This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
File:                     5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json)
Hash identifier:          K/VXzKkr9swm+R0Qlnz4PYmOAKmNdB/7GHwTbHXrkcE=
Subject key identifier:   EA:F6:D6:99:58:5D:25:3D:17:98:8B:A8:59:0B:51:7E:10:E5:CC:95
Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA
Certificate issuer:       /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
Manifest number:          011C
Signing time:             Sun 25 Jan 2026 04:00:12 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:11 +0000
Manifest next update:     Sun 01 Feb 2026 04:00:11 +0000
Files and hashes:         1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: 92o9SqWHcWF1jNlG33KvO/vm8V7BpT7L+PpQfwlUM1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
        Validity
            Not Before: Jan 25 04:00:11 2026 GMT
            Not After : Feb  1 04:00:11 2026 GMT
        Subject: CN=6975954c-f547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:25:51:b5:35:01:56:39:6c:b6:cc:03:dd:
                    fd:8c:f8:b7:52:dc:3e:a6:82:af:f4:90:57:5c:b7:
                    56:85:b3:f4:f8:07:9b:90:b1:3c:97:56:23:9f:04:
                    b8:e4:0f:a3:4f:1e:b2:53:34:c8:d4:b8:fe:6f:b9:
                    ff:49:fa:91:b1:f6:69:11:34:f0:67:08:f9:da:2a:
                    31:55:2b:50:ff:e7:db:9f:53:09:c6:61:11:82:cb:
                    fc:22:93:f3:d2:d5:6a:33:c4:b1:f0:b9:f1:7a:a4:
                    8e:61:03:a2:a7:58:ec:a4:33:8e:4c:24:d4:d1:75:
                    30:19:e5:a1:3b:f8:77:40:cf:e1:b4:5e:89:01:b9:
                    9a:ed:de:21:7a:3b:be:32:e2:0b:55:a3:e8:19:9b:
                    d8:32:50:23:26:7f:c7:88:b9:84:fb:12:64:7f:e5:
                    61:a6:87:83:d3:13:6a:d8:8d:41:21:66:b4:0f:2f:
                    6d:c2:21:58:6d:7c:9f:9b:e7:26:ad:9e:bb:7f:49:
                    ae:99:fb:df:82:4e:9e:93:60:e7:42:ca:8c:33:62:
                    6a:a6:2c:1e:c3:27:f6:4d:50:71:14:e2:ce:97:c3:
                    e6:db:3c:d9:4c:16:f1:7a:fa:94:af:3c:23:16:0c:
                    35:c8:18:da:c3:41:5d:88:38:7b:c6:14:0c:13:c9:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F6:D6:99:58:5D:25:3D:17:98:8B:A8:59:0B:51:7E:10:E5:CC:95
            X509v3 Authority Key Identifier:
                keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:1e:1d:9d:6b:3e:6d:89:75:36:47:02:ad:3d:b6:f7:2a:
         26:33:c8:62:70:65:be:80:f5:87:be:c6:b2:75:f0:42:25:20:
         67:bf:ab:0b:72:1a:9b:72:40:ae:94:cf:d9:4b:6a:81:12:d9:
         2b:e1:44:7e:29:1f:0b:21:de:2d:f1:cc:ee:30:af:98:fa:52:
         f9:89:d1:cb:c9:2a:60:c5:c5:86:39:07:06:d6:b5:f8:23:69:
         30:e4:32:c0:d1:de:76:d8:4b:31:e9:1e:f3:47:af:92:5f:9a:
         11:f6:66:02:83:eb:cc:bd:08:50:27:c0:3f:24:3a:95:9d:21:
         36:57:69:8f:bb:d8:55:34:a2:c6:66:19:98:cd:d6:14:8f:65:
         79:ee:af:7c:26:10:5f:93:36:d7:be:eb:a1:92:12:d7:29:a6:
         99:d7:23:5b:fb:57:c5:8c:54:1d:76:64:b3:1e:42:e1:a9:39:
         72:b2:6b:1d:df:59:17:36:2e:08:6d:89:43:60:1c:3c:14:9e:
         81:bb:e6:5c:8d:31:e9:fd:3d:1f:3b:aa:b7:61:8b:2a:1f:94:
         be:d0:74:af:e0:1e:e0:18:23:40:60:30:58:f2:32:d8:62:4b:
         3f:84:42:88:fc:d1:d8:35:94:e1:f1:1c:8a:ed:a4:8f:36:aa:
         e4:71:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:38:40 2026 by rpki-client