This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File:                     AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier:          zeuhs4TRR1pR//4lfuyazRV8QIILisjYpJscfIy5aH8=
Subject key identifier:   83:A2:72:20:0A:B3:5B:8B:C8:2E:46:2F:C9:CF:5D:C1:4E:C7:2C:0C
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer:       /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number:          58
Signing time:             Sun 25 Jan 2026 06:19:11 +0000
Manifest this update:     Sun 25 Jan 2026 06:19:11 +0000
Manifest next update:     Sun 01 Feb 2026 06:19:11 +0000
Files and hashes:         1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: l+ataDndL1LVdmh0Qqwx2E04tRFJkO2bKzz7+AOUFbU=)
                          2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: x6HQ5RDi7bp4WcPcgDw38Yb49M8i1vVS8BiW9zZO4Ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
        Validity
            Not Before: Jan 25 06:19:11 2026 GMT
            Not After : Feb  1 06:19:11 2026 GMT
        Subject: CN=6975b5df-eb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:4a:b7:0d:e8:a7:f1:dc:66:03:b4:72:2a:
                    e8:bf:44:06:e2:99:04:66:c4:bd:ae:5d:30:3a:21:
                    5c:c3:f2:02:63:fe:d3:c7:ea:dd:00:22:27:81:4f:
                    70:f6:49:f1:e7:89:a9:07:c9:2a:76:2a:5a:44:ba:
                    4a:c9:36:28:df:0b:97:77:dd:e4:bf:48:e6:ad:fa:
                    86:87:08:50:30:b2:05:d3:94:ed:5c:53:6b:9b:94:
                    0a:af:8a:f3:e8:bc:66:26:80:0a:da:a0:eb:3b:2a:
                    c3:02:f6:c2:31:32:41:cd:c5:1b:be:9f:85:c1:69:
                    ba:c8:1d:6c:cd:68:20:6e:0b:f6:c7:9b:99:c9:87:
                    89:5c:e4:f1:e2:44:cc:60:e6:27:cf:33:d0:b1:14:
                    51:a0:c6:a0:57:80:8b:20:1d:41:74:b5:bd:b1:f6:
                    bf:ed:16:dd:4e:fc:64:fc:16:3b:bb:56:7d:c0:8a:
                    1a:12:39:5f:00:09:f8:8f:81:33:c6:ed:21:98:68:
                    c5:e5:63:e8:cb:37:d1:01:25:3f:36:1b:0c:45:27:
                    3e:64:cd:89:ae:46:0a:bc:ef:e9:e5:4e:6c:eb:cd:
                    59:f4:c6:6a:b1:8f:7a:54:b2:0b:1c:d2:49:c5:6d:
                    47:a8:1e:03:98:da:c2:c7:d3:39:fb:15:f1:14:48:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:72:20:0A:B3:5B:8B:C8:2E:46:2F:C9:CF:5D:C1:4E:C7:2C:0C
            X509v3 Authority Key Identifier:
                keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:28:7a:bb:85:40:88:6a:8c:19:c7:4f:99:33:9f:5c:9e:
         a0:a7:01:51:18:6b:c3:c6:6b:01:6c:7f:72:ff:1a:78:0b:d0:
         c7:60:21:a5:d3:18:b2:7c:33:f0:6e:a5:f4:7f:83:30:86:f7:
         3e:09:35:a0:0d:d4:34:b1:ec:26:61:c3:ab:3d:76:65:24:db:
         40:59:c1:a6:b2:60:b4:db:50:f5:73:ba:10:f6:51:3f:84:66:
         00:26:73:5d:92:a0:70:96:46:86:6a:f2:7e:b5:db:7d:51:51:
         b4:2d:8f:ed:95:cc:7d:00:37:01:36:04:cb:11:02:f7:43:67:
         6e:50:da:7c:2e:cb:1d:87:1c:11:12:f6:bb:ff:f0:9b:ce:95:
         d7:d5:6c:0e:17:9f:71:23:70:77:d0:5c:b0:51:ea:87:e6:39:
         12:9f:02:d0:52:3b:ec:24:c4:53:1c:e1:80:41:04:08:ba:d3:
         63:0d:56:91:9b:e8:0d:4b:b7:40:ef:c2:ed:f4:b5:22:2c:42:
         c5:f6:c5:d2:23:32:76:1f:9c:c1:d7:49:85:93:8b:74:84:f7:
         31:b1:9e:3a:71:ab:af:f3:a9:75:aa:2c:8a:2f:98:64:0a:ab:
         76:26:64:77:7a:76:a4:b5:53:33:04:7c:ae:d8:83:26:7b:18:
         7c:ad:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:26 2026 by rpki-client