This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File:                     gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier:          xfgjXEoL3jjlCTZ7bYrdjtC4vOzq1KMmn6PxWKuN9v4=
Subject key identifier:   2A:52:2B:9E:9A:16:F1:FA:D1:FC:63:CE:28:63:04:E9:53:8A:4B:B1
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer:       /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial:       1ED3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number:          1ED2
Signing time:             Sat 24 Jan 2026 15:51:09 +0000
Manifest this update:     Sat 24 Jan 2026 15:51:09 +0000
Manifest next update:     Sat 31 Jan 2026 15:51:09 +0000
Files and hashes:         1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: a+O01+J18+DCDiTOuWDB1eW7TXgS4rpJMwNXbmLoKSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7891 (0x1ed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
        Validity
            Not Before: Jan 24 15:51:09 2026 GMT
            Not After : Jan 31 15:51:09 2026 GMT
        Subject: CN=6974ea6d-df88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:8b:4c:c3:2a:13:18:62:86:51:af:5b:9c:
                    26:da:6b:92:83:c8:fe:e1:38:32:82:57:98:5e:45:
                    04:b7:16:ea:c0:ee:12:88:01:12:fc:6d:19:ee:94:
                    09:5b:de:35:f8:dd:ce:35:b0:97:67:32:37:0e:9c:
                    4d:e3:99:ff:67:73:53:79:2b:68:68:b0:9b:13:e8:
                    45:9b:df:e8:9e:55:d6:37:a9:58:80:d8:2e:6c:56:
                    3c:c3:56:04:a1:4b:93:43:0d:c9:0c:ba:4d:c0:b6:
                    8e:9c:b0:0d:aa:d9:a5:02:9c:f6:7e:0a:70:7b:b8:
                    03:72:03:6a:bb:94:f3:69:b5:28:35:a5:96:b7:43:
                    32:f5:fb:48:bd:23:b0:c4:a0:f1:f2:fe:50:b3:34:
                    da:1f:fd:13:01:d6:af:9f:0a:ee:5b:f6:c4:e5:32:
                    46:90:9b:32:8b:e5:9a:9a:02:89:e7:c2:be:f7:e6:
                    e7:bb:c0:4c:bb:fd:00:03:a5:c4:e4:6e:b7:e3:a1:
                    d9:4d:e9:51:e9:4f:7c:56:78:f4:e8:25:12:57:20:
                    31:b1:b2:08:02:31:cd:cc:91:c5:62:9f:69:94:44:
                    14:8a:d8:fd:06:64:6f:ef:1e:13:41:df:58:79:93:
                    49:c8:b4:4d:af:d3:67:2c:5a:6b:7e:4d:20:cc:63:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:52:2B:9E:9A:16:F1:FA:D1:FC:63:CE:28:63:04:E9:53:8A:4B:B1
            X509v3 Authority Key Identifier:
                keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9a:9c:8d:15:2f:96:cc:33:48:dd:83:6c:40:67:78:f3:4b:
         33:eb:9d:43:af:ab:01:4f:11:d3:60:c3:5c:af:88:60:3b:17:
         81:f9:5a:b4:5e:44:b5:a8:01:65:0d:c1:2b:cb:26:8f:de:eb:
         54:16:d1:2a:b9:19:85:f6:27:99:e5:3b:b0:56:c2:55:b1:03:
         42:e9:fe:26:bb:0f:33:ec:c4:0c:eb:be:75:13:d8:2e:19:04:
         9f:b8:51:33:30:3b:d4:2d:ce:93:f9:c3:89:5e:9e:dd:54:76:
         f2:cf:04:af:7c:52:66:bf:12:d5:ee:f5:4e:b0:47:ed:f8:dd:
         6d:d9:c6:99:53:84:62:5a:da:a2:c7:aa:5d:7d:09:65:6f:64:
         8c:ed:d9:bf:d9:2e:0f:a8:9b:49:0d:99:83:cf:fe:f9:fd:87:
         ec:55:5d:8e:a4:74:66:51:55:49:b2:8e:58:63:b8:79:eb:5f:
         d1:42:28:b7:cf:75:b7:7c:a2:ee:78:e3:6d:07:ee:43:b5:49:
         67:f0:33:e4:2e:83:36:70:cf:1a:7e:04:5d:9d:15:bb:0d:53:
         7f:27:0e:09:6e:16:f0:e0:b3:0f:88:82:bc:e2:be:ba:96:93:
         2d:54:1f:a6:aa:fa:e1:77:f7:a5:ea:e0:89:e8:e8:15:73:e1:
         99:60:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:29:25 2026 by rpki-client