This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
File:                     pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json)
Hash identifier:          M90GqqtuaL6RRaUwtLidHTk3QWkZ15gJBdoqRxUEKO8=
Subject key identifier:   AB:95:29:B2:FC:9E:9A:BA:94:1B:C2:20:DB:51:41:13:D7:F0:26:09
Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
Certificate issuer:       /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
Manifest number:          01E9
Signing time:             Sun 25 Jan 2026 01:58:50 +0000
Manifest this update:     Sun 25 Jan 2026 01:58:49 +0000
Manifest next update:     Sun 01 Feb 2026 01:58:49 +0000
Files and hashes:         1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: PAmYo4uwhlfah+18iTxBTxzfFSUrhWhvMBuwYlvoGro=)
                          2: 935947E8234B11F0B6DF721FC4F9AE02.roa (hash: wUur8hr6UOENzZrUofd56u0ua+u6fpIC9vNGe/0Q0+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD5B5, serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
        Validity
            Not Before: Jan 25 01:58:49 2026 GMT
            Not After : Feb  1 01:58:49 2026 GMT
        Subject: CN=697578da-ff92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8f:c8:1a:a9:00:91:cb:c3:57:19:89:df:3a:
                    f6:f7:a0:e9:83:fb:2e:ca:22:e2:b3:a9:b0:18:13:
                    fb:1f:c2:87:01:c4:53:f3:f5:4e:e7:2a:0c:e6:93:
                    d2:d7:d4:65:ad:71:db:63:13:12:8c:b0:d5:b7:a3:
                    a1:14:4e:5a:e9:97:33:5c:ff:b9:5d:5b:18:0a:ae:
                    74:a3:30:fb:db:67:d7:dc:ed:38:c7:73:32:7e:3e:
                    d7:71:be:8d:27:24:45:a6:da:a5:48:98:e9:da:24:
                    32:4c:06:f5:af:4c:d6:f5:c0:ba:56:55:30:b9:e2:
                    ca:64:da:82:ba:67:24:db:d2:45:4f:21:84:ca:87:
                    3d:7f:47:e6:53:e9:02:69:99:9a:69:24:0f:f8:42:
                    f8:55:3f:73:cb:54:30:c4:1c:98:ad:d2:43:fb:28:
                    35:30:7c:e6:69:e9:a0:2c:1c:fe:07:a2:3e:1e:bb:
                    94:e8:ff:38:88:5f:c6:23:c4:30:d2:59:34:fd:99:
                    28:0a:2c:e2:1e:fd:ca:c0:29:85:77:0b:bd:6e:c5:
                    11:04:d1:30:84:b5:38:8d:e9:da:3e:8c:46:34:33:
                    f2:8d:b6:d4:02:fc:c8:68:3c:71:35:09:73:3e:6e:
                    e5:fd:11:10:51:ac:96:8b:e2:63:d8:a3:d4:c9:f3:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:29:B2:FC:9E:9A:BA:94:1B:C2:20:DB:51:41:13:D7:F0:26:09
            X509v3 Authority Key Identifier:
                keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:6e:02:6a:d7:03:c8:50:74:7d:4e:e5:69:74:f9:05:c7:
         37:c2:52:93:22:ca:d5:14:5e:eb:1f:ca:40:60:9d:94:70:61:
         ed:c3:b7:44:fd:92:09:19:14:be:8b:b9:7d:d2:e1:fa:3e:58:
         fd:25:25:47:30:5f:ee:6c:57:a5:c2:a0:e5:77:36:4b:c2:02:
         50:6a:5d:fb:df:d9:c2:a0:83:dd:ad:1b:41:f7:19:5a:b5:57:
         e3:35:e5:c5:73:3e:c3:23:32:40:00:fb:7b:2a:62:bb:46:19:
         59:57:f3:db:0e:ba:54:24:df:2b:13:78:4e:44:17:04:eb:4e:
         15:01:d8:9d:be:89:8a:2e:b5:a3:af:f8:f1:ec:27:8e:11:cc:
         e9:2d:6f:05:35:af:ee:9c:27:fc:a2:ca:ad:95:23:95:a3:03:
         62:c0:32:5a:93:94:db:61:1f:5e:08:99:a6:14:27:bf:a1:bd:
         7f:e6:96:3d:61:30:09:4f:c7:37:80:06:f8:0a:80:36:c5:ef:
         24:43:2b:6b:2f:49:f9:04:7d:6c:c8:f0:f6:92:72:3d:1a:3d:
         f0:af:d0:b6:a1:07:42:8e:fd:de:5a:1f:4c:60:f3:e7:4b:94:
         06:dc:a2:94:d1:96:5d:bf:fe:cf:96:c3:b8:9f:22:75:3a:a1:
         a3:ca:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:57 2026 by rpki-client