This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          s4JsLFWrkP6inlotQxdgJM8GksTGWnBwMisy3J/UzsI=
Subject key identifier:   95:42:20:AA:72:CD:5F:B9:8D:7E:F9:FD:CE:9C:F9:6A:31:89:1D:C9
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       07B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          079E
Signing time:             Sat 24 Jan 2026 20:52:45 +0000
Manifest this update:     Sat 24 Jan 2026 20:52:45 +0000
Manifest next update:     Sat 31 Jan 2026 20:52:45 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: Tsffecwcty25+0YXHYn87rdt7xvbh4oZ4NvpCmg9CTo=)
                          2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: FJap+RLgDx27hEKqAVGCvWdt4Kg4isquEKtc3jOhGvk=)
                          3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: rLm77yyO5DoBFV+guuBfejob2y9icJNI0289dxVOxYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977 (0x7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Jan 24 20:52:45 2026 GMT
            Not After : Jan 31 20:52:45 2026 GMT
        Subject: CN=6975311d-010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:0d:b5:10:24:c9:a6:b2:01:27:ea:92:a3:
                    75:26:a6:7a:14:55:91:68:2a:52:52:d8:bc:d4:bf:
                    92:a7:0f:dd:2b:a0:d6:13:da:ae:09:0f:70:ce:91:
                    19:b2:e0:f9:7f:5f:b0:b7:76:9b:5e:5f:d7:c4:6c:
                    62:b3:3a:3b:da:fb:84:a6:1e:bc:19:89:35:ee:b6:
                    6c:c2:a9:07:c2:d3:f1:86:51:ce:2a:ab:6e:77:15:
                    ac:aa:df:ca:8a:6c:6f:f1:8b:e8:4d:80:0d:c4:9a:
                    ff:fb:e9:b9:b2:7a:6c:18:b0:f5:17:42:2f:fe:ab:
                    56:d7:bd:ed:80:4b:33:6c:af:f9:86:f5:84:74:62:
                    e2:08:c2:1f:c8:df:f1:10:c7:fb:3a:15:71:a2:64:
                    39:42:68:87:1d:c0:fa:33:ca:42:1f:e7:28:87:e2:
                    73:98:0d:bc:2b:77:30:96:cc:2a:2d:59:16:81:00:
                    b8:38:23:2e:ce:02:5b:fb:a4:63:3b:ed:4e:71:e1:
                    22:8b:b4:0a:11:8a:4d:0d:e8:97:a1:e6:5e:92:9a:
                    bf:24:53:76:e6:32:8e:c6:06:dd:90:df:75:ad:10:
                    15:bd:c8:8c:ba:41:d5:a1:29:ad:ab:1a:4b:b5:40:
                    8f:8c:0a:87:f1:e5:cf:b4:ed:fc:8b:98:15:ac:ec:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:42:20:AA:72:CD:5F:B9:8D:7E:F9:FD:CE:9C:F9:6A:31:89:1D:C9
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:bb:37:85:b2:39:89:37:9b:b7:1d:2e:ee:10:5e:19:9e:
         6b:66:c5:37:a4:fa:29:7c:8c:f6:c3:ca:7f:e5:74:09:a6:e8:
         be:03:43:da:e6:b9:e1:5f:ef:b7:1a:69:c9:00:25:c2:21:5e:
         31:43:e7:7c:ec:db:a2:fa:45:70:46:cc:3c:4e:16:e6:1b:90:
         e6:dd:36:ed:c9:88:2f:f9:b2:ba:d3:9c:bb:1b:47:d7:0a:47:
         7b:e1:49:8d:8c:0b:12:2d:35:1b:94:95:e7:6e:3c:9b:56:3c:
         16:22:2b:85:35:a1:96:a2:38:56:b2:28:76:34:8f:42:c5:cc:
         90:ac:f5:cd:33:d7:4a:c6:03:91:4d:14:82:36:b9:5e:ef:1b:
         59:2e:70:ab:f4:b2:9b:31:d9:c2:54:2c:85:78:6e:2d:c9:45:
         4c:a1:7f:0a:ef:1a:6b:05:46:a1:cd:86:49:b8:b6:cf:8b:73:
         8a:24:a6:35:42:e4:93:1c:f2:a5:71:a0:92:9a:3f:1a:50:e6:
         a6:4d:5a:23:35:cf:21:09:69:4c:01:a0:aa:57:61:73:f7:8f:
         33:36:82:d2:01:33:06:07:b4:07:fc:dc:e9:f7:2a:02:43:81:
         55:cc:db:89:9d:d0:7e:7f:9d:bc:be:3e:7e:03:2d:c7:c1:91:
         2b:8d:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:43 2026 by rpki-client