This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File:                     A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier:          k4dLTS1EH+Zbv6gsy0ICBaiBq0RqN3n8lpyjnWyTw8k=
Subject key identifier:   18:5E:E9:F0:4D:50:CC:EE:F2:C8:02:6A:E4:8E:91:40:FA:3F:A2:FD
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer:       /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial:       11B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number:          0F82
Signing time:             Sat 24 Jan 2026 17:40:39 +0000
Manifest this update:     Sat 24 Jan 2026 17:40:39 +0000
Manifest next update:     Sat 31 Jan 2026 17:40:39 +0000
Files and hashes:         1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: y2pW9lCeywJpK5kUK5U+t/POQA/dJ7VWZzDu6rx8Myk=)
                          2: 942F8E2CCB7811F08DD67782C4F9AE02.roa (hash: JiSs/MyyKf91SvEzW9GyCAyecuNfv95KJI9TELzwxYg=)
                          3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: j7XNm5DKP0Bl1Qb4lNAiZR4S+roC1NEkMzkbumJCusw=)
                          4: 161D8022A24611EF966F6286C4F9AE02.roa (hash: TBlZiuTwGUAL/S4SWJ+uMXyA9TxQ/N4TkgdjoflSU1k=)
                          5: F13EB484826311F092F0144AC4F9AE02.roa (hash: hFdXienlPfXUdSuyCSKl58CBIVKiBESIL+SZ50QqFHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4535 (0x11b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
        Validity
            Not Before: Jan 24 17:40:39 2026 GMT
            Not After : Jan 31 17:40:39 2026 GMT
        Subject: CN=69750417-86f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:58:8e:d4:63:f4:d7:bd:c1:16:5a:f0:89:
                    e0:4a:bc:81:12:ea:9c:cb:44:92:c7:31:7d:cd:98:
                    0a:d4:a0:a7:92:b1:3d:63:23:c7:a8:f0:1c:c9:e6:
                    a8:27:9b:15:46:87:0e:e6:5d:fb:36:ef:78:e8:70:
                    39:a8:71:b7:7d:a5:8d:50:e2:81:25:b3:88:ad:3a:
                    77:27:fa:ea:a2:dd:c9:3a:7d:20:79:be:16:a4:26:
                    9a:d3:96:47:b1:c5:a6:bc:66:95:ab:e2:a4:aa:f4:
                    65:10:3e:77:63:b6:14:93:57:69:94:37:94:50:ea:
                    06:de:ce:eb:e4:d8:9b:22:f8:51:8c:c1:9b:df:46:
                    4d:b2:f3:ed:5b:36:45:0b:83:c5:1b:bf:15:6d:6f:
                    9c:88:30:63:34:9a:a5:39:5f:fc:44:d9:ec:9e:68:
                    86:d6:9a:b2:da:26:28:04:02:38:7e:98:27:2f:db:
                    0c:b7:51:33:2c:bf:40:d1:d2:2c:d7:9e:8b:5b:c8:
                    b0:41:98:bb:0f:b4:83:84:54:85:17:ef:ff:fd:0c:
                    e6:67:36:f7:15:b2:66:7d:55:79:38:40:17:a1:5c:
                    90:4c:3c:e5:98:47:95:94:ee:c3:4f:6e:1d:81:86:
                    5b:c7:db:16:af:6f:b5:ea:da:e2:19:70:82:a3:c5:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5E:E9:F0:4D:50:CC:EE:F2:C8:02:6A:E4:8E:91:40:FA:3F:A2:FD
            X509v3 Authority Key Identifier:
                keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:40:88:ae:eb:8d:9b:88:64:b0:a0:c0:92:0f:58:d4:76:05:
         3c:21:d0:02:a1:9f:53:3c:46:58:19:81:e6:74:61:67:f8:d4:
         ec:96:78:24:1f:d8:14:f7:34:a4:de:21:79:eb:2d:e0:de:3c:
         8f:59:5f:3f:6b:ad:8e:37:be:38:31:c7:af:a7:9e:66:ee:7f:
         31:41:2a:0b:75:a0:70:c9:5f:22:b8:75:cf:5d:14:f2:f1:e9:
         82:1f:e2:50:83:bf:97:d2:9e:6c:a6:9e:93:8e:4b:ea:36:32:
         5d:c1:85:97:a8:57:ff:cd:2f:db:3f:fe:eb:21:4f:cc:c8:bb:
         63:38:8f:61:03:7b:de:43:be:55:0d:7a:23:80:25:09:15:4f:
         b0:fa:d6:11:ef:9c:00:2a:0b:a4:0f:08:e4:f3:ba:5a:99:f4:
         e5:8b:c4:22:a8:3d:d3:9a:fd:48:ba:44:b2:15:ea:ed:c9:50:
         77:0b:9b:00:33:af:a9:72:81:8f:e2:b6:30:7e:28:a7:82:92:
         8c:c7:b8:4c:8c:87:97:6d:8b:c1:a2:39:a2:32:d4:69:d1:6d:
         48:4f:8b:c8:36:57:6a:d3:ed:63:ac:96:75:ee:d5:9c:fe:3c:
         37:7e:86:25:7c:52:e3:32:1e:6a:79:97:64:64:49:14:11:3f:
         0d:40:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:39 2026 by rpki-client