This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
File:                     SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json)
Hash identifier:          vHA+lPN7VwkUDHKzbiY/JfbcbnmpGZEhWgknRSXT9uk=
Subject key identifier:   6A:BC:86:60:3E:F0:6B:08:7F:61:BA:2D:02:53:EE:72:60:FA:F4:4E
Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24
Certificate issuer:       /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
Manifest number:          04E2
Signing time:             Sat 24 Jan 2026 23:01:15 +0000
Manifest this update:     Sat 24 Jan 2026 23:01:14 +0000
Manifest next update:     Sat 31 Jan 2026 23:01:14 +0000
Files and hashes:         1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: CSXvR86koYnf+qgSPyBXbW+K/2bbhWM3EY3r//L+SpM=)
                          2: 05F05A76D07B11F08779390AC4F9AE02.roa (hash: SKDCF5+Rd2qukuCq1g9abzS9N2w0YYh01qL+F+bWIjY=)
                          3: 178FCB6AE8AC11F0B6F09D7D576F56BC.roa (hash: ZzJpUKtICRqREKaG/iDLM+4AxhvNZvZ/7pGK89GC6Zw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEF20, serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24
        Validity
            Not Before: Jan 24 23:01:14 2026 GMT
            Not After : Jan 31 23:01:14 2026 GMT
        Subject: CN=69754f3a-0514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:01:72:1a:e3:af:8c:a9:0d:5a:26:b2:84:
                    b7:32:1d:a0:d4:10:1d:21:9d:bc:09:54:97:20:a1:
                    64:84:81:5e:e1:d5:d1:f7:86:97:e6:8e:f0:f3:ac:
                    e4:13:f6:3e:fa:ca:ab:2a:2a:5a:77:7f:14:c0:91:
                    ed:09:e8:94:74:95:16:71:2f:33:ef:cb:a4:af:cd:
                    91:9c:79:b3:4f:24:30:cb:46:9b:53:40:27:36:f4:
                    e1:e8:ea:cc:a6:48:b2:65:19:ca:86:7d:f9:a2:c3:
                    d9:30:10:c4:69:2e:4a:1a:ba:1d:2c:ad:f6:07:fd:
                    19:04:22:7e:26:bd:08:df:b1:54:79:12:18:dc:de:
                    c3:72:20:13:90:54:81:d2:fd:ca:09:94:5b:2e:f6:
                    8e:f4:cf:c9:f1:5a:de:2a:55:94:a2:c6:10:23:95:
                    02:78:f0:53:86:a3:3a:5f:13:92:02:d5:0e:1f:9e:
                    88:94:69:55:5c:03:96:79:96:b8:e0:51:cf:58:95:
                    af:98:38:73:94:4f:0a:17:a4:9d:1b:b5:d5:18:1e:
                    31:f3:27:ef:f6:71:35:18:57:ae:75:84:4b:dd:6d:
                    bd:50:c5:bb:b3:9e:13:80:9e:a6:5b:af:b6:b4:15:
                    64:91:db:59:8e:8c:5c:5c:58:7b:8e:10:60:a2:55:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BC:86:60:3E:F0:6B:08:7F:61:BA:2D:02:53:EE:72:60:FA:F4:4E
            X509v3 Authority Key Identifier:
                keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:c7:f4:d1:d1:58:8e:d2:f1:e5:ab:15:cf:5e:dc:02:c4:
         be:f3:34:3d:cb:ca:73:02:5d:27:e4:70:6c:51:35:9a:48:f2:
         b4:f6:16:4d:ae:49:a9:0c:38:81:b5:a3:80:04:d4:31:0b:1e:
         bc:33:5d:43:1f:c9:60:f1:2b:68:22:4d:01:52:12:fc:1a:cf:
         1a:cb:d3:74:d4:73:7a:e8:0c:80:e6:d0:53:5b:d5:fc:54:79:
         36:12:9d:ad:1f:1f:53:f1:8e:4a:71:10:f4:53:40:3c:6a:aa:
         54:8d:ec:dd:a3:e0:ed:16:86:15:e9:d7:13:59:af:61:4b:be:
         5a:d9:32:e5:64:3d:09:f5:9d:b2:88:60:60:8b:18:8b:9e:a0:
         e4:5a:00:25:84:f5:d6:c0:0d:6c:41:80:04:51:f4:0c:e8:07:
         dc:d2:b1:9c:48:3f:c4:9d:36:fc:f1:21:a4:f0:f3:e8:0c:76:
         54:8b:11:0e:52:24:e4:65:6b:b3:e6:42:f2:a4:21:6f:42:29:
         0f:3f:51:1f:c2:27:e4:ab:91:53:7c:1f:db:23:5a:b2:a7:14:
         05:ad:81:af:6f:2b:6b:e0:84:d7:d1:e8:ed:e1:8c:de:0d:9f:
         fd:6d:b0:0c:f0:95:02:3e:bf:a9:79:6b:32:aa:db:92:62:bd:
         a3:02:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:10 2026 by rpki-client