This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
File:                     rRUq9u8CmWIL-fd_1gzYsxQEF68.mft (raw, json)
Hash identifier:          2hTcAt7HN/aMud9QtCyUPqoxUDZSge70r+f9dZLzhOQ=
Subject key identifier:   96:2A:05:DE:4F:08:A1:9D:5A:5A:B7:19:46:BE:C4:FC:34:1A:88:14
Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF
Certificate issuer:       /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
Manifest number:          4B
Signing time:             Fri 23 Jan 2026 06:19:09 +0000
Manifest this update:     Fri 23 Jan 2026 06:19:08 +0000
Manifest next update:     Fri 30 Jan 2026 06:19:08 +0000
Files and hashes:         1: rRUq9u8CmWIL-fd_1gzYsxQEF68.crl (hash: 6ht1KUnCTc2Kv9XZnP7IzVIsPSOKws9rqR0KKN+pIO4=)
                          2: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (hash: SWZOIIyqYqeKGjNImIfW9J7E02rh/5URfQeoSZwvbmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl
                          rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF
        Validity
            Not Before: Jan 23 06:19:08 2026 GMT
            Not After : Jan 30 06:19:08 2026 GMT
        Subject: CN=697312dd-02b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:35:68:1f:e4:7e:14:85:a5:2f:57:fa:3a:
                    b9:a8:07:0b:bf:f4:6f:9a:d6:e9:1f:e6:39:38:b7:
                    7e:1a:4a:5c:07:4d:c2:55:d6:e7:ec:30:3d:00:08:
                    54:bb:50:38:76:2d:bf:16:19:12:a8:e6:9f:ae:4d:
                    5b:79:b4:27:8e:45:ab:00:1c:e5:73:49:f4:24:2e:
                    19:18:85:f4:88:65:68:a4:e6:4a:16:97:ae:e1:58:
                    31:e4:53:01:76:24:98:65:4a:ba:bb:b2:0c:17:00:
                    30:80:58:73:9d:66:f3:12:14:58:78:06:e0:21:af:
                    c8:bc:58:64:2a:5e:82:8b:8c:20:fa:6d:82:d0:7c:
                    3a:ff:c0:11:73:16:72:90:7f:3d:77:0a:5b:0e:05:
                    37:40:89:7b:d4:7b:64:68:1a:a9:88:e8:a0:fb:98:
                    4d:f0:95:5c:1c:3e:36:4e:34:d1:bb:5a:03:d9:45:
                    d3:9b:0c:a4:8d:03:c1:fb:2a:81:4f:59:bf:62:7f:
                    0c:2f:c7:0a:27:36:01:05:60:b5:a6:27:d2:b8:4c:
                    dd:60:ab:2a:17:67:ad:5f:f9:39:95:4d:1d:07:01:
                    56:db:ee:ab:98:00:d6:b8:2a:91:44:12:12:cf:ce:
                    d9:f8:58:03:fd:34:46:64:c0:42:ed:6c:07:0e:d6:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:05:DE:4F:08:A1:9D:5A:5A:B7:19:46:BE:C4:FC:34:1A:88:14
            X509v3 Authority Key Identifier:
                keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:87:eb:8e:2e:9f:df:e9:fd:2d:ae:41:b5:2d:a4:83:ee:6b:
         59:39:b9:14:f3:ae:d8:5b:f5:a4:c2:c7:83:15:39:dc:44:b0:
         e2:89:85:a3:d9:b0:53:5b:a2:bc:2c:13:cd:99:d4:d0:00:09:
         ac:48:64:94:27:e9:f5:c4:16:14:94:20:87:c7:a5:14:ac:83:
         dc:ff:5c:4e:0a:2e:87:1d:78:f6:90:69:de:85:2d:64:c8:06:
         79:60:ef:93:2e:45:9e:99:3b:dd:fd:84:40:3f:bb:db:4a:60:
         e7:18:ec:d5:39:2f:f3:8c:9e:ce:0c:e1:6d:8c:fe:75:d1:28:
         4f:28:c6:00:6c:d5:d5:2c:69:27:99:bb:36:87:59:ef:ff:f0:
         25:de:9c:f9:06:7a:5e:cd:63:b6:96:3f:87:22:74:e4:f8:60:
         1c:13:40:d2:c6:1d:24:4b:e0:e8:b8:e7:af:09:ae:5b:7b:cc:
         8b:2b:6f:2c:7e:9f:d6:1c:7d:f7:39:29:23:56:ce:76:d2:f3:
         3f:b2:c7:e4:40:b6:50:e7:d6:9d:30:8c:9a:ae:14:50:16:38:
         52:d8:ef:28:dd:33:02:a7:8b:31:0c:c9:e5:77:04:98:55:0b:
         c4:86:46:28:8c:b5:3e:82:37:f8:ad:d2:b7:42:b0:3a:4f:e9:
         19:8e:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:34 2026 by rpki-client