This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File:                     dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier:          WGhdkOPOYfsrSrfM8Y5Io82Y9/JEPlTgWqqxWp4JEeI=
Subject key identifier:   D4:E5:51:6C:C1:5B:7A:97:E6:7D:3D:30:6F:12:43:D7:69:CF:90:0C
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer:       /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number:          01F8
Signing time:             Sun 25 Jan 2026 01:46:45 +0000
Manifest this update:     Sun 25 Jan 2026 01:46:45 +0000
Manifest next update:     Sun 01 Feb 2026 01:46:45 +0000
Files and hashes:         1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: VdqnJkUJjOdXUhqfkp9wv7O2CG13r9iEfWYBEdyUmts=)
                          2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA=)
                          3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: gpne2Z9eCccwlEkyZjX90RD5Y2MRSV5puraHdA9qCqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
        Validity
            Not Before: Jan 25 01:46:45 2026 GMT
            Not After : Feb  1 01:46:45 2026 GMT
        Subject: CN=69757605-820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:b6:a6:f7:9b:09:74:f6:ad:63:52:f8:3d:
                    8d:c6:d8:30:4d:80:66:54:be:27:b0:17:53:35:9d:
                    2e:0f:87:9f:f8:79:48:df:a7:14:a4:ff:87:fe:ac:
                    1f:d6:89:da:00:e5:ac:19:aa:b1:90:d9:21:f0:81:
                    5b:65:75:a5:48:ec:f4:a4:44:a6:ed:f4:99:01:e0:
                    0f:97:c0:ef:08:be:ab:36:8b:60:0a:3a:5f:41:ee:
                    78:60:4e:12:27:37:72:17:b1:1e:ce:7c:c2:7b:b3:
                    24:c0:70:90:fb:31:ae:ed:fb:f5:b5:b1:a7:e3:83:
                    c6:34:4e:48:44:85:1d:b7:27:1a:8d:9b:11:1f:9c:
                    49:59:8d:ba:b1:5a:95:0c:cc:6f:56:3e:a5:f0:6a:
                    80:19:a6:9f:3d:96:32:9c:15:8b:b5:10:29:3b:9e:
                    21:84:d6:69:c7:c5:16:f6:d2:05:1a:b6:6f:8a:51:
                    e1:c0:09:b0:06:1e:c6:1d:77:02:20:c9:5f:74:e3:
                    56:6a:09:90:d2:a6:75:4b:ba:34:aa:2a:2f:ff:6c:
                    25:52:58:fb:dc:ce:53:76:4a:8f:72:80:c1:f6:8e:
                    b3:c7:37:2f:26:55:f3:3d:d3:4f:31:a6:9f:e1:50:
                    e5:ab:3e:aa:b4:64:69:ce:d3:09:b1:7d:15:8b:e5:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E5:51:6C:C1:5B:7A:97:E6:7D:3D:30:6F:12:43:D7:69:CF:90:0C
            X509v3 Authority Key Identifier:
                keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:42:3c:89:6b:a9:1b:44:ba:9f:19:42:3a:8c:24:f3:42:
         7a:91:c1:d8:c8:bf:8c:80:bd:39:96:2b:f8:fb:7b:e2:88:8e:
         bd:0c:ef:bf:6e:c5:c4:cf:d0:90:21:3b:f9:8f:0c:f6:36:65:
         8f:60:32:54:f4:5d:d6:57:f9:90:76:ff:c9:89:0a:20:37:3e:
         20:b7:24:09:ab:44:75:84:13:53:df:ee:70:dd:64:15:5e:9c:
         76:7c:55:8c:8b:df:df:be:b7:5a:da:e6:de:ed:54:9d:8d:26:
         e6:a8:dd:da:2c:36:fe:2c:e8:ec:48:3a:59:ea:a9:cc:9e:8c:
         17:7b:f8:1a:80:55:27:71:c8:51:f1:60:72:9c:f5:e1:ed:ae:
         bf:e4:55:fe:10:ef:ee:c5:68:0b:29:e1:cc:15:8b:80:ff:ac:
         e5:8e:0c:c2:af:91:1e:7e:0b:fb:dd:ff:e0:af:ac:e0:fa:98:
         ca:8d:a3:63:6f:10:73:99:67:4f:39:9c:93:ad:72:b1:65:26:
         8d:cf:c3:bc:72:c6:13:8d:34:ad:36:0c:e7:3a:bf:a0:3a:5c:
         ad:3d:2f:4d:8c:46:22:de:f8:f4:23:eb:ae:ec:5e:d8:80:fb:
         9f:71:70:31:1d:70:88:7e:5e:a7:95:98:36:4e:e4:6c:85:ec:
         18:f9:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:46 2026 by rpki-client