This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
File:                     -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json)
Hash identifier:          cDOQvZSktJob3TH5KpwipO0ckm8zzrsqhUPktyVWtoA=
Subject key identifier:   15:9E:49:D3:F3:AD:E9:43:C2:E9:22:AD:39:5D:32:F5:FC:CC:F1:B4
Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
Certificate issuer:       /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Certificate serial:       353B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
Manifest number:          3522
Signing time:             Sat 24 Jan 2026 14:43:39 +0000
Manifest this update:     Sat 24 Jan 2026 14:43:39 +0000
Manifest next update:     Sat 31 Jan 2026 14:43:39 +0000
Files and hashes:         1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: u+PP8yODDrT2ltRa6XB/nFyrmgIrpf2zUTj4TG1C7Qg=)
                          2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: AsLmLNpdLhba6hfcYMLpd0sVqrUh2auGXL+sqK0hCjo=)
                          3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: Ia/j0/zm2+DZmW6lBQa66nn1YakkPhVuWJjGJSOQHIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
                          rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13627 (0x353b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
        Validity
            Not Before: Jan 24 14:43:39 2026 GMT
            Not After : Jan 31 14:43:39 2026 GMT
        Subject: CN=6974da9b-8a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:17:6d:a3:d0:cf:14:e8:e4:6f:89:e3:5f:
                    08:b3:71:f5:fc:6e:8f:17:80:be:16:7b:78:4c:f1:
                    aa:26:68:b5:b6:30:47:09:c0:d3:ad:7b:8b:0e:b4:
                    d7:53:7f:a9:11:ad:66:f6:74:74:f6:f9:0a:16:8a:
                    1e:51:16:5a:10:ef:9b:59:02:f3:b6:fa:b2:b3:df:
                    c7:03:aa:07:2a:f7:32:44:af:3e:01:c6:33:34:58:
                    23:d7:e3:ec:f9:1f:8e:81:a8:c6:eb:9a:0f:13:26:
                    42:f5:74:05:4e:04:32:7d:f7:2e:9a:72:63:f8:b3:
                    a2:6e:d3:ab:da:1d:08:91:1c:0c:ef:bc:e2:b4:27:
                    f0:6a:53:ae:6a:4a:be:8c:91:af:a2:2f:f5:97:6b:
                    6e:80:82:30:8d:5e:7b:8a:e9:41:f0:1a:8d:e6:fe:
                    64:16:4f:5d:34:ef:88:3e:a0:8c:17:5d:78:8a:3f:
                    bf:a6:a2:19:bb:d5:78:fe:53:0a:22:b7:03:2c:c9:
                    b7:ca:e5:ee:5e:41:c1:4f:da:5f:71:18:5b:bc:5e:
                    27:02:76:c8:9a:92:f5:31:28:3b:72:14:90:ea:62:
                    b1:6d:28:32:76:f8:4d:37:d8:20:a1:66:ac:53:01:
                    ff:fa:f8:e0:56:cc:20:73:13:6c:48:5d:0a:1e:39:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:49:D3:F3:AD:E9:43:C2:E9:22:AD:39:5D:32:F5:FC:CC:F1:B4
            X509v3 Authority Key Identifier:
                keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:04:86:41:c0:b2:cf:f1:39:c2:2b:87:8d:1f:11:a3:97:
         7b:c9:85:80:49:1d:d8:43:0d:9d:e3:d1:2b:42:0f:53:56:56:
         0c:b7:04:f1:68:86:4f:3b:14:1d:75:ee:98:f3:6b:85:aa:d9:
         e3:6b:3b:ca:e2:6f:d7:15:82:ea:e0:8e:8f:4e:12:6a:93:df:
         0c:03:13:df:21:5f:83:9f:d0:de:7e:e8:c1:84:c2:ce:b9:76:
         d8:e7:70:58:21:23:6c:c2:91:80:8c:03:57:b2:83:34:95:15:
         5a:13:23:87:1e:41:1c:07:83:12:26:08:c6:6a:b2:35:0e:71:
         31:3b:38:78:ef:0e:b7:21:bb:17:f7:a8:64:c1:f4:0e:25:66:
         76:8a:0f:65:fe:83:21:07:86:2b:d9:dd:20:e7:92:a6:1a:08:
         25:d7:11:9c:bc:a7:ad:71:ba:91:78:57:6c:d3:bc:36:c0:e8:
         ba:13:e5:60:09:92:31:aa:8b:3e:74:7c:e4:53:bc:1c:af:f2:
         84:85:1e:b3:2f:22:95:19:d1:14:75:37:09:0b:57:fe:95:6f:
         0c:e2:f7:13:c5:4b:bf:31:c2:c1:a3:4b:96:56:5f:95:97:99:
         51:ff:03:4e:65:5d:24:45:02:43:2e:8b:62:76:68:34:4a:c8:
         c0:de:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:25 2026 by rpki-client