This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File:                     2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier:          ZU0axecIvW/6wLPK35hKeeCHsQMbKA2gbbz6HhBBrRM=
Subject key identifier:   1B:F6:E6:8C:0B:D0:F2:7B:6B:16:F7:72:7B:15:85:4C:33:13:5C:E3
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer:       /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number:          0149
Signing time:             Sun 25 Jan 2026 03:32:54 +0000
Manifest this update:     Sun 25 Jan 2026 03:32:54 +0000
Manifest next update:     Sun 01 Feb 2026 03:32:54 +0000
Files and hashes:         1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: lrN3wkXl2NoW4Xd10bUlj2dOtdB+4mu+v4WcF18aSS4=)
                          2: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=)
                          3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=)
                          4: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
        Validity
            Not Before: Jan 25 03:32:54 2026 GMT
            Not After : Feb  1 03:32:54 2026 GMT
        Subject: CN=69758ee6-0784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:f2:7a:b9:1c:26:5a:3f:df:bb:bd:52:19:
                    40:f2:7b:31:12:24:dd:4a:b9:a2:b6:d8:62:fe:92:
                    41:f9:0f:7c:54:07:8e:d5:4c:b8:3b:77:4a:48:fb:
                    35:34:82:26:a7:5f:85:79:de:75:8a:37:af:95:12:
                    10:69:48:71:aa:a8:a4:71:97:d3:71:c2:81:61:4c:
                    41:14:44:68:75:a2:88:4d:a1:5d:3d:b8:3f:92:33:
                    37:2b:52:55:86:2a:b7:2b:89:c8:07:49:5c:f3:dc:
                    92:9f:ff:cc:2d:98:df:f9:c2:36:ce:f5:b8:2d:0b:
                    b1:55:27:a1:8a:db:19:9d:8c:ec:0d:bc:25:f2:49:
                    fd:70:4a:c1:d5:e6:da:14:4d:22:fe:da:2a:05:53:
                    a3:cc:56:1c:b9:eb:82:94:51:34:45:7c:92:aa:9a:
                    a1:c9:78:ae:8f:b7:29:de:16:f6:c3:b3:3d:96:6d:
                    66:40:02:91:ac:b0:2f:16:ef:4b:35:3b:7e:cd:c3:
                    27:49:29:e7:40:69:a0:f4:e5:2e:ee:df:c9:72:12:
                    c8:6f:cd:be:cd:27:4d:08:1c:85:ce:06:4e:28:29:
                    83:e8:cf:48:9e:9f:ca:8b:e0:4d:8d:42:9f:18:5c:
                    76:61:fd:90:ed:7d:28:29:0e:67:1e:2c:03:46:bc:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F6:E6:8C:0B:D0:F2:7B:6B:16:F7:72:7B:15:85:4C:33:13:5C:E3
            X509v3 Authority Key Identifier:
                keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:77:94:9e:fc:41:cd:f2:a7:a6:86:88:e6:5b:5d:2e:0c:fa:
         b1:e7:eb:a9:04:5b:f1:69:28:ae:34:50:a8:23:86:81:ba:8c:
         bb:4d:ad:bc:5d:b7:5e:83:6a:e7:e0:5a:70:b8:2d:96:87:54:
         56:16:09:81:4e:ea:99:a6:db:5b:ac:a9:43:ae:d1:27:da:7c:
         62:07:63:0c:23:ef:5b:0f:4e:0c:5f:6f:bb:f5:a4:ae:eb:12:
         b7:70:ca:c1:06:77:f7:f3:8b:c6:7a:38:99:a5:54:8c:87:a6:
         40:c1:8c:44:70:3f:b0:cd:dc:36:50:35:75:7b:26:45:6b:ab:
         bd:5e:91:35:1c:e3:d2:d3:85:09:67:57:33:e8:66:64:50:c1:
         10:e3:7b:0f:90:c5:ad:8a:68:08:6a:eb:f6:db:e7:da:1d:d5:
         95:89:2c:04:6a:76:8f:8c:81:9b:63:5c:0d:5b:8b:d3:41:96:
         4c:ef:6e:f6:2f:24:05:23:35:54:c1:c4:48:55:77:dc:56:6a:
         25:f4:5b:86:11:00:70:c3:45:a3:e6:3c:94:b7:76:fd:ec:1e:
         b6:a4:1a:eb:3b:1e:ab:fb:36:67:40:36:d4:bd:59:ae:97:03:
         c2:3f:5b:47:80:5f:2f:22:39:7e:95:f3:70:bb:27:7f:63:b3:
         ec:93:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:10:35 2026 by rpki-client