This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File:                     dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier:          pVoc3bVNITAkyvUGreQergJ/MyAWQBoKkNfJ1Awt7XE=
Subject key identifier:   56:34:5E:12:37:1B:72:76:D8:D3:98:84:A4:F8:A4:3C:73:E1:30:B0
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer:       /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number:          54
Signing time:             Sun 25 Jan 2026 06:17:13 +0000
Manifest this update:     Sun 25 Jan 2026 06:17:13 +0000
Manifest next update:     Sun 01 Feb 2026 06:17:13 +0000
Files and hashes:         1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: 7iu+IoRB9w9fG54UafxSBYaux9kBaEvxifW8BRDKXY4=)
                          2: BAC878D0799511F098E98265C4F9AE02.roa (hash: DOKXlcoim3mGT1/5T41gtrSkQeSIUWzOdLmQqGxlYWw=)
                          3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: ENyfebcRoladpIqoDMvyVSOny2O0G7/P5ahmxQmU81s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
        Validity
            Not Before: Jan 25 06:17:13 2026 GMT
            Not After : Feb  1 06:17:13 2026 GMT
        Subject: CN=6975b569-39dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:ed:c0:3d:b5:0d:1e:45:42:97:a1:fa:c2:
                    e8:30:66:8d:4d:a5:cc:92:18:1d:6b:4f:32:aa:08:
                    ed:65:d5:3a:d5:68:2c:a4:01:37:9a:b8:36:03:28:
                    4c:b6:13:46:d3:78:86:6f:72:52:88:98:0d:71:54:
                    29:14:f5:3b:5f:64:03:24:4d:b8:1f:1d:67:8f:47:
                    e5:da:de:82:5e:0c:24:41:9b:49:64:c8:75:b1:ac:
                    aa:69:70:a3:2f:43:ef:25:6d:15:bc:ec:6d:d8:4b:
                    fb:a0:85:1d:01:4e:9b:fe:8c:dd:46:db:6b:87:78:
                    75:d5:63:88:41:57:31:93:d9:dc:39:47:11:35:9c:
                    53:b9:9b:3f:d4:80:af:01:b7:f0:f0:7c:f8:a1:fa:
                    56:0a:2c:0d:8a:80:5c:bc:cf:d7:80:98:e5:23:61:
                    d4:f4:01:f3:db:05:ee:bc:13:04:6c:64:8b:3b:96:
                    b3:8a:87:16:af:6a:f7:e3:3c:db:73:71:81:c7:67:
                    12:6e:93:8e:a2:81:a7:66:57:ea:ca:ab:dc:f2:c9:
                    5d:6d:0e:6d:b9:de:83:1f:4a:ba:17:d1:c5:6f:a8:
                    71:5c:3a:0f:a2:e8:ad:62:12:9e:a2:fb:2f:40:8b:
                    d7:d1:4a:97:32:39:fa:03:46:c7:97:5d:f4:c4:6e:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:34:5E:12:37:1B:72:76:D8:D3:98:84:A4:F8:A4:3C:73:E1:30:B0
            X509v3 Authority Key Identifier:
                keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:7c:b2:7f:22:cc:95:bd:aa:e0:63:2d:09:80:09:09:56:
         cc:e0:15:5a:28:de:fe:91:a8:40:34:34:bc:68:54:13:ce:35:
         49:5f:c7:5a:47:dc:47:8e:bf:03:83:28:9f:7b:39:70:71:7a:
         9d:47:b9:aa:8c:86:1c:da:0c:0c:bf:53:05:68:40:21:8f:0b:
         3c:b3:b8:a9:35:c5:3a:96:14:47:a0:91:a3:1a:9e:cc:e5:38:
         56:a8:5f:3e:21:b0:25:93:e7:f8:68:61:6a:bc:4c:a5:7f:c7:
         9f:9c:e9:81:95:43:37:0e:5a:5c:a4:2c:cf:0e:1a:24:9d:cf:
         31:8c:3d:15:5b:f3:50:b8:d2:d8:e5:e3:26:e7:a4:3f:61:ce:
         d3:8b:fe:24:4e:87:14:f8:7a:27:c9:87:c6:ee:ec:6c:b0:6b:
         cd:87:01:57:ae:d3:aa:a6:b4:76:70:cd:b5:e8:31:a9:6d:ec:
         3b:d5:18:bb:51:20:6d:67:b8:08:fe:44:0f:ec:33:03:0d:9e:
         1f:c9:b1:66:f8:bc:f6:a8:51:9c:f9:73:fb:7b:45:ab:5c:00:
         02:ef:d9:58:ff:f5:18:44:a2:06:be:80:cd:80:74:05:4a:31:
         d0:d5:03:b1:1d:9c:8a:74:2b:75:03:b3:90:56:6a:cf:83:99:
         0e:2c:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:13 2026 by rpki-client