This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
File:                     sRoiVto9XbOPPn6bWct0YsnnsqY.mft (raw, json)
Hash identifier:          /cvEnwuCvLsV8HrvuVYxEj4Fg2tvGugfICN0Acyc78U=
Subject key identifier:   BE:03:ED:5F:F9:4E:E4:CC:43:90:26:2C:5A:41:ED:86:1D:1C:A1:D1
Authority key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
Certificate issuer:       /CN=A91CCCF4/serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
Manifest number:          08
Signing time:             Sun 25 Jan 2026 07:08:59 +0000
Manifest this update:     Sun 25 Jan 2026 07:08:58 +0000
Manifest next update:     Sun 01 Feb 2026 07:08:58 +0000
Files and hashes:         1: sRoiVto9XbOPPn6bWct0YsnnsqY.crl (hash: d2lK6cJrUZHAdYobYIXTfB/YYrvObl9RDbn4Waa03Pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
        Validity
            Not Before: Jan 25 07:08:58 2026 GMT
            Not After : Feb  1 07:08:58 2026 GMT
        Subject: CN=6975c18b-cda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:c2:32:e1:53:73:57:14:ee:6c:ef:93:bf:
                    12:4f:43:09:83:d5:0e:27:a6:e9:d1:5c:43:c3:00:
                    be:20:fe:bc:04:86:67:53:ec:c1:80:32:c7:97:11:
                    a0:e1:d0:b7:a3:af:74:37:8e:8f:6c:96:90:36:77:
                    e0:65:49:4a:9d:83:5a:59:f0:b2:49:39:f9:cb:74:
                    a9:14:e6:01:36:08:3c:a0:50:b4:d6:14:a4:1f:d3:
                    ab:4f:99:fa:81:06:89:d2:33:ee:35:b8:ed:ba:ee:
                    fa:ac:2a:d7:f7:05:0a:83:15:dc:b5:f1:5e:03:f7:
                    6a:2d:f4:05:78:82:78:da:eb:37:b5:58:fb:40:4c:
                    e9:35:c7:da:98:11:05:16:65:a8:a9:88:d3:05:7e:
                    7a:e6:59:35:b7:bb:92:7c:5b:57:d4:6e:5a:68:bc:
                    29:ec:87:de:c2:3f:f2:37:e3:24:df:ae:96:31:ad:
                    93:6c:d3:91:8d:ae:17:2f:6b:c7:55:46:82:d2:bf:
                    d2:37:93:b7:3a:e4:ec:0a:12:3e:e6:7e:9b:75:a0:
                    c9:75:8f:ca:ad:ec:f5:2d:ec:0b:2a:5f:79:f6:22:
                    07:7a:56:01:b5:8e:64:fd:6f:46:1c:26:d9:a6:23:
                    c1:cb:ee:16:43:b9:3d:ee:b0:5f:30:48:f8:f3:2e:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:ED:5F:F9:4E:E4:CC:43:90:26:2C:5A:41:ED:86:1D:1C:A1:D1
            X509v3 Authority Key Identifier:
                keyid:B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:b1:4f:ce:c0:7e:18:d5:eb:24:59:41:51:50:28:38:05:
         7c:6c:61:32:50:d0:6f:5b:5b:f8:7c:21:85:a2:ef:f2:40:84:
         fc:2e:b6:3f:e0:52:67:cd:45:98:12:56:38:c3:22:4e:40:8b:
         82:55:d9:55:f1:9f:37:d4:9c:80:b8:6b:df:1d:18:ae:70:46:
         e4:70:05:e8:d5:25:2b:a2:b6:34:f0:76:7c:6b:c6:82:8f:1d:
         2e:71:9e:45:81:4d:62:c3:75:e0:4f:c5:75:42:8f:0e:73:09:
         22:11:4e:57:39:01:96:b0:9b:8d:a1:05:7e:eb:b8:df:6b:a8:
         47:fd:71:88:33:9c:da:4b:e2:59:a5:69:fa:2c:f4:c1:1a:ad:
         25:a7:b2:ea:fa:b7:c1:5f:e7:03:de:d1:55:bb:19:4f:9a:ba:
         3a:fc:19:59:a6:07:3c:44:49:2f:75:33:bc:73:44:7f:e5:18:
         65:0b:87:cb:76:48:51:be:6f:8d:78:87:65:5a:34:b6:c3:19:
         c7:86:19:a3:59:ec:81:cc:fe:97:88:e3:3e:6a:e6:30:1e:6d:
         09:ec:32:d2:f3:02:66:92:97:b7:70:df:5d:2b:e1:5d:1b:6e:
         ac:3a:fc:aa:6d:bd:f6:74:b8:06:a2:7b:7d:d6:fa:5e:aa:bc:
         21:d0:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:20 2026 by rpki-client