This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File:                     mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier:          orDbSSwFeqxWXea4iCJEayV4Lb1AyJPsk2NUEJyFaNs=
Subject key identifier:   E7:D5:41:BE:EB:C5:77:44:1A:C6:56:A3:20:47:BE:72:4A:05:88:4E
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer:       /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial:       074E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number:          0741
Signing time:             Sat 24 Jan 2026 21:05:05 +0000
Manifest this update:     Sat 24 Jan 2026 21:05:04 +0000
Manifest next update:     Sat 31 Jan 2026 21:05:04 +0000
Files and hashes:         1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: Ez5Zaa4UkySrHcL3LeessgV5AIfVWsSlZoLUpS1w4GA=)
                          2: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=)
                          3: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
        Validity
            Not Before: Jan 24 21:05:04 2026 GMT
            Not After : Jan 31 21:05:04 2026 GMT
        Subject: CN=69753401-2ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:38:1a:39:bc:6e:a7:e5:98:5f:7a:83:80:
                    fe:8d:9e:fb:e5:02:6e:ad:32:43:e0:42:98:2e:bd:
                    9d:08:06:fd:10:2e:f6:90:9e:4b:40:5a:fa:c4:47:
                    5d:0c:2a:de:49:dc:d1:ed:61:e8:ca:d1:39:82:7e:
                    1a:2f:2a:61:00:1e:24:a1:65:5b:1a:b9:86:b2:e1:
                    37:82:66:f0:df:da:af:94:78:0b:ce:52:bc:eb:84:
                    9d:56:40:38:5a:cb:06:b1:75:98:68:77:4d:2b:25:
                    e9:86:5f:e3:5e:5d:fd:2f:75:7b:1c:e7:2c:cf:ce:
                    6c:95:2b:46:87:81:81:25:3e:0c:07:92:c7:3e:cb:
                    ce:a2:a3:4e:cd:8f:31:8d:8d:f7:f0:c6:51:8e:74:
                    73:0d:5b:05:25:88:ed:00:04:a3:7e:41:83:87:77:
                    f7:d1:89:51:6f:0b:fb:ac:63:07:0f:10:2f:53:aa:
                    a0:25:af:24:c0:dd:59:40:47:bb:6e:ed:24:f1:6f:
                    20:59:58:83:9f:81:fb:d8:97:71:03:6e:7e:74:a2:
                    c2:6c:98:96:38:1c:4e:a9:9e:75:8d:a3:6b:45:8c:
                    cd:57:d9:d8:75:de:72:7f:1d:43:fc:e6:cc:cc:5f:
                    0b:36:f3:d4:3e:d3:60:99:82:f7:8d:b2:76:0e:b8:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D5:41:BE:EB:C5:77:44:1A:C6:56:A3:20:47:BE:72:4A:05:88:4E
            X509v3 Authority Key Identifier:
                keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:70:ec:ac:1f:ed:66:1c:09:3b:53:f5:44:1c:67:0c:15:da:
         81:a0:25:75:cf:00:11:3e:55:dc:8e:cd:3e:bc:7e:da:c0:b1:
         dd:ec:4f:05:63:46:0e:bf:ae:3e:47:f8:56:e8:75:9c:7b:89:
         67:48:67:4b:a7:af:99:73:05:c5:34:c5:c9:8f:cf:2e:8f:81:
         c4:5f:88:a7:53:53:0f:ab:c4:2c:c3:0f:b8:83:76:9e:5d:7f:
         4d:20:f9:a4:7f:8a:0f:00:ba:cd:73:27:7e:d3:5e:e5:20:2d:
         39:07:82:b9:86:c9:ad:5b:67:da:d5:4c:3d:00:09:a2:d6:e1:
         3a:83:21:fe:8f:38:23:3b:2e:b1:8d:6f:34:1a:f7:52:64:18:
         f6:76:d7:4d:1e:65:f3:95:ba:f8:1f:90:62:54:27:2d:d4:f5:
         78:4c:77:4b:e1:ba:46:ee:3f:57:d2:63:b5:db:47:a5:aa:e4:
         33:16:e5:b6:e4:ff:8d:80:1d:cc:59:de:4a:d0:cc:71:86:7a:
         a3:6a:e4:8e:3a:1f:63:94:16:a2:55:38:44:75:2a:01:73:a3:
         3a:b1:2b:2e:19:0a:1b:a8:92:fb:e0:aa:b5:e2:07:fa:17:c5:
         1b:45:1c:03:26:20:bb:39:2f:bf:88:01:08:ca:20:36:3c:7b:
         df:f2:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:29:20 2026 by rpki-client