This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File:                     cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier:          BzV7O7OtshO7TP1gjDExI5yCgdH8CYpPOqvVLytcHGc=
Subject key identifier:   05:96:7B:24:86:5F:E5:B3:9C:36:86:57:D6:6B:32:98:18:29:77:67
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer:       /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial:       0F80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number:          0F6F
Signing time:             Sat 24 Jan 2026 17:15:46 +0000
Manifest this update:     Sat 24 Jan 2026 17:15:46 +0000
Manifest next update:     Sat 31 Jan 2026 17:15:46 +0000
Files and hashes:         1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: jtEfO4NqzE63THN+v8dmfQjZBPSiJTjz6bRDDlSKbZs=)
                          2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
                          rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3968 (0xf80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
        Validity
            Not Before: Jan 24 17:15:46 2026 GMT
            Not After : Jan 31 17:15:46 2026 GMT
        Subject: CN=6974fe42-0bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:85:3d:4f:d8:3a:12:04:6c:d2:2e:93:2a:
                    04:7a:5c:1d:15:ea:3a:68:5a:ad:83:78:b4:d1:ed:
                    78:91:d4:6f:fd:60:74:d9:ac:d9:da:7b:84:55:22:
                    11:76:b1:8a:8a:9a:0d:7a:ea:43:30:cd:40:6d:0c:
                    83:8e:48:52:02:60:76:0c:a9:f1:46:f5:3e:d0:63:
                    df:4c:2c:e0:67:63:56:90:fe:14:8e:00:45:86:7c:
                    b7:09:16:be:4f:7d:3f:2b:b9:cc:97:35:b2:af:47:
                    98:23:fb:d2:7e:0c:a4:10:86:e5:93:33:d2:80:5f:
                    35:45:00:a4:e5:a6:db:60:3e:91:f5:cb:b6:07:0e:
                    7c:70:78:81:d8:22:6e:ab:b5:96:5d:64:18:61:1b:
                    e6:b6:1f:96:c1:a2:05:0d:19:4f:3e:b7:26:11:05:
                    4b:37:4e:f7:7b:d4:02:b8:1b:3a:0e:ec:50:19:ff:
                    df:f8:a7:f1:bc:db:65:04:f2:4c:65:d2:45:1b:bb:
                    d0:7e:f0:af:21:78:92:e5:32:ce:05:db:ca:89:5c:
                    25:f7:9e:6c:0e:14:35:e5:4d:d8:d9:a7:43:4a:7c:
                    ce:4b:ce:ed:76:71:31:db:5d:3f:ae:52:bf:44:46:
                    f7:fc:42:2f:1c:e7:12:7f:ab:05:87:9f:58:fe:cd:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:96:7B:24:86:5F:E5:B3:9C:36:86:57:D6:6B:32:98:18:29:77:67
            X509v3 Authority Key Identifier:
                keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:8b:47:d1:57:0c:c2:38:d8:e8:73:0d:54:f5:99:2f:d8:27:
         8b:e0:4b:7f:95:dc:b9:b8:40:38:4c:8c:6b:90:4d:cc:69:a4:
         64:88:46:b7:d5:1f:9d:74:1f:20:0b:ed:61:5b:58:99:6f:73:
         23:ef:ba:b5:b8:66:e2:ed:bd:ca:f5:6e:06:87:6a:76:9b:8d:
         43:99:d8:be:a2:56:d3:48:a7:dd:6d:8b:86:93:8b:46:1d:4b:
         ae:f8:a5:e0:ec:3e:81:4c:df:fa:39:1d:c8:6e:7f:1a:ff:b0:
         07:ef:ad:c9:bd:c0:d2:2d:ba:e2:08:4b:56:aa:13:94:6d:3e:
         d9:bd:f6:fc:c7:04:a2:fc:ae:30:47:4a:7c:b8:a4:2c:0e:2e:
         ff:05:61:e3:14:3d:0a:53:c4:46:0f:f7:28:de:68:aa:d6:26:
         bb:9a:0a:9f:1e:09:23:ee:9b:c3:15:42:5c:a6:ab:ae:46:c1:
         0b:35:ea:97:ae:c2:11:05:32:94:b5:e9:43:e3:66:33:72:97:
         17:22:d3:3f:b0:5e:06:db:3d:6e:84:69:98:c2:1b:84:c3:e9:
         73:17:2b:f4:98:24:e7:77:b7:12:b9:b9:c8:3c:9b:f0:1f:b6:
         7d:a9:b7:42:dd:9c:2f:6b:56:0d:df:de:53:ae:f8:c2:38:95:
         8b:cc:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:17 2026 by rpki-client