This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
File:                     dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json)
Hash identifier:          zfSEjTsWu+jdHQwfE4O+UsaQfMe5SR5vaz69CBDSz/k=
Subject key identifier:   21:C8:17:F4:91:77:B3:01:72:AA:A8:3C:54:7A:BF:7B:5D:D1:F9:00
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Certificate issuer:       /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
Manifest number:          08C3
Signing time:             Sat 24 Jan 2026 19:51:02 +0000
Manifest this update:     Sat 24 Jan 2026 19:51:02 +0000
Manifest next update:     Sat 31 Jan 2026 19:51:02 +0000
Files and hashes:         1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: KyZeNy7uiqT8sDyRrlkNUy8ivxWC8SAchoqYJwlJVi8=)
                          2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: tYFsHgxAF9/ErgmR/KDg2eSuObnl9aWU/P2C3GZmtAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
        Validity
            Not Before: Jan 24 19:51:02 2026 GMT
            Not After : Jan 31 19:51:02 2026 GMT
        Subject: CN=697522a6-a8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:95:c4:6b:c8:a2:35:3b:1d:25:1b:c7:d2:
                    36:23:95:9a:61:80:b8:f2:1c:fd:26:5a:11:2a:14:
                    f1:b8:6d:88:ba:bb:44:bc:bb:5c:c3:ad:d4:7b:08:
                    46:58:c7:72:72:dd:27:eb:34:59:26:af:d6:38:0c:
                    96:53:e6:64:aa:57:19:22:5b:91:e1:55:01:9e:20:
                    2d:e6:2b:3d:91:9c:0a:1d:66:1e:f7:07:6b:c7:1a:
                    2e:ce:db:d0:d0:ba:8f:95:75:23:e7:93:a9:e8:8b:
                    d8:98:f0:a9:8b:85:01:8a:e4:8f:a6:e2:47:02:ab:
                    fe:23:59:7b:be:53:79:14:3c:96:a4:14:eb:f3:4f:
                    3e:44:4a:96:1e:a9:40:6a:6c:ab:8d:f5:46:e9:ba:
                    83:ba:ec:7d:64:79:ed:0e:4f:bb:c9:55:bd:6f:6f:
                    34:c2:a2:f2:1e:a6:96:0d:58:26:f5:df:a0:de:4c:
                    e1:87:23:47:9e:ea:9c:6b:e7:58:de:70:7c:5c:6d:
                    7d:ba:8a:89:d9:e6:db:b0:ab:7b:6a:94:66:af:b9:
                    5f:17:fc:dc:97:12:e2:9c:0a:c3:f4:38:fc:96:0a:
                    2a:92:92:b3:31:f9:78:14:ca:1d:b6:00:50:c4:fb:
                    a2:46:69:44:f1:5f:83:94:bb:9d:62:db:f7:79:7c:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:17:F4:91:77:B3:01:72:AA:A8:3C:54:7A:BF:7B:5D:D1:F9:00
            X509v3 Authority Key Identifier:
                keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:34:7d:b8:c5:65:ba:c5:93:95:8f:cc:92:fc:14:7d:fa:
         68:f3:f0:6a:c0:1b:6f:bc:a3:bb:fd:97:1c:11:17:51:d2:94:
         c1:5f:06:af:2c:46:eb:24:2f:8b:ab:8b:9c:94:06:ee:98:e1:
         34:fe:1b:36:48:57:69:fd:32:d0:ed:2e:2b:35:9c:53:62:0e:
         f5:8b:58:8b:bd:2c:8a:26:93:04:65:19:0b:db:47:ea:92:c2:
         ba:3b:cb:7d:db:21:e1:78:91:c2:eb:e3:de:e6:b2:8d:96:a2:
         92:0d:c7:59:d2:00:cc:d2:fb:9c:9e:dc:d9:17:2c:3e:7e:1d:
         5b:0d:ec:da:79:a7:54:ef:6c:60:7d:38:e9:3d:d4:e0:b6:29:
         48:8f:8c:fd:a4:ca:94:cd:4a:04:5d:70:01:52:36:49:79:cf:
         45:ea:de:06:02:b5:8b:ff:1d:28:9e:95:e0:3e:4c:bf:e4:a2:
         4d:75:95:2e:86:50:71:f7:cd:4d:5b:f0:8d:91:1f:ff:88:a2:
         0e:84:21:23:ff:62:f6:c9:d7:8f:2e:11:58:98:5a:4f:e9:cc:
         88:2d:db:7e:64:2a:fc:24:14:6e:a0:b2:cf:55:3e:84:0e:88:
         f6:77:fa:15:36:54:c7:4a:fc:89:97:88:bf:7d:ec:bc:5f:17:
         b2:10:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:14 2026 by rpki-client