This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
File:                     Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json)
Hash identifier:          4Fc6MuKhenWAlg4fI7XoyBYzuD92zMh/bkSNaomrTCA=
Subject key identifier:   9C:00:44:C4:53:26:2D:FD:53:E0:6E:B2:48:70:7D:1A:01:7D:B5:FE
Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
Certificate issuer:       /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
Manifest number:          040C
Signing time:             Sat 24 Jan 2026 23:37:12 +0000
Manifest this update:     Sat 24 Jan 2026 23:37:11 +0000
Manifest next update:     Sat 31 Jan 2026 23:37:11 +0000
Files and hashes:         1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: XlDOKulUPZlZ3smpQSnV0gbAWK8YycfJYmONpruePZI=)
                          2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: DozQJ1dHmAg3g97IuJSuIhOMEdC6MQhv4ugGVIX2pIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
        Validity
            Not Before: Jan 24 23:37:11 2026 GMT
            Not After : Jan 31 23:37:11 2026 GMT
        Subject: CN=697557a7-a57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:ea:1b:fa:a4:7e:13:07:6a:2e:f1:a7:5d:
                    66:53:52:59:03:65:41:69:07:4f:ff:0a:0a:74:1c:
                    26:58:51:37:a9:8d:5d:cb:95:2a:fa:5c:a2:3b:9f:
                    59:a4:86:cc:09:c2:42:3f:b9:a5:57:ed:7c:fc:4c:
                    22:23:7d:7b:e9:4e:55:c6:de:18:d1:8f:0a:b5:1a:
                    06:97:d6:92:f1:73:0f:56:73:26:91:be:d5:12:b0:
                    88:c3:11:52:64:01:35:12:82:d9:04:ff:e1:2c:9c:
                    47:31:07:1b:cf:75:66:c3:41:5e:3a:b5:71:34:8d:
                    57:58:17:53:63:74:68:38:74:e1:10:82:e9:c2:81:
                    2a:92:0e:dd:ab:16:cd:a9:67:b7:be:b8:d3:e5:da:
                    09:e6:8d:1c:ea:d2:a2:8e:28:b7:84:15:3a:1d:bb:
                    e3:19:93:22:c4:10:27:6e:bf:28:d0:b8:97:3d:8f:
                    96:ca:bc:12:9d:15:dc:c1:d3:7f:94:59:81:e7:03:
                    68:5e:7d:8e:88:0d:db:89:5c:21:a4:c1:26:c7:11:
                    b0:c2:fe:07:c0:f4:78:bd:d8:9e:87:b9:dd:00:60:
                    9b:fc:f8:c2:fb:33:b8:35:4a:15:77:d9:84:36:93:
                    f3:e4:f6:8d:b6:bc:82:b3:7f:c3:aa:d2:0a:8a:d3:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:00:44:C4:53:26:2D:FD:53:E0:6E:B2:48:70:7D:1A:01:7D:B5:FE
            X509v3 Authority Key Identifier:
                keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:eb:49:6d:9c:11:2d:44:19:00:b0:62:19:fe:6e:e4:2c:71:
         ac:f6:2a:20:1a:b2:41:b2:3f:01:14:d1:79:33:f2:bd:4f:33:
         16:52:74:e2:1d:8d:d8:c8:d0:0d:ac:16:0d:64:0f:1c:eb:df:
         53:8b:70:da:ce:1e:d0:5d:73:bf:7c:bf:fd:81:4b:d7:26:d6:
         06:dc:e4:bd:59:0e:2d:1a:d6:07:b7:cd:8e:48:21:d7:88:a1:
         c8:3a:5d:df:b7:72:eb:f0:b3:45:54:58:fb:50:60:7e:5d:18:
         63:3d:38:fa:de:38:b4:ce:b4:ee:22:79:9d:c6:08:29:0c:87:
         08:cd:0c:62:36:89:0f:e5:0a:4b:b4:49:58:bd:eb:44:64:00:
         17:43:67:7b:61:81:80:fb:1d:7a:0b:81:b7:46:3d:99:40:96:
         f0:52:25:53:08:32:85:19:3e:87:73:bf:9e:d1:40:67:2a:0b:
         d4:c6:01:ad:91:2a:d0:65:80:6e:bf:bf:6b:d7:cc:06:66:e1:
         b4:91:94:98:f1:e6:91:bf:f0:af:e9:be:75:85:f5:2f:a5:2a:
         48:83:af:04:39:a2:84:69:73:0c:b8:70:8a:0f:5d:c9:92:6b:
         ab:03:d4:5c:c4:b8:b0:b3:82:32:80:83:99:d3:af:23:65:98:
         64:76:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:34 2026 by rpki-client