This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          1K3pS+rwyfPE2qi3gxnBQy7mJgC0RlwHUAd0ByEuZHg=
Subject key identifier:   25:05:5C:57:B4:5E:F8:0F:9F:DF:74:2C:1F:D5:0B:3E:EE:EB:69:5A
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0CB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0C96
Signing time:             Sat 24 Jan 2026 18:08:50 +0000
Manifest this update:     Sat 24 Jan 2026 18:08:50 +0000
Manifest next update:     Sat 31 Jan 2026 18:08:50 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: XNXfVwjQbXxspeVTYhI4llq1HFS/WSJ/mkgYzGZR/U4=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: 31xev4NPWwXKKZxGPGay9JA7GBIzfTlM7xCV7ZGyWGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: Jan 24 18:08:50 2026 GMT
            Not After : Jan 31 18:08:50 2026 GMT
        Subject: CN=69750ab2-1133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:d6:62:a1:aa:51:78:dc:24:0e:62:01:24:
                    e3:da:fd:90:70:1b:d9:04:7f:37:19:4b:54:05:2e:
                    c3:35:cb:88:87:3c:84:62:3c:42:34:0a:d6:97:33:
                    8c:89:cf:6c:56:1a:ed:d4:58:ce:79:7c:b8:8e:c5:
                    7f:b6:e3:35:73:d0:b7:96:a5:fa:ae:be:f5:82:f2:
                    02:72:f1:58:e7:e5:89:e1:8e:06:42:dd:51:ef:40:
                    9e:65:62:6a:ec:ae:d2:43:85:93:26:95:ec:df:fe:
                    61:25:05:14:81:8f:a7:5f:d6:c7:b3:7c:7a:88:ec:
                    7a:30:61:3b:b6:c9:0d:84:4b:b7:19:9d:80:dc:75:
                    3d:26:32:f4:20:14:77:9a:a3:53:e5:0b:07:d8:90:
                    d3:7c:7c:4b:f2:0d:df:b0:f0:36:20:23:dd:b5:4f:
                    04:08:a3:46:26:68:33:93:8c:a7:fe:39:a5:59:1a:
                    0d:99:fe:99:9d:db:48:f5:8e:2b:3b:97:90:a2:4e:
                    eb:ee:d1:78:e5:84:8d:01:d0:2b:6b:56:b1:d1:45:
                    32:77:7f:6b:56:1c:0a:63:a3:e7:9a:1b:db:4f:09:
                    93:4c:5f:41:9e:02:93:6f:9e:ce:d2:f1:77:d8:f8:
                    57:20:14:55:7c:fe:6e:3f:27:9a:34:fd:fd:36:c3:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:05:5C:57:B4:5E:F8:0F:9F:DF:74:2C:1F:D5:0B:3E:EE:EB:69:5A
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6b:77:41:89:ab:4d:f5:52:57:fe:0d:40:c8:c9:91:c8:d0:
         f0:26:b8:c4:b3:cc:cd:d7:9b:06:8b:ee:c0:be:3e:06:59:71:
         ed:d2:aa:90:09:6b:99:eb:cf:9a:19:03:60:fa:58:db:59:e6:
         f5:44:a7:25:52:5a:b9:e1:9e:42:7a:92:c9:99:55:17:fa:5c:
         39:e8:fb:9f:a5:4e:b8:e4:60:fd:b6:2f:a3:85:2e:ed:bf:50:
         aa:96:bb:ce:8b:11:f1:89:c5:35:c9:70:43:6d:5b:4f:ed:37:
         aa:f7:a8:f5:54:75:f4:5c:03:eb:62:bd:bf:34:85:72:b4:aa:
         b2:bf:ce:e7:29:60:b2:61:96:de:74:71:73:02:51:cc:17:82:
         19:cd:96:6d:4b:a3:38:02:0e:cc:fb:8b:27:24:3c:95:de:6d:
         1c:ec:22:79:36:8a:69:bd:73:b6:8d:ed:64:0d:a2:9b:fd:9f:
         75:cf:16:44:a6:a0:42:e3:22:70:81:93:cb:da:e0:ba:73:72:
         d1:3f:56:79:6a:e3:d9:30:ab:b3:9a:e0:3f:a8:60:08:21:13:
         5d:c4:fe:5d:3b:55:82:0c:d1:5a:b0:06:55:2c:37:1d:19:0f:
         94:d0:24:f7:28:05:d9:6d:d9:06:c0:ff:11:74:f4:98:16:bc:
         32:fc:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:28 2026 by rpki-client