This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
File:                     sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json)
Hash identifier:          +++8TjFSR7XKiZAPReK/SAb5TWKfcM5eDCKY3XdNNUs=
Subject key identifier:   06:68:CB:B9:6C:49:D2:62:A2:D9:0A:E2:54:BE:0E:28:AF:C9:06:12
Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5
Certificate issuer:       /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
Manifest number:          75
Signing time:             Fri 23 Jan 2026 05:56:24 +0000
Manifest this update:     Fri 23 Jan 2026 05:56:24 +0000
Manifest next update:     Fri 30 Jan 2026 05:56:24 +0000
Files and hashes:         1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: QGVbcgxtDdOfCERoJUrnJfcN/WwHILTnTgnucFzHi/Y=)
                          2: D6E8451C889611F0B5CFE458C4F9AE02.roa (hash: o6qskbuLkzt0B6DeqPyqMtn3vK2zO8Pni4GeYykc/7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
        Validity
            Not Before: Jan 23 05:56:24 2026 GMT
            Not After : Jan 30 05:56:24 2026 GMT
        Subject: CN=69730d88-37e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f4:14:67:26:42:6a:5a:40:f4:42:e3:75:95:
                    b5:95:cc:e8:eb:9c:4f:e5:ed:fa:65:7e:b9:ae:e5:
                    cd:25:d9:e4:25:82:73:91:41:d6:fe:b6:01:8d:5a:
                    d2:fa:65:d7:cf:40:30:bd:33:1a:c3:8f:fc:a1:10:
                    4c:af:72:fe:f3:e0:f7:b0:df:b7:a1:7b:f6:01:80:
                    0e:d9:a8:81:34:23:15:c9:2b:75:6d:f4:20:2a:d3:
                    22:c9:4e:99:0d:59:46:81:ee:a0:56:2f:9b:3a:42:
                    85:4c:9a:43:70:36:24:38:21:e1:ca:a4:f0:23:e3:
                    08:7c:2b:a8:b3:7e:b1:0f:f6:38:81:23:d8:92:ee:
                    59:fd:b8:6b:42:fa:b8:0a:c5:3f:c5:74:78:31:73:
                    ea:b9:02:7f:19:4b:7e:7c:01:da:f7:93:e6:ac:fe:
                    23:16:06:09:5a:94:2e:6a:8d:87:98:b1:20:5a:3b:
                    89:8f:93:1c:70:3d:1c:f4:95:79:ae:b4:b3:a8:9c:
                    33:f1:3b:07:d4:48:64:68:c9:60:63:62:41:06:36:
                    3b:27:a5:e7:35:07:28:45:f4:80:1a:0f:ec:1a:c8:
                    6b:79:12:2a:ae:23:95:19:9c:be:25:7a:61:92:81:
                    8e:18:1c:1c:be:ee:f9:c9:97:3a:fb:31:e4:96:01:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:68:CB:B9:6C:49:D2:62:A2:D9:0A:E2:54:BE:0E:28:AF:C9:06:12
            X509v3 Authority Key Identifier:
                keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:48:e3:35:19:be:6f:c3:28:60:80:0e:1a:71:74:3b:fb:
         2d:2c:2a:82:98:2e:bc:ec:c4:9d:ee:37:ff:13:b7:ca:c0:8e:
         33:f3:14:7d:95:20:09:7e:ce:da:5d:87:a5:ed:03:73:16:6e:
         f3:dc:af:f5:23:1f:9c:e8:23:41:34:e5:52:06:a7:20:99:4f:
         32:61:c6:56:08:8c:a8:d6:c4:2a:52:bd:9b:d6:86:12:f4:f6:
         23:44:c4:fa:9e:fc:51:ee:b1:1d:7a:54:60:20:ed:d1:1c:c0:
         20:62:c9:a4:85:b2:df:67:91:0b:5e:40:6a:cb:94:36:fb:ee:
         7c:de:00:ca:ae:d5:76:1a:c4:78:fd:f7:69:fc:38:58:52:c3:
         4a:7e:b9:e3:75:fb:80:d4:c5:55:41:15:d6:d7:81:a6:88:c9:
         2b:42:2f:9a:eb:2c:ae:5c:a4:55:96:f8:94:98:00:98:e0:a1:
         5c:fc:1a:bf:a2:59:91:3e:24:87:5b:11:65:93:87:78:70:05:
         45:d0:6c:7b:40:55:5e:1c:4c:ab:52:f2:98:ed:26:34:93:1c:
         f5:e7:4a:34:6d:e5:92:cc:44:4e:51:8e:1e:c7:0d:ef:55:77:
         96:1a:8a:47:ef:c1:3d:2c:db:bb:3d:d3:de:1a:ec:1f:d5:44:
         d3:c2:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:39 2026 by rpki-client