This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File:                     80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier:          2f0aHM8GtEuxrh1/RBsdbpNjHY//YQKdWNyksu24yEI=
Subject key identifier:   90:E5:60:79:71:9C:08:6B:B1:91:15:B1:EE:84:F9:78:3C:AE:20:BE
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer:       /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number:          55
Signing time:             Sun 25 Jan 2026 06:16:41 +0000
Manifest this update:     Sun 25 Jan 2026 06:16:41 +0000
Manifest next update:     Sun 01 Feb 2026 06:16:41 +0000
Files and hashes:         1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: KoOuoTefp+7x7WB7fnh4XLf1VnFVzX0XpSjPTiTxJMQ=)
                          2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: 6XTjIZuui64Zt7h8q158hY/yPZ00zRaoK7PVf/jp3D4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
        Validity
            Not Before: Jan 25 06:16:41 2026 GMT
            Not After : Feb  1 06:16:41 2026 GMT
        Subject: CN=6975b549-4f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:b7:64:28:16:15:a5:59:6a:e6:16:dc:e0:
                    ab:62:ae:ff:57:8e:10:05:b0:51:05:61:b5:8d:8e:
                    be:af:4c:a2:ef:5d:35:77:cd:e9:48:5e:53:19:8c:
                    c8:4b:3d:9c:63:a9:ba:73:57:80:0d:88:62:3a:a1:
                    d9:96:c9:d6:13:eb:98:c1:55:af:e0:1f:70:bd:66:
                    c5:07:3f:52:d2:51:f3:cc:e3:77:3c:54:82:24:7c:
                    b4:56:5a:23:a4:96:94:1d:96:6c:b3:b1:3c:01:a7:
                    05:79:a9:62:1c:1c:7f:75:b0:c9:ea:38:be:6f:91:
                    ed:f3:bb:e7:03:ae:30:63:2a:27:66:2f:08:a9:24:
                    d9:28:47:fe:ac:02:82:2a:e7:89:e8:f0:8a:98:92:
                    40:20:90:77:c7:f2:32:3b:f3:f9:f1:b2:d9:0c:a8:
                    75:97:cb:f8:a2:66:10:68:02:f1:af:e4:36:92:5a:
                    9a:1a:a6:83:c7:29:d8:b7:f4:d3:46:95:36:be:bb:
                    e0:52:a0:fe:79:b0:16:f4:6e:af:27:bc:b1:d0:61:
                    8f:e1:62:65:29:67:1c:e3:aa:5e:95:5f:79:5d:80:
                    cb:80:57:e2:a8:b0:dd:20:a9:43:6e:aa:33:02:d6:
                    f0:8f:d7:ff:a2:54:bd:7a:0d:2a:0b:7a:b0:74:50:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:60:79:71:9C:08:6B:B1:91:15:B1:EE:84:F9:78:3C:AE:20:BE
            X509v3 Authority Key Identifier:
                keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:70:b9:ee:df:ed:9e:ac:4d:5f:90:ea:85:ff:95:f8:2b:
         7b:5e:fa:e2:41:54:69:5d:41:0e:7f:3e:4a:ba:c6:63:8e:76:
         14:7d:31:16:8d:b6:49:1c:5e:07:91:16:34:ac:53:63:e3:4e:
         04:25:47:56:57:a0:3a:17:f1:c6:f9:3c:3f:6c:9d:27:bc:a4:
         35:6a:52:6e:e7:e8:d6:d9:0d:a6:3d:b8:89:7b:d5:c4:75:15:
         62:e5:6b:2d:4e:f1:05:e5:f6:05:a0:46:2e:c3:fa:c0:ed:30:
         c1:06:a0:b6:85:13:45:cd:a4:bf:0f:ba:7b:e0:bc:45:7e:22:
         cf:a8:4a:d3:c5:67:68:e9:61:12:cc:f7:99:7a:e3:d1:2f:a4:
         1f:2f:21:d0:3c:59:22:57:98:1b:ef:c8:6e:da:64:88:19:92:
         d0:9b:e4:7b:39:db:ff:da:65:63:18:13:16:4d:93:db:61:65:
         dc:99:54:5b:65:a0:f0:bc:ac:24:5f:34:d8:7b:ba:40:f4:d8:
         83:0d:ed:71:13:3c:91:76:5c:fe:c6:ba:06:6f:21:db:f0:52:
         70:9c:12:4d:25:67:8d:2d:23:0b:99:c5:0b:64:d1:8b:f1:e2:
         01:5e:6c:08:f3:d2:71:9d:0b:46:05:25:9c:c0:f0:b8:1a:08:
         94:9b:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:29:24 2026 by rpki-client