This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier:          T+pvExVok6m2WpRCCzqtIV14y3PCBnA64/zqINRpozI=
Subject key identifier:   86:CF:C5:68:F7:B2:E9:69:C6:DF:0A:D9:57:2F:95:0D:49:24:D0:32
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer:       /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial:       03BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number:          03B5
Signing time:             Sat 24 Jan 2026 23:51:22 +0000
Manifest this update:     Sat 24 Jan 2026 23:51:21 +0000
Manifest next update:     Sat 31 Jan 2026 23:51:21 +0000
Files and hashes:         1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: vqNmLqR7PP1lEVYLTJXCtiAxSLGBy6WtTbFTCHRFeUw=)
                          2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
                          rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Validity
            Not Before: Jan 24 23:51:21 2026 GMT
            Not After : Jan 31 23:51:21 2026 GMT
        Subject: CN=69755afa-29eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:b6:80:5d:dd:5f:15:55:4f:0c:30:9c:8a:
                    73:49:5f:19:dc:90:a3:42:fc:ea:7a:9d:39:2b:17:
                    5e:af:d5:7f:8b:f0:5e:6e:82:e4:7f:f3:03:a9:04:
                    53:0f:3c:f8:55:60:8c:dc:3e:f5:cb:2c:81:6c:f3:
                    98:80:d9:d7:16:87:4e:29:54:04:fe:34:f8:6d:40:
                    3d:21:15:c3:79:56:b8:52:f9:27:ef:8d:55:f2:2e:
                    65:5b:89:49:cb:32:02:e8:3c:b7:72:45:84:4a:bb:
                    8f:47:8a:89:0c:20:1d:1d:20:ea:46:13:de:fa:fc:
                    89:59:87:13:9f:82:cb:6f:5e:bb:10:1c:17:89:4c:
                    15:a8:a7:53:ae:f4:3c:43:46:f4:c0:07:bf:8a:ae:
                    a7:e8:eb:94:0e:ed:ce:46:a7:fc:33:1f:fd:1c:79:
                    00:10:d2:d9:e2:13:e6:bc:66:87:c0:10:67:e1:6d:
                    8d:a1:60:07:f8:e9:bf:7b:9a:1b:17:fb:13:49:bb:
                    a9:29:92:5a:13:a7:b6:f7:f3:0b:89:51:0f:a3:bf:
                    7e:6a:40:c2:d5:95:af:88:79:5e:75:4a:ca:f9:9a:
                    d0:5e:f0:0f:67:5e:0e:6f:e6:33:02:d9:51:2a:1c:
                    61:2b:28:23:35:bf:cf:c8:e5:26:21:58:dc:42:cc:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CF:C5:68:F7:B2:E9:69:C6:DF:0A:D9:57:2F:95:0D:49:24:D0:32
            X509v3 Authority Key Identifier:
                keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:77:b0:fd:db:43:f4:1a:1d:4d:f1:9f:10:5a:9d:b0:5d:
         24:4a:f9:a7:cc:48:e8:b5:7d:84:db:ed:7a:7b:54:c8:04:0a:
         0e:e6:32:c0:56:2d:6a:f5:35:bd:13:0c:59:b8:3b:cb:b4:e6:
         ec:0b:b5:08:01:96:02:a5:1d:82:1a:a7:9a:4b:0f:0c:62:c8:
         ba:bb:b0:a5:7f:0b:14:0e:a7:b8:65:1a:29:0e:0e:ff:41:cf:
         94:8e:0c:ab:8a:14:46:ce:c5:40:f8:5d:c9:15:59:f5:60:77:
         4b:78:e9:86:e8:69:4c:29:d3:08:b8:bc:6a:6f:7f:19:a2:f8:
         68:53:34:9d:60:0d:7d:a6:f6:d2:15:e4:f9:13:cd:38:3a:92:
         b9:fa:d4:2a:79:83:47:f2:e7:dc:53:1d:99:09:17:5b:c2:a2:
         25:42:d7:27:71:64:53:b9:b4:9e:cc:0f:7b:ee:4c:6d:71:44:
         14:75:22:46:c2:ee:4f:e4:a6:2e:89:57:d8:b7:3e:d1:b3:a4:
         f5:3b:be:93:a3:81:f1:ba:9a:f6:c2:c1:35:9b:b7:55:a1:43:
         78:fe:01:07:47:55:df:e0:04:ae:06:2b:62:8f:ff:9f:b0:19:
         d0:d3:3e:b4:1c:56:9a:3e:f5:8b:ed:c1:66:56:9d:47:af:b6:
         f2:3a:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:10 2026 by rpki-client