This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File:                     4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier:          bMFrXyX70T8D9VKwg8GRre5NCNTv14S4G+Lvnr/YbWY=
Subject key identifier:   F2:63:52:D0:BB:B6:E3:81:67:C8:B7:DA:92:98:D9:EC:77:15:02:61
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer:       /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial:       0831
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number:          0824
Signing time:             Sat 24 Jan 2026 20:19:26 +0000
Manifest this update:     Sat 24 Jan 2026 20:19:26 +0000
Manifest next update:     Sat 31 Jan 2026 20:19:26 +0000
Files and hashes:         1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: TAg7DckvPVUrZ4jkjk+Z0cV9Rpa8U1n3iBADK9aotPk=)
                          2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: GAAl2FKpxbhzibjhh8Ygaavm0l/cpCR9EhU9gObhxBc=)
                          3: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (hash: Ek05yN0YRoR9U/lLP9FsHciFgpIzpi3ABfcPsCgUG6A=)
                          4: 01F74A7EBFAC11EE89B0182DC4F9AE02.roa (hash: Zz2NVstL8auBq8I64jr8lENGYJp2GsiOwFTr/pV3kVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
        Validity
            Not Before: Jan 24 20:19:26 2026 GMT
            Not After : Jan 31 20:19:26 2026 GMT
        Subject: CN=6975294e-dd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:b6:3c:16:c4:f1:78:24:f6:82:72:06:f1:
                    17:00:3c:9b:bc:7c:3d:1d:4d:1c:43:d5:53:72:2b:
                    75:90:92:2f:4c:b2:b9:59:c6:6e:f9:cc:46:e3:18:
                    a3:d8:dc:7f:49:62:ca:35:49:d1:a5:e2:12:27:5b:
                    bf:94:ef:81:b3:19:de:59:99:7e:76:54:19:35:43:
                    b0:7b:f4:8f:95:48:b9:f0:5a:40:48:87:22:4a:68:
                    34:e0:c8:4a:b4:c5:e4:fb:36:36:7a:a9:7b:8c:11:
                    88:6a:38:40:cc:cf:89:ab:16:a9:2e:c2:ca:d6:ce:
                    c5:bc:4d:5f:9a:d9:29:ea:0e:22:ed:f7:c7:06:58:
                    4e:2f:6a:5a:70:e0:39:89:b1:b9:94:70:9a:22:34:
                    55:cd:58:85:d8:86:0d:88:ed:46:38:02:97:da:de:
                    15:73:49:28:b6:cc:83:a9:c0:06:82:ac:da:58:86:
                    db:16:1c:99:c2:c3:fa:d8:4b:5e:77:4b:e2:22:fc:
                    16:72:2b:ac:5f:17:2c:b1:60:d4:c3:5d:41:0e:39:
                    4a:11:6a:53:0d:fb:9b:36:28:0f:dc:ae:53:06:a0:
                    a5:cb:e1:4a:bf:59:23:ed:25:9d:fb:81:3f:00:61:
                    1c:0b:bd:06:40:d5:18:c8:1c:bc:62:b7:78:0a:66:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:52:D0:BB:B6:E3:81:67:C8:B7:DA:92:98:D9:EC:77:15:02:61
            X509v3 Authority Key Identifier:
                keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2f:16:8d:72:44:dd:70:e7:66:1d:67:df:6f:7a:b5:2d:45:
         4b:cd:cf:b6:15:48:56:a8:2d:68:aa:e7:0b:bd:2a:9f:c8:94:
         26:05:07:81:05:92:30:da:35:fd:9a:ec:07:e0:71:26:db:7a:
         be:ec:53:17:17:f1:31:32:0e:3d:85:00:66:b3:65:51:cc:60:
         0a:46:17:24:7c:6c:79:47:4f:05:f6:b3:3a:08:24:b1:3a:7d:
         48:d5:c3:c7:e2:7f:ac:01:f9:e3:91:86:41:dc:14:b3:3b:85:
         67:67:f3:60:d4:1b:b6:3a:9d:f3:c1:fb:83:34:5d:b1:f4:3d:
         bc:cd:3f:ce:fe:88:9d:76:78:6c:41:b7:83:fd:72:c6:59:b7:
         28:d8:f6:a2:55:d4:a6:4e:ae:65:ef:f9:71:3b:17:29:cb:98:
         39:93:56:c9:b8:60:d9:4a:b4:4f:ff:a9:0b:26:11:d1:47:68:
         72:dd:f8:9a:5c:35:49:e0:ff:36:c9:0b:58:a0:9f:5d:fd:64:
         9e:51:63:4a:a4:d0:6c:25:93:a7:7e:a7:41:f3:04:b4:10:92:
         76:87:a4:d1:49:a4:03:b5:97:6d:9e:0a:e2:88:e3:aa:31:80:
         e2:c4:b8:62:3e:11:a0:6e:10:a8:4f:9a:56:b4:5c:2b:56:b8:
         a5:7d:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:17 2026 by rpki-client