This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
File:                     F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json)
Hash identifier:          ZkBn3xHHfVGCUNL53xLWkGThlef47qUQBgd9TdVF0es=
Subject key identifier:   30:96:6D:CA:4E:5E:BC:B3:4A:1D:12:FB:CC:15:C1:E6:CF:42:5F:F6
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
Manifest number:          0626
Signing time:             Sat 24 Jan 2026 22:06:37 +0000
Manifest this update:     Sat 24 Jan 2026 22:06:36 +0000
Manifest next update:     Sat 31 Jan 2026 22:06:36 +0000
Files and hashes:         1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: AQGfkQYoOZrufHH7SgPsyLDszkxBnwsJw5HK6NYm6Ak=)
                          2: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=)
                          3: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=)
                          4: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=)
                          5: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=)
                          6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: Jan 24 22:06:36 2026 GMT
            Not After : Jan 31 22:06:36 2026 GMT
        Subject: CN=6975426d-2ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:32:fa:69:75:5a:16:90:dc:d4:71:60:d5:
                    9e:00:25:60:a0:99:e9:1a:32:a7:64:d8:ba:0b:fc:
                    e3:d0:b9:14:cc:3d:51:1e:4a:df:c6:d1:8f:c2:b3:
                    6e:60:4f:ff:78:35:71:e9:68:6e:8e:83:57:6a:f7:
                    cb:ba:28:4f:66:7a:0c:d6:87:b2:72:23:21:26:b4:
                    de:3b:06:90:b9:25:f5:a4:60:96:6d:41:ab:74:84:
                    5f:6c:6d:3f:95:84:85:2e:02:5b:0a:35:bb:3a:ba:
                    a1:a9:49:58:fa:31:5d:55:db:7f:dd:ca:7a:2e:51:
                    bb:e2:a4:8e:e4:c3:7d:8f:21:c9:f2:8e:d0:47:2a:
                    85:ca:47:c9:7c:c6:ec:fa:b0:e3:da:9c:61:e8:3f:
                    62:50:a4:61:62:35:04:a0:ae:76:80:91:be:e0:96:
                    5b:a4:59:db:69:96:83:19:81:0b:1a:4d:fc:fd:4b:
                    5e:d7:fb:4a:77:00:fa:43:13:20:a3:5a:87:63:69:
                    6c:22:d0:f5:8b:68:af:1c:b6:14:dc:67:25:56:6e:
                    b8:a0:d8:21:70:a8:b1:36:ec:42:c1:fb:f9:01:fb:
                    90:17:df:1c:52:af:03:25:6b:7e:30:21:49:01:90:
                    13:8c:2a:e5:d6:05:b3:04:39:ae:c9:53:7f:82:8b:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:6D:CA:4E:5E:BC:B3:4A:1D:12:FB:CC:15:C1:E6:CF:42:5F:F6
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:ea:50:0a:a1:21:e3:e5:c0:5a:3b:8c:04:69:da:c6:2b:78:
         27:9b:fb:6a:b9:5a:05:0f:d2:01:a2:92:78:89:ab:cc:89:72:
         f4:ef:25:a2:ed:3d:6c:ac:dd:cb:a8:a6:16:9e:b6:61:82:e2:
         55:ff:cf:7b:11:67:fd:f5:09:4f:af:9f:d3:f4:fd:09:3b:53:
         b2:f1:d7:23:71:ae:f5:b8:5e:e3:56:a3:00:f4:e3:81:bb:0b:
         07:c2:e6:81:3c:e4:d5:f7:81:f7:55:c4:d4:55:42:88:73:41:
         e8:b0:7d:bf:97:f3:3a:8b:cd:fd:73:30:1b:d7:35:50:0e:97:
         cc:85:68:4a:06:9c:ee:79:a4:f0:4a:97:ad:78:d7:29:ca:9a:
         9d:94:83:a0:8f:3a:e3:14:a0:f5:fa:75:5e:04:a4:47:56:05:
         d9:ba:08:38:d0:a1:8b:07:f9:ae:03:8e:e9:66:d0:76:ea:32:
         31:b7:63:7c:9d:8d:57:a4:6a:03:20:7a:40:b5:5a:93:3e:56:
         53:e3:79:d8:cc:c6:65:05:c8:8e:33:f1:84:da:b6:4b:11:ad:
         2c:19:49:d1:93:37:c4:d4:a5:7f:9f:75:5c:a1:0d:d6:db:cb:
         b9:d4:28:33:c1:58:35:15:57:1d:52:b3:f9:85:ab:c5:30:97:
         8c:3d:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:46 2026 by rpki-client