This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
File:                     92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json)
Hash identifier:          VMm/JXoIK84E4Dc/wjLUVzfjUGsjtM3vgIoVvIOEp3E=
Subject key identifier:   53:95:62:5B:15:D9:9D:E7:9F:D2:21:D4:BF:80:9E:2D:97:86:BC:9F
Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02
Certificate issuer:       /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02
Certificate serial:       2B09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
Manifest number:          2AF2
Signing time:             Sat 24 Jan 2026 15:25:07 +0000
Manifest this update:     Sat 24 Jan 2026 15:25:07 +0000
Manifest next update:     Sat 31 Jan 2026 15:25:07 +0000
Files and hashes:         1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: GB6dceDggmoiQQ7MLnNDh6pWlnixaoDDFq2jAJybZ7k=)
                          2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: hRXVDS2SOPtJ34LPdCH4GrMLjogwv7F/rCNwzymK5NA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl
                          rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11017 (0x2b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02
        Validity
            Not Before: Jan 24 15:25:07 2026 GMT
            Not After : Jan 31 15:25:07 2026 GMT
        Subject: CN=6974e453-dafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:49:65:37:36:f8:e2:b1:d4:6c:2c:4f:95:
                    32:39:17:05:c5:2c:7b:fb:c4:3b:40:6f:7e:31:76:
                    a1:1a:99:dc:8d:34:d2:3d:3c:56:31:1a:52:5a:e4:
                    02:4a:6a:d8:f7:d8:b3:03:3b:0f:66:6d:7d:75:28:
                    cf:34:ac:11:71:37:b8:68:80:a2:43:e5:a1:a7:04:
                    af:83:58:93:da:72:94:0e:12:1f:90:91:84:7f:07:
                    a0:d8:eb:02:53:e6:92:c2:f2:67:a2:d4:04:bf:fb:
                    17:19:8e:1d:2a:54:60:9d:a3:96:06:09:94:92:cf:
                    72:19:51:27:cb:0d:16:31:73:35:e4:c0:e9:af:02:
                    82:76:75:14:ae:c7:93:3a:0e:a5:e8:ad:1a:26:0f:
                    f0:a6:25:62:ff:e5:d0:37:32:a5:ab:62:6d:7f:84:
                    e5:46:db:e2:47:10:30:16:a3:66:b3:ee:9b:28:d8:
                    da:9d:bb:a0:53:c9:7b:f7:60:55:96:e7:3f:3a:e2:
                    46:6e:14:33:5a:45:09:1c:14:37:7f:5e:8e:26:df:
                    2b:8a:14:07:0e:59:fe:87:0f:fc:b8:e5:1f:84:79:
                    b6:bd:27:d9:93:e9:91:ad:35:8c:a8:58:4a:02:ae:
                    f0:ec:af:6a:73:d2:0c:ce:83:0a:8c:1c:9b:5e:aa:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:95:62:5B:15:D9:9D:E7:9F:D2:21:D4:BF:80:9E:2D:97:86:BC:9F
            X509v3 Authority Key Identifier:
                keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6d:68:cb:eb:ce:3b:ee:93:f0:fc:d8:0d:d5:d3:de:0e:c5:
         16:e3:16:ca:ba:39:4a:76:1b:da:6a:a9:62:71:c6:37:bb:c5:
         c1:da:8f:e1:00:e7:90:23:a6:27:aa:19:a4:38:0a:0d:dd:21:
         72:9c:36:67:9c:70:0a:28:48:c0:d6:2d:f6:ed:8a:90:fb:f1:
         b6:1f:d8:42:d0:b1:25:d4:42:5d:63:86:b6:0a:60:b0:a0:83:
         ca:7b:d4:fb:f6:13:f8:ec:31:67:24:a2:02:e0:88:23:e8:6e:
         e2:22:cc:bc:c9:4a:17:9d:be:3d:39:35:1e:c8:11:1e:d3:cb:
         3a:40:0b:99:ec:1f:e0:bf:04:a2:fd:7f:d5:34:39:dc:2e:11:
         8c:96:4b:dd:11:92:6c:19:d1:50:62:f1:71:fa:69:b6:b4:28:
         5c:bd:5f:24:4c:d0:9b:f0:c4:89:26:49:f0:42:31:eb:41:54:
         33:c9:ea:90:a9:35:3f:f6:ee:d8:d1:87:4a:5b:12:c6:1f:77:
         a7:e5:ff:ac:c4:0b:96:ef:47:55:e5:1e:16:fc:03:91:32:17:
         58:0c:3a:7c:1c:e1:9d:fb:d4:7e:8d:30:59:c2:cd:7e:3b:c5:
         7d:30:ec:d8:01:5d:dd:38:78:f4:d4:57:1f:5f:ed:7a:e1:6a:
         44:73:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:53:31 2026 by rpki-client