This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
File:                     3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft (raw, json)
Hash identifier:          5Qab4ISJ4mISCImXvP6tX579Tr7kT7YrPLv0mwAyo9s=
Subject key identifier:   6A:88:7B:CB:FB:5A:47:97:AE:EE:54:A0:65:F3:0D:A2:FC:3E:99:B5
Authority key identifier: DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0
Certificate issuer:       /CN=A91BC64D/serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0
Certificate serial:       06BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
Manifest number:          06AF
Signing time:             Sat 24 Jan 2026 21:37:56 +0000
Manifest this update:     Sat 24 Jan 2026 21:37:55 +0000
Manifest next update:     Sat 31 Jan 2026 21:37:55 +0000
Files and hashes:         1: 3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl (hash: Ffio9ssKiGkdnynZB1Z6Sn4vYegZ7ehekyCMfyRngi4=)
                          2: FC583AC6CC8511EC8D238672C4F9AE02.roa (hash: b5wzb1d4fSJIKgtQAD4tKlpBK8qMq3pXXUO2EIVFZ4o=)
                          3: FD987A54CC8511EC8D238672C4F9AE02.roa (hash: 8YKXLgBmjt4A8LGKsFF2WvwdLx1gjsD9BpALAirKEFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64D, serialNumber=DF11E9268D06AE53BAFB7413BD34FF3878E4EED0
        Validity
            Not Before: Jan 24 21:37:55 2026 GMT
            Not After : Jan 31 21:37:55 2026 GMT
        Subject: CN=69753bb4-9f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:d6:20:b3:89:c7:fe:f1:2f:83:3a:3b:2f:
                    a7:3b:c2:e2:d5:b9:57:f8:5d:32:79:31:9d:90:cb:
                    54:c9:82:87:ca:cb:4a:17:12:8a:b2:af:d1:43:da:
                    30:5c:07:a8:c8:dd:a5:ba:87:c6:77:7a:eb:86:57:
                    cf:d1:9e:19:cc:a9:5a:3f:d4:1d:e4:23:db:0d:29:
                    6a:42:d4:74:af:73:32:b5:36:26:3a:49:bb:79:d2:
                    88:33:99:ab:77:b1:eb:ed:a1:ab:e3:82:28:9a:71:
                    20:b9:40:d4:d2:2a:2d:bc:25:56:e0:17:59:c3:a5:
                    7f:b5:30:e1:67:cf:02:a1:9a:81:0c:7d:05:31:0c:
                    82:31:1b:fc:fd:8d:f9:ae:d6:f7:0d:80:1d:0e:69:
                    18:97:7b:b7:25:fb:92:b9:7b:d0:9d:2d:6b:90:2a:
                    97:e7:15:fd:89:ec:5f:d1:eb:7d:cd:76:25:09:29:
                    3a:ad:0b:29:26:de:d3:ab:a4:d4:80:5d:8a:0a:7d:
                    7a:76:3b:3b:1c:c9:cd:e1:65:2e:98:b3:fd:0f:e4:
                    79:d5:27:80:af:e9:53:92:64:11:71:fb:94:4f:69:
                    f2:5c:cd:79:b5:b8:37:65:f1:e9:c2:3e:3e:ba:b9:
                    fb:31:e3:b0:ef:bc:ea:55:ce:2a:6a:76:07:51:c1:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:88:7B:CB:FB:5A:47:97:AE:EE:54:A0:65:F3:0D:A2:FC:3E:99:B5
            X509v3 Authority Key Identifier:
                keyid:DF:11:E9:26:8D:06:AE:53:BA:FB:74:13:BD:34:FF:38:78:E4:EE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xHpJo0GrlO6-3QTvTT_OHjk7tA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64D/B2EF3E3495D611EB98215C18C4F9AE02/3xHpJo0GrlO6-3QTvTT_OHjk7tA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5e:63:cc:11:80:46:e8:7f:0e:68:34:0e:6c:bb:35:f3:65:
         36:9c:27:13:26:fe:89:ff:9e:2a:6b:09:2c:de:5a:b1:bc:3b:
         a8:f0:c9:67:cb:78:45:8b:5a:72:ca:fb:03:26:ef:39:72:eb:
         d0:df:13:d8:ea:f6:99:e1:03:11:e7:ff:fc:0c:87:1f:70:38:
         9f:98:32:eb:dd:71:b7:73:02:c3:73:95:6a:ec:18:51:0d:af:
         86:66:6a:57:af:5c:7c:41:8a:b6:f8:04:76:5d:c4:27:e5:8d:
         75:2f:21:d2:b3:55:b3:35:06:4e:ce:5b:9a:42:50:48:3a:f6:
         af:14:90:c1:14:1f:36:44:4e:07:85:d1:d2:8d:ad:69:b5:b5:
         e3:db:07:be:93:f2:2a:2f:96:ed:73:5a:a0:d2:69:91:91:32:
         32:2a:79:38:c4:75:e4:d9:c2:9c:9f:ac:f1:9a:e9:89:a6:85:
         36:a3:4f:f9:c3:8b:30:e3:b6:8a:9b:d2:45:5e:2c:cc:6f:dd:
         a8:e7:67:bd:84:d9:58:53:e7:8a:2d:94:24:52:5b:8a:49:2e:
         34:1d:b5:61:72:09:bf:d0:b0:df:07:8a:02:cd:d8:cb:f8:61:
         3e:2b:fb:d4:e9:11:79:25:eb:15:03:3e:7c:e9:61:72:4b:17:
         3f:2e:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:45 2026 by rpki-client