This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File:                     jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier:          DFbIZLkM+geBbEE8eGNH7Vy66hsGFbbMwsw6YWULDdc=
Subject key identifier:   35:77:C4:CF:48:92:70:1E:4E:09:8B:28:A3:C9:BD:E1:68:B9:F7:81
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer:       /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial:       09AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number:          0997
Signing time:             Sat 24 Jan 2026 19:28:31 +0000
Manifest this update:     Sat 24 Jan 2026 19:28:30 +0000
Manifest next update:     Sat 31 Jan 2026 19:28:30 +0000
Files and hashes:         1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: FK5ow9eWxV2v8Oww8vbqEiIimedI2WH99KfvPJ/5muQ=)
                          2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: g9TzHiZxRp9gVg5tuis5YayxUjGI5eJ759+d36dPNIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475 (0x9ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
        Validity
            Not Before: Jan 24 19:28:30 2026 GMT
            Not After : Jan 31 19:28:30 2026 GMT
        Subject: CN=69751d5f-81ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:6f:bd:04:c2:f9:6f:85:25:29:67:7b:79:
                    1f:d8:28:cb:ef:33:a7:e4:96:01:fe:ec:b3:a3:0c:
                    95:27:87:e2:99:bf:61:ad:a7:04:c1:7a:6d:a1:1d:
                    70:9c:db:43:1e:8a:de:b3:f3:f6:8d:cc:27:e2:18:
                    15:16:e9:1b:db:eb:02:3b:8e:59:14:1d:a9:27:9e:
                    07:f2:60:56:98:5b:77:d5:f9:2d:69:0f:db:50:4d:
                    14:48:36:0d:ea:91:5b:53:a2:e6:c9:a0:a5:ee:96:
                    60:9a:6a:c6:2e:77:9a:1f:ad:75:b2:82:bf:1c:df:
                    68:e3:35:3d:f3:e4:a6:13:96:fa:e6:64:5a:d0:52:
                    31:4d:c0:01:4e:0f:d5:2f:b1:fc:7a:00:35:4b:95:
                    ff:4b:11:5d:c4:38:39:d5:69:ad:b3:58:61:bf:97:
                    7b:0a:81:f5:21:4f:3c:c7:3c:69:a8:61:1f:b2:b7:
                    c6:65:9d:63:9d:b9:47:b7:45:57:14:8f:61:46:f0:
                    84:61:0f:09:c6:b7:ad:62:77:87:48:ea:92:90:9e:
                    34:96:22:bb:cb:53:25:bb:49:0b:ca:cd:aa:fe:8b:
                    bd:5b:42:3b:13:82:dd:92:90:1e:c8:17:67:26:27:
                    78:72:5e:c5:c6:ff:69:f1:c9:b2:89:2f:cf:0c:e2:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:C4:CF:48:92:70:1E:4E:09:8B:28:A3:C9:BD:E1:68:B9:F7:81
            X509v3 Authority Key Identifier:
                keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dc:f3:ae:f3:cd:6f:af:3a:18:69:0d:bb:37:1d:5d:b3:00:
         ff:b7:0c:d4:aa:ed:ca:b2:34:61:72:59:7e:f1:2a:85:af:3e:
         76:06:ba:61:6c:66:21:2a:d2:d0:3d:88:9a:c4:1d:61:b5:af:
         ec:3f:bc:7d:0e:23:4b:72:72:d1:c3:f4:5f:c5:84:fd:05:6a:
         46:ff:97:32:a2:55:80:63:ef:7e:13:8e:57:c9:61:14:52:00:
         73:7b:16:82:7b:7d:69:3b:84:1d:50:14:7e:45:ce:be:0e:6b:
         2b:28:ea:ef:a2:23:75:48:e5:e5:50:d1:ac:b6:5d:0e:9d:c7:
         96:53:d1:af:4c:84:6f:ab:37:71:5f:5d:b8:66:fa:70:27:62:
         9c:95:39:df:29:bb:1a:e0:f2:75:76:f8:51:82:9d:4a:ef:d7:
         28:67:47:27:5b:d4:d6:94:a9:1b:d8:eb:4b:a8:65:9e:ec:9c:
         50:0d:52:0c:34:cc:50:55:9f:94:6f:08:17:30:16:e3:f9:38:
         8c:43:95:8a:dd:54:4b:b3:38:0f:41:5a:84:66:c4:a5:a2:20:
         db:06:77:6c:d2:ce:9f:07:96:c6:fd:54:8a:31:07:a8:a3:93:
         1e:08:5c:d4:81:7e:4e:a7:8c:c0:c3:9f:f3:3e:4d:f1:a7:cf:
         f2:9a:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:31 2026 by rpki-client