This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
File:                     FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json)
Hash identifier:          FUsbj7ehowv/YzHZQpFiKqjFYK9mywhTsjam7xEAqKE=
Subject key identifier:   93:C1:EC:EF:2C:EA:3A:D0:B6:09:8E:0A:C9:51:AE:32:F0:C8:F1:74
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Certificate issuer:       /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
Manifest number:          0A5B
Signing time:             Sat 24 Jan 2026 19:47:39 +0000
Manifest this update:     Sat 24 Jan 2026 19:47:39 +0000
Manifest next update:     Sat 31 Jan 2026 19:47:39 +0000
Files and hashes:         1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: 7noPnQXmY6eE2hEyLThJCwYFVQxHT+5vTub9Q4nKi2w=)
                          2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: qD7Tfzoc4wjH2bt1dbbg4OGAjJJrb45scH4IFujWWW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004
        Validity
            Not Before: Jan 24 19:47:39 2026 GMT
            Not After : Jan 31 19:47:39 2026 GMT
        Subject: CN=697521db-1b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:d7:98:fa:87:7a:c1:35:e5:a9:25:d5:06:
                    cb:cb:08:5b:eb:f7:b4:fe:b0:f9:e3:b5:12:fc:96:
                    07:cf:5b:86:c9:d0:8b:1c:34:23:f6:c0:14:6e:37:
                    4a:75:1f:0c:aa:52:b9:97:be:a9:b0:68:7b:26:37:
                    24:3c:c5:14:ed:61:e9:77:a8:0d:b5:e1:c9:8d:ac:
                    17:93:b7:60:48:3d:6b:10:05:b5:2a:b4:61:43:3d:
                    e8:6e:2a:a6:d1:d0:69:fa:ae:e8:a3:f3:01:49:77:
                    35:45:16:53:e5:ac:79:3d:df:4b:63:55:ad:2c:90:
                    21:44:35:07:6f:f2:21:8c:d4:af:d3:cf:20:0a:17:
                    83:54:c7:b8:11:dc:06:95:88:5d:b2:8e:43:96:53:
                    9e:c6:56:1c:92:3b:1d:a0:cc:a3:d8:4e:03:fd:82:
                    65:ef:eb:6b:22:b2:3f:18:8b:07:08:1c:65:4d:bd:
                    fc:1d:d2:61:f9:08:79:6e:14:94:ed:fe:1f:d6:73:
                    37:60:e1:bc:97:b6:38:94:3e:ab:cd:16:c4:51:bd:
                    35:7a:da:d3:b0:9d:38:6e:04:ff:bb:91:45:84:db:
                    eb:a4:93:9c:56:56:41:90:87:7c:06:a4:9c:9d:ad:
                    a3:f6:10:87:2b:78:fe:02:0a:78:75:1a:9f:37:70:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C1:EC:EF:2C:EA:3A:D0:B6:09:8E:0A:C9:51:AE:32:F0:C8:F1:74
            X509v3 Authority Key Identifier:
                keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:8e:5f:e3:67:f4:aa:15:51:af:3e:fc:66:72:8e:29:d4:
         8d:80:c6:7f:56:7a:33:95:99:e2:04:a5:c1:36:bc:ca:1f:40:
         fb:47:bf:a4:23:7b:d6:90:2e:11:aa:44:65:db:75:2b:31:63:
         02:e6:55:2e:9d:86:f3:f5:f1:2a:46:d9:b9:69:0c:c5:51:cc:
         77:7c:d9:f1:29:cd:64:31:bd:40:51:ab:4e:f0:b5:99:3f:6f:
         f5:05:a5:9c:ff:5d:7c:4c:b0:b9:c8:a9:b9:93:b9:5b:2d:19:
         10:35:85:16:d8:78:88:2b:41:f2:f2:de:22:bd:a6:8d:dc:70:
         1e:8d:1d:eb:5a:1d:1d:74:46:61:e4:15:33:38:1c:f0:d9:cc:
         03:1f:20:7e:e0:5e:e9:7d:40:01:34:09:7e:0c:c6:11:c6:f1:
         e6:87:fb:34:03:ad:f1:1c:2e:37:62:b7:9b:5e:24:03:e1:b9:
         5f:a4:e5:1a:e9:84:62:97:94:5e:d6:1d:68:77:35:e4:19:1e:
         ca:22:c7:5a:f1:41:fb:02:b1:75:d9:de:9e:64:0a:d5:43:30:
         2a:17:65:e0:65:8f:13:cf:d6:f6:94:bc:92:cb:9f:50:d7:ea:
         82:a7:b6:fb:b5:d9:16:48:19:29:f3:ef:f8:66:c0:36:c5:35:
         48:ab:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:05 2026 by rpki-client