This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
File:                     0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json)
Hash identifier:          4myDs0U/L57c2bGAmWqE5yI08B1OzlmBu6oxjgk916Y=
Subject key identifier:   35:0F:C9:0E:59:E2:03:96:B2:4B:FE:5C:05:A4:82:90:57:19:DF:B3
Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
Certificate issuer:       /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Certificate serial:       0596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
Manifest number:          0591
Signing time:             Sat 24 Jan 2026 22:28:36 +0000
Manifest this update:     Sat 24 Jan 2026 22:28:35 +0000
Manifest next update:     Sat 31 Jan 2026 22:28:35 +0000
Files and hashes:         1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: PmcSsVrD6E3Kmpl2rO5QUJ0RZaWOQK9wUUZCp4wIgF8=)
                          2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: JNxs4L4e1ceFr4b8NRWrFPbylob6Fmj/cL16X1jkyEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
        Validity
            Not Before: Jan 24 22:28:35 2026 GMT
            Not After : Jan 31 22:28:35 2026 GMT
        Subject: CN=69754793-cb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:29:e0:3b:9d:ba:7a:f9:35:23:a6:af:fc:
                    fb:df:1d:c0:72:29:59:30:d5:06:89:86:93:be:f4:
                    70:68:fc:31:d8:14:8e:e4:61:24:bc:b1:6a:d1:2e:
                    0d:3c:58:78:70:e8:ec:35:02:f8:55:a4:07:4a:c4:
                    2e:8f:0b:4b:50:b7:e6:d4:53:47:6a:30:54:3b:98:
                    2f:cf:67:e4:c7:82:40:79:3c:1f:f8:a8:b6:77:b7:
                    fd:af:c3:d7:e0:41:1d:69:70:cd:ab:25:c0:e7:ea:
                    f5:ff:8e:b7:b6:5e:45:74:36:29:56:0c:dc:ee:fe:
                    e6:78:18:e7:c9:01:f7:e5:dc:d3:7c:04:1a:03:7e:
                    05:84:6a:1b:f2:8e:d9:6b:7e:16:0d:48:cc:42:d1:
                    ba:7a:96:b8:4d:38:37:f3:4f:7e:97:8a:2f:25:4c:
                    5a:bd:f5:fd:f7:a1:74:81:5d:73:c6:e6:3a:88:55:
                    fd:80:4b:3d:73:82:19:57:c4:f9:8d:4f:54:41:64:
                    6d:17:df:ab:ff:33:6f:f4:90:3e:23:0b:d7:f7:e2:
                    63:c3:32:79:db:c4:a8:dc:88:63:b5:36:39:86:8d:
                    77:f8:4b:5c:22:c2:34:d3:b5:f3:f9:2f:af:b8:b6:
                    bf:6c:62:d9:b7:43:2a:11:f2:df:15:09:ad:38:c2:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0F:C9:0E:59:E2:03:96:B2:4B:FE:5C:05:A4:82:90:57:19:DF:B3
            X509v3 Authority Key Identifier:
                keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:b6:8d:9b:c0:f3:56:6a:51:64:e9:13:bb:43:2a:33:d1:
         6f:e2:77:01:62:c3:2d:a1:8c:5a:13:1b:c7:7d:07:d6:5c:f5:
         54:86:89:41:1b:8f:52:4f:48:2a:de:76:58:19:93:bd:a2:92:
         9e:16:bd:66:6a:42:4e:d5:0a:a9:a8:25:46:b2:ab:0a:75:8a:
         d6:b2:a3:3d:2f:ea:ef:00:9e:f2:a9:0a:df:46:bb:61:2c:c7:
         57:62:5a:89:6f:58:e8:f8:13:f4:e0:27:b9:0b:b9:08:ad:e8:
         b9:7b:c2:ba:e1:ec:2e:d7:38:a2:25:ec:97:03:f0:27:e1:5d:
         da:f6:5a:13:e0:c0:d8:9d:33:6a:22:84:56:ec:b5:95:a2:e6:
         a2:24:6a:70:8a:19:28:bb:c1:97:9c:6e:48:a7:f7:64:36:de:
         1a:74:1c:b8:1b:31:0c:55:1c:77:44:08:8e:26:b0:25:22:7e:
         0b:80:7c:8c:2b:12:8f:90:24:6f:de:22:b1:8f:60:d9:a2:02:
         97:55:da:8f:e0:a0:0e:bd:e0:d1:b3:3e:59:6a:5e:2f:f6:7a:
         69:7b:f7:b2:04:37:12:65:e8:10:f2:5c:2d:84:40:31:c0:f6:
         4f:50:52:22:14:0c:47:fe:e3:76:ca:0b:eb:99:d8:67:d6:de:
         9b:86:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:31 2026 by rpki-client