This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File:                     ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier:          F+Zy/AxtwsXjAnAaq2BFrY4/UBScCKOgMrGU+EtdzHo=
Subject key identifier:   18:27:9C:C4:DC:F2:17:B0:78:A0:48:05:73:AD:39:27:35:F0:16:8A
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer:       /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial:       08F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number:          08ED
Signing time:             Sat 24 Jan 2026 19:47:16 +0000
Manifest this update:     Sat 24 Jan 2026 19:47:16 +0000
Manifest next update:     Sat 31 Jan 2026 19:47:16 +0000
Files and hashes:         1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: wmdwiiNrVZ/uhVmM5Z32v78ctJpYzIuztfgsBSI6SCg=)
                          2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Zy35shBaA7kL0uiX8MFYVjG3k67WMwjlOa39yPU2npo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
                          rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2292 (0x8f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
        Validity
            Not Before: Jan 24 19:47:16 2026 GMT
            Not After : Jan 31 19:47:16 2026 GMT
        Subject: CN=697521c4-9e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:ae:52:0c:2e:87:d1:41:bf:4a:08:73:6a:
                    c3:1f:d8:a2:6f:20:81:3c:05:5a:1b:7d:65:2a:77:
                    a8:6d:f9:d2:1d:1c:f5:45:b2:9d:d0:c6:0c:e9:ad:
                    2f:f4:e7:0b:29:85:1e:d5:58:25:00:45:13:32:3f:
                    1f:c9:6b:b6:8a:17:99:0b:37:8d:15:a0:18:46:80:
                    0e:fa:ef:e1:61:e3:d3:68:f6:d2:e2:47:07:d4:9d:
                    7c:ee:49:84:6e:df:d7:d8:57:38:44:3b:3f:08:d7:
                    3a:69:0f:fe:b8:36:2f:27:9e:e3:d3:33:3c:1a:69:
                    26:b4:1b:c4:69:97:0c:4b:37:d7:12:e8:54:f3:53:
                    b2:3d:d4:9b:16:9b:a8:9b:75:70:71:ac:e5:3d:75:
                    9e:ea:0c:5f:67:3b:ba:a8:80:1e:e9:a0:27:06:86:
                    db:af:8c:4e:a9:a0:2c:4f:5f:78:85:ac:ae:db:3f:
                    ac:95:1d:3d:11:90:f1:ef:9a:f8:f0:72:ca:dc:b1:
                    f7:f2:30:4c:e6:75:21:6e:7c:6b:b4:50:42:9f:1b:
                    c8:b5:0b:9e:96:2e:6d:9d:da:d9:5f:7c:61:03:87:
                    44:4a:03:23:ff:12:31:85:8f:d3:ad:a9:4a:49:4b:
                    b1:13:39:cf:33:f6:0f:6b:37:bc:75:58:96:1f:92:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:9C:C4:DC:F2:17:B0:78:A0:48:05:73:AD:39:27:35:F0:16:8A
            X509v3 Authority Key Identifier:
                keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:48:20:a8:dd:26:ab:fd:d4:ab:ce:85:87:b5:bd:4f:09:06:
         a2:06:a0:96:a7:00:4c:43:9f:bd:b2:dc:8e:4c:f4:37:d0:e4:
         f7:18:0c:87:5e:4f:74:42:ab:f5:94:59:23:41:62:8f:a2:be:
         0b:9b:21:37:b9:05:a5:00:f8:01:6d:06:3a:d9:91:30:90:05:
         b3:13:25:03:80:ae:12:20:4d:da:fc:c6:19:3d:5c:89:38:ec:
         21:e4:08:ba:5e:ec:1a:e1:2e:6a:1a:a4:a1:fb:6d:be:e7:3f:
         74:6a:cb:23:47:14:ed:9b:b2:0f:d0:ed:c4:b3:cf:a1:0c:59:
         d2:fd:4e:bc:61:75:84:e6:f5:b8:d5:1a:6a:33:56:58:87:c5:
         41:f1:5b:00:04:57:0f:ba:6c:07:12:9b:d4:ce:d7:4b:be:fe:
         48:60:81:fe:c7:df:75:35:c0:49:9e:e3:aa:fa:a0:c1:42:81:
         a6:aa:c8:34:0a:db:7f:02:7c:24:b6:d8:c0:25:19:6d:5f:30:
         7c:cc:88:e2:f9:11:d4:91:ae:ad:d5:07:f8:83:e8:27:cb:5a:
         07:00:03:18:ef:ce:fe:2f:2e:12:7c:59:3d:22:3e:c0:34:7c:
         c1:12:ca:30:9a:a0:0d:10:cc:c5:06:db:85:c4:a2:ce:dd:bf:
         d3:ca:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:29:13 2026 by rpki-client