This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
File:                     72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json)
Hash identifier:          XNv4L1BEWF+pV1VFGTli2zxKZMu8ivQXcoTHCFZFlYE=
Subject key identifier:   84:88:12:F4:6F:17:A5:32:17:64:2B:08:27:74:D4:47:D1:92:B8:81
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Certificate issuer:       /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial:       0537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
Manifest number:          0529
Signing time:             Sat 24 Jan 2026 22:47:17 +0000
Manifest this update:     Sat 24 Jan 2026 22:47:16 +0000
Manifest next update:     Sat 31 Jan 2026 22:47:16 +0000
Files and hashes:         1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: QI/0dUaaoobwP7ywP7bOucU8GVVazbLxezonLultew0=)
                          2: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: ehKgJL5LpCf7RlyE1aWed3p9Jx0fKt/Hbu4XpQx0/fc=)
                          3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: yboxuGYa7ria6kIKGtokstUujAuaxIezyJo4PlnmwrQ=)
                          4: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: RtF3QF7uJka6OGDIQWbUTerYNiAs2ytZrcxGiAE5oMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
        Validity
            Not Before: Jan 24 22:47:16 2026 GMT
            Not After : Jan 31 22:47:16 2026 GMT
        Subject: CN=69754bf5-0326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:fd:54:be:39:d4:90:fd:8c:53:18:2a:3f:
                    2b:40:24:7d:36:c0:73:27:0e:36:c0:f1:bc:24:16:
                    2e:e7:89:12:6f:e3:b5:76:ae:d1:7d:ef:d6:14:fa:
                    5c:17:92:e0:1f:a7:1c:b0:44:ac:77:98:b6:96:2c:
                    31:7e:0c:59:77:cb:be:ce:4d:19:c8:42:99:b8:43:
                    76:e0:dc:44:78:4c:de:67:96:5a:bb:f1:7b:bb:fa:
                    d8:85:d4:5b:98:c0:2a:62:48:0d:a8:78:a3:71:e1:
                    33:98:cf:50:cc:1a:d2:ee:e3:30:61:c7:e9:53:03:
                    8f:84:19:4d:4e:05:4c:08:c6:6d:35:00:ed:b3:58:
                    b0:35:04:22:57:e4:0e:c8:11:b8:43:b3:27:cc:fc:
                    a7:f7:dd:41:98:67:2d:4f:38:9f:22:b9:41:14:f3:
                    78:5f:09:35:0b:4f:54:f5:17:c7:47:32:1e:c5:e5:
                    1b:b8:22:f8:9d:76:1e:9c:bc:d2:b3:26:67:8a:25:
                    22:5a:07:30:15:42:23:22:f1:f0:d0:00:f5:53:d0:
                    f4:91:a6:d4:fa:28:4f:62:8b:50:3d:23:d5:51:ab:
                    76:27:bb:76:04:1f:7a:c9:68:48:1b:34:1d:a8:87:
                    02:4e:fb:ce:67:a0:bd:c3:6d:48:31:c0:8f:35:18:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:12:F4:6F:17:A5:32:17:64:2B:08:27:74:D4:47:D1:92:B8:81
            X509v3 Authority Key Identifier:
                keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c1:fe:43:fb:55:63:94:57:61:d5:a6:3f:d6:62:b6:8e:ed:
         00:7c:ce:04:1c:9d:c1:e6:11:92:6c:64:af:d8:97:c2:91:36:
         c9:07:49:74:66:e5:ee:da:a4:b8:93:7e:63:a2:8a:e6:08:33:
         fb:ea:d5:8e:31:ea:10:e8:7e:6a:ae:16:5f:36:36:c4:b2:68:
         01:32:d9:9c:d6:a7:5d:2e:84:a2:79:65:eb:1e:d8:58:19:3a:
         cb:d8:4f:cb:25:94:29:8d:60:ea:a1:28:13:15:31:db:1e:c5:
         66:24:78:81:b1:d6:bf:00:85:77:df:ea:90:3c:4a:0d:68:4e:
         99:e7:73:98:bd:e4:96:de:c5:2e:67:85:fb:88:33:22:55:d4:
         3a:d2:91:b3:45:4b:93:29:a7:50:0b:62:29:e8:40:f8:d1:78:
         da:8b:4e:0e:b7:91:35:e3:7f:70:5f:aa:27:a9:00:a5:69:43:
         4a:eb:69:c6:42:ee:bb:74:ea:82:a9:61:9d:f1:9d:0a:df:55:
         f6:44:8f:84:c9:80:5f:81:f5:c8:14:1d:d6:e2:04:42:7f:dd:
         49:53:3c:a7:6e:75:5e:f8:00:68:2e:49:e3:d2:f3:52:93:6f:
         7e:3d:6e:c2:1b:8d:4c:fb:e8:20:42:c5:94:bd:3b:14:a6:e0:
         f7:8b:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:24 2026 by rpki-client