This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          9SmEGpRJ+GyM653Dtd+CzU8G7YnW/PKZsj8bsA2WKzY=
Subject key identifier:   D6:18:CE:71:97:45:A4:84:92:C6:C6:C1:AC:B0:3F:B9:7E:A8:3F:C9
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0C6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0C57
Signing time:             Sat 24 Jan 2026 18:14:35 +0000
Manifest this update:     Sat 24 Jan 2026 18:14:34 +0000
Manifest next update:     Sat 31 Jan 2026 18:14:34 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: mD5ouXUSG9IXHAAuqCeVJhKFQbJLwGKXkpQc58kOLts=)
                          2: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=)
                          3: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3180 (0xc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: Jan 24 18:14:34 2026 GMT
            Not After : Jan 31 18:14:34 2026 GMT
        Subject: CN=69750c0b-3fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:e5:5e:b3:f6:34:c6:c2:98:fa:83:5c:1c:
                    a5:6e:51:c4:0e:5f:51:73:6a:a6:d7:8d:f4:9e:ce:
                    38:7c:f2:89:cb:35:05:e1:78:2e:53:c4:19:ee:e1:
                    dc:fc:09:08:95:9e:3c:e8:19:e9:be:78:21:d5:d3:
                    47:92:40:35:86:94:38:c2:44:69:6d:3d:f9:f5:1e:
                    5e:59:bf:7f:5a:ed:dd:03:bf:9d:dc:35:ea:a8:8c:
                    68:17:f8:af:67:8a:7c:18:92:b8:ae:9c:90:cb:0e:
                    d3:4d:6b:dc:99:b0:0c:4b:5a:d0:b6:49:94:97:20:
                    0b:ec:07:02:6d:30:31:fe:d2:28:83:a7:ee:db:e8:
                    e6:ad:f9:23:74:d1:97:32:19:46:ac:e3:c5:f9:91:
                    22:17:63:69:8b:a3:60:6f:d7:cf:69:b9:a5:65:3b:
                    0b:57:0e:88:62:cd:c3:91:74:07:9b:7c:21:fc:00:
                    31:d0:35:a1:d2:f3:d5:d7:bd:bf:7d:c9:59:cd:19:
                    0e:34:31:e0:b9:1d:43:7c:e9:5b:b0:3b:61:d3:a2:
                    2a:eb:da:3b:2d:4c:29:0a:07:3a:39:34:24:d9:25:
                    b7:97:b2:d3:b5:8d:25:03:e0:aa:85:88:ba:b2:e3:
                    fa:67:8d:f9:6f:a4:77:34:47:c4:da:29:db:13:c8:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:CE:71:97:45:A4:84:92:C6:C6:C1:AC:B0:3F:B9:7E:A8:3F:C9
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:6b:5f:56:d6:f8:fd:9b:05:e7:91:34:30:24:79:0c:a4:42:
         9d:cc:83:fc:1b:49:72:05:80:2f:7c:49:05:b5:05:df:48:9e:
         e3:d5:fd:26:21:72:7f:59:a0:af:25:fe:f9:29:de:6f:da:8f:
         5d:ce:75:5b:72:20:97:ae:96:6c:30:e2:86:11:93:ff:3f:fb:
         e4:15:a8:21:a6:08:80:26:db:b5:ae:6f:4f:d0:1d:e6:1c:23:
         91:ca:4c:ad:fb:6d:b8:48:84:fe:65:8a:d2:57:4a:41:e8:58:
         c5:ad:c0:71:41:64:b8:14:a9:f4:dc:95:12:53:2f:d8:99:09:
         2a:b0:c0:c1:94:ff:31:f2:42:1e:4c:ed:30:fc:8f:56:ca:5a:
         c8:ea:e4:be:09:5b:db:5e:49:6a:ea:8d:42:b6:88:56:b7:20:
         69:d1:9b:32:e1:2f:2e:30:1c:7a:bd:1b:67:06:50:a8:de:f8:
         99:bc:a6:08:1f:fe:4e:96:6c:20:61:d1:3e:2d:64:99:fe:16:
         81:5c:69:0a:20:75:44:bb:b4:cd:51:b8:ea:a1:48:5a:c5:dd:
         7f:47:f1:a3:dd:e1:70:32:0c:dd:06:52:5a:fc:4e:24:b6:f9:
         a5:8f:8f:62:71:19:47:03:ae:02:ec:68:08:cc:ea:8d:4a:0d:
         58:76:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:14 2026 by rpki-client