This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File:                     Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier:          +jNj9y7WH/k2alAXejK2cTuUdhzynuBL/SPcbIZQdpk=
Subject key identifier:   BF:30:8A:BC:FA:A1:22:95:38:BE:25:CC:EB:8C:83:03:E9:C4:FF:08
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer:       /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number:          099E
Signing time:             Sat 24 Jan 2026 20:49:04 +0000
Manifest this update:     Sat 24 Jan 2026 20:49:03 +0000
Manifest next update:     Sat 31 Jan 2026 20:49:03 +0000
Files and hashes:         1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: qcaNV5ILIFvui6Pf4NLBqBOPtDp3pRWIP9F1S9cm3I8=)
                          2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
        Validity
            Not Before: Jan 24 20:49:03 2026 GMT
            Not After : Jan 31 20:49:03 2026 GMT
        Subject: CN=69753040-eb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:a7:13:70:e9:8c:62:cd:ed:a3:40:20:9a:
                    d0:dc:9c:8b:c5:64:8f:44:85:32:e4:e7:8c:88:da:
                    77:73:3e:fd:bf:64:50:93:54:b8:be:6f:86:0b:58:
                    3e:88:a3:2b:1a:f3:f9:6f:3d:ba:c5:88:22:f4:67:
                    96:da:70:51:1d:84:9a:a8:06:3c:d2:33:70:c0:93:
                    e8:80:9b:b6:e9:1a:bf:15:a7:d2:53:d7:38:b0:1f:
                    c4:b8:90:57:06:1c:55:80:66:6c:69:91:bc:40:eb:
                    c3:65:1d:73:96:09:bb:60:75:2d:c2:6f:56:5e:1b:
                    12:57:8f:9f:f8:d7:09:af:44:22:1d:0e:09:31:e6:
                    00:cc:bd:9c:16:77:1c:37:e3:2a:c4:41:c6:f8:9d:
                    4e:8b:64:14:af:b4:3c:b5:8a:6b:85:ea:fa:f0:20:
                    4d:10:6a:b3:95:8b:d4:74:fc:a5:af:dc:e5:55:90:
                    a8:c7:08:5d:1d:dc:30:e6:11:fe:44:f8:57:cd:80:
                    0e:1a:8e:c4:b6:96:08:7c:64:bd:b2:3f:2f:62:9b:
                    85:30:ac:5a:cc:dd:d1:74:94:05:18:a7:22:6d:4b:
                    f3:83:f2:c3:c5:35:fa:1f:db:96:ca:bf:33:0a:fa:
                    de:39:22:9b:74:22:a2:ad:fb:50:04:5c:f5:82:49:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:30:8A:BC:FA:A1:22:95:38:BE:25:CC:EB:8C:83:03:E9:C4:FF:08
            X509v3 Authority Key Identifier:
                keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:35:31:4f:f8:2d:86:f1:27:0d:c3:a1:cf:3e:4d:73:42:
         00:0f:60:14:43:f7:88:5b:48:6a:c7:ee:b9:d3:7f:a8:53:29:
         7b:8c:0b:e0:ff:41:fb:ca:5b:8b:06:8b:eb:d1:44:60:a4:1e:
         46:be:2d:9f:dd:15:da:0e:dc:12:98:e4:7b:61:0a:7f:29:59:
         d0:e6:a9:0b:56:f6:35:ad:05:5c:ba:ff:e0:85:4c:d0:52:f7:
         63:e9:1c:dd:2e:7e:0f:9e:95:4d:9f:21:aa:fc:e9:19:df:5d:
         4f:f1:11:28:85:3a:0f:b4:ce:a2:bf:70:c2:66:3c:d8:62:41:
         85:d9:e6:b5:30:40:d4:ed:8f:9d:e8:30:6e:11:b6:9c:d8:a6:
         06:50:66:c4:70:6a:bb:e5:3e:e5:38:cf:18:4d:56:7c:76:12:
         cd:7a:41:92:b8:be:28:b6:4c:b6:c4:af:05:d8:b8:09:3f:bf:
         cd:76:7c:c3:43:ef:d8:9a:ef:66:9f:dd:54:50:84:33:b4:cb:
         55:13:84:23:53:9e:06:da:0a:fb:69:9f:4f:f8:90:6b:03:48:
         43:ad:4b:d0:c5:af:1b:1d:15:62:27:47:ee:93:e8:c7:5e:91:
         9f:10:c0:74:ab:1a:60:cc:89:cc:83:4d:f6:b8:08:ff:c7:6f:
         1a:c8:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:15 2026 by rpki-client