:BF:DF:4C:65:CD:EE:6B:B7:6E:9F:3E:60:80:34:66:1A:9D:7A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67B0/21C00818E44F11EBAAA37F0CC4F9AE02/Nr_fTGXN7mu3bp8-YIA0ZhqdeiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:d2:1d:cc:ba:2e:c7:84:76:e0:9f:11:4b:49:d3:8a:44:
         38:07:f5:30:ef:b2:d1:b3:c3:4c:c6:f2:2c:ad:12:7e:bc:7b:
         39:88:81:29:12:50:a5:b3:8d:d9:d0:8b:31:5f:11:40:1d:41:
         a9:dd:27:44:2e:6b:b7:04:cc:56:fa:d6:b4:b0:16:4e:f5:5a:
         74:79:70:18:ce:dd:8f:09:70:38:5f:af:2d:e1:69:90:44:ca:
         ea:e2:f0:8b:2b:33:48:52:bc:f8:d9:59:53:29:28:48:76:af:
         69:ca:05:a8:fd:84:5b:cd:0f:49:97:58:d4:81:75:c9:b3:44:
         66:3a:49:0c:a3:ea:2b:a6:93:c1:59:20:9b:e8:c2:78:f2:8f:
         38:81:49:a6:7e:4b:80:77:ef:c7:b7:ec:43:68:39:24:29:de:
         74:5e:0c:38:04:73:6e:4c:a4:fa:55:dc:82:42:a6:6f:f4:73:
         e4:a6:6d:a8:6e:89:d7:83:fe:ce:1e:40:f9:2e:10:fb:9a:b9:
         5f:8d:45:e7:1a:f3:f9:58:73:fb:37:f9:76:6e:d5:60:5a:2c:
         01:2a:da:6e:df:0e:1c:41:2c:96:0f:01:a8:d6:7b:59:6a:a2:
         7a:1c:72:13:da:90:1a:a6:a8:8d:d0:34:34:1f:d9:09:87:2b:
         db:3b:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:57 2026 by rpki-client