This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File:                     pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier:          O0aYywGhWBTxJHBR9W+AyxQRu2LGNMa/w3ENesbyzI8=
Subject key identifier:   F6:E4:AC:17:0E:F0:DE:93:DB:3B:28:CF:FE:16:16:43:93:86:4E:38
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer:       /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number:          2B25
Signing time:             Sat 24 Jan 2026 16:39:34 +0000
Manifest this update:     Sat 24 Jan 2026 16:39:33 +0000
Manifest next update:     Sat 31 Jan 2026 16:39:33 +0000
Files and hashes:         1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: QwCYhnBcuitYT/4iChy6syl/o/SY0e8ZPAs5bvLcJJ0=)
                          2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: DSrMI7Nowx4RDukf/foMtUodJX/NiInBR6IMaoe7AeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
        Validity
            Not Before: Jan 24 16:39:33 2026 GMT
            Not After : Jan 31 16:39:33 2026 GMT
        Subject: CN=6974f5c6-c61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:ff:03:b2:b1:f0:4a:40:97:0a:e4:25:c4:
                    82:98:c9:6c:a6:85:a9:2d:23:fd:8d:41:c5:38:05:
                    a7:f8:9a:2a:d4:36:b4:2c:0a:71:87:83:a0:cf:79:
                    0c:aa:22:65:76:aa:75:a1:db:74:e6:ba:4c:21:d9:
                    f0:fc:f4:00:53:51:3c:d3:c8:07:b5:6a:84:7f:11:
                    4f:cc:74:59:91:3b:76:cf:27:f8:bc:6e:4c:82:d9:
                    49:77:6c:8c:59:7b:aa:20:20:18:e4:c1:54:8a:63:
                    23:02:2b:c3:f8:67:7a:c8:9c:8b:3d:0c:71:7d:15:
                    29:9d:ef:3c:2e:6b:e4:c7:75:2c:92:fc:af:52:5e:
                    46:4a:c3:0e:57:2f:05:55:a8:38:e2:64:28:8f:6c:
                    57:96:f0:cf:cd:39:a5:87:7b:9a:d1:f8:6f:f9:ae:
                    ef:34:81:0e:08:78:eb:c6:96:8b:78:ca:9e:63:84:
                    13:00:b7:33:03:6f:5e:1b:37:4a:8d:45:6d:8c:e4:
                    ba:35:08:db:fb:c7:e5:5c:c6:b8:bc:f8:8c:10:5e:
                    f8:11:88:b0:bc:70:5e:b8:29:f5:01:77:51:2a:8a:
                    7b:97:1d:b6:91:37:48:76:10:68:bd:c3:ec:09:87:
                    6d:20:13:37:e4:67:f5:17:8b:cb:30:72:8c:a1:07:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:AC:17:0E:F0:DE:93:DB:3B:28:CF:FE:16:16:43:93:86:4E:38
            X509v3 Authority Key Identifier:
                keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:6d:35:a3:ec:5d:fc:b5:25:73:b6:b1:93:ca:fa:69:6f:
         e0:6f:5b:20:22:14:2d:01:b9:eb:fb:d0:2e:cd:dd:93:6d:6a:
         e7:69:28:4f:08:94:d8:d8:ce:4d:22:8f:31:e3:1c:c2:64:ee:
         16:64:f8:07:ba:4d:dd:bf:cc:b0:4a:63:21:ad:c0:b3:ea:f5:
         f4:6c:32:c9:60:b3:a7:2a:a4:cf:bc:50:2c:ad:7b:91:e1:ac:
         2d:c9:94:f7:6e:ba:ae:91:01:96:82:c5:e2:7d:36:00:ca:bb:
         84:5c:4f:74:e0:a0:71:06:a7:ae:4a:f1:ae:e3:da:3c:10:4d:
         6c:5f:65:fe:17:94:fc:60:a8:97:d4:9c:63:fa:ce:9b:8c:e2:
         cd:fa:16:99:30:fb:a3:b4:5c:bb:37:20:8e:f9:3f:61:71:41:
         b4:09:50:bf:1d:a8:9d:57:56:c4:e7:aa:8c:09:d1:f6:fc:b9:
         3a:a3:49:f3:a7:2f:8c:76:ea:c8:86:d8:d6:2b:a3:a9:88:cc:
         73:b5:30:25:70:f6:32:7f:b9:3e:dc:ac:6d:34:2b:48:d8:14:
         e6:35:d6:b0:fc:dd:f1:71:a8:14:60:5d:f4:e5:5a:79:d2:94:
         1b:c5:ca:17:32:bb:2e:2c:d2:2b:a1:ac:43:56:a0:cc:1e:6c:
         f9:a7:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:43 2026 by rpki-client