This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
File:                     C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json)
Hash identifier:          DyUDbn3pGDKmk+DpP8Y+j81Q0S8JI5ycxjdQXmwKscg=
Subject key identifier:   BF:68:1B:BC:82:6F:01:F6:B0:86:24:1E:FE:37:45:2F:B7:A9:43:DF
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Certificate issuer:       /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
Manifest number:          054F
Signing time:             Sat 24 Jan 2026 22:39:05 +0000
Manifest this update:     Sat 24 Jan 2026 22:39:04 +0000
Manifest next update:     Sat 31 Jan 2026 22:39:04 +0000
Files and hashes:         1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: Kp4GB7hI8cFznx1wCAoIBxch42uRGTz6bJijN4B2YJE=)
                          2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: DBSMAaVKSu+pqc7fO689Fw0nJpqzkZ1jfjGBu9BRx34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
        Validity
            Not Before: Jan 24 22:39:04 2026 GMT
            Not After : Jan 31 22:39:04 2026 GMT
        Subject: CN=69754a08-508a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:ae:63:6c:b1:d9:91:fb:7f:3e:ec:58:cc:
                    5d:59:5c:9d:15:4b:be:2e:d2:4b:80:4f:c2:e3:3b:
                    33:54:fc:15:93:9e:e1:59:1b:18:7b:d6:2a:68:ee:
                    1c:b3:70:5b:ee:7f:a6:c9:0e:3f:f4:67:3b:b0:2b:
                    a7:52:dc:b5:ad:99:d1:c4:4f:7a:5a:50:7b:ae:f5:
                    a4:07:04:77:78:d4:05:08:37:9d:b6:4d:b8:8b:d3:
                    8e:53:af:0f:77:dd:5e:a9:8b:d3:2e:b3:91:02:a5:
                    2a:97:0e:13:b0:02:02:06:60:de:6f:f4:67:a7:56:
                    aa:00:6e:c5:04:10:8e:b6:37:9c:61:a7:9b:e9:aa:
                    b8:1c:02:5f:ee:71:84:49:bb:02:22:06:07:df:96:
                    0c:1e:7f:5e:55:fa:76:10:ee:20:c3:17:df:b7:eb:
                    a4:41:4e:80:a6:9f:b0:0d:40:af:ab:83:10:df:ae:
                    3a:68:6d:71:89:b9:05:54:10:e9:cf:40:d5:a1:2b:
                    b5:62:79:26:c8:67:0e:84:80:4f:34:f9:60:bd:28:
                    f2:29:f3:b3:35:83:61:2a:4f:dc:b4:2f:0f:47:3f:
                    89:41:6f:8c:24:5a:9d:57:fe:4c:44:e6:11:15:32:
                    10:d5:40:a5:53:d4:d9:f9:32:1f:cb:a4:99:8b:72:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:1B:BC:82:6F:01:F6:B0:86:24:1E:FE:37:45:2F:B7:A9:43:DF
            X509v3 Authority Key Identifier:
                keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:34:ff:b3:d9:63:6b:35:17:e4:29:40:6e:e3:f4:f8:9c:
         e4:cd:c0:eb:52:60:cb:f1:1e:58:92:f0:a2:33:88:a1:93:63:
         12:d9:15:cd:07:7f:40:9b:e3:fb:1c:db:7b:fe:81:aa:e4:88:
         26:6e:9f:75:22:0c:cc:75:2d:f0:aa:15:e6:3a:c8:b8:35:9c:
         77:20:3b:6c:81:aa:e7:33:e5:ca:d0:de:a1:cd:9a:fb:6e:9e:
         d1:d5:39:ad:2e:7c:d0:a7:25:e2:d9:f2:45:f4:41:bc:73:c6:
         a9:50:88:26:14:96:14:58:32:f5:68:87:e4:05:1c:fc:de:4f:
         76:16:7e:3d:64:47:81:4e:47:ca:b0:41:95:f5:e0:c2:c9:52:
         9c:39:da:e0:dd:a7:77:7a:5f:91:50:2f:62:ef:82:39:2d:1c:
         4b:bd:5f:a9:c4:77:57:02:37:5e:e9:a9:ab:2e:2a:51:81:07:
         2e:10:84:28:f0:ba:1c:10:7b:30:3a:fb:f6:d4:68:c5:76:a7:
         fa:e4:8a:f5:16:71:ce:ce:11:8a:44:55:de:72:4f:98:01:4e:
         a7:80:0a:a0:94:dc:0a:ec:30:2e:2b:4a:4c:09:b4:b5:f2:ef:
         83:37:65:30:74:07:c5:77:6d:06:61:8e:9a:ae:fa:3f:12:5e:
         a0:88:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:16 2026 by rpki-client