This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
File:                     SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft (raw, json)
Hash identifier:          iEEWIAb/ACx+DxM4y3KRVfO5kKt9QCx4Ak/SjWGSELo=
Subject key identifier:   A9:F1:5F:1D:A7:A4:45:33:06:46:8F:FB:44:63:96:42:0F:6B:B4:12
Authority key identifier: 48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29
Certificate issuer:       /CN=A91DA389/serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
Certificate serial:       0214
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
Manifest number:          020F
Signing time:             Sun 25 Jan 2026 01:37:25 +0000
Manifest this update:     Sun 25 Jan 2026 01:37:25 +0000
Manifest next update:     Sun 01 Feb 2026 01:37:25 +0000
Files and hashes:         1: SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl (hash: UQqJuoshAuwacGEg9zxwab+Q/qtQW0zj0y0TudM9rDY=)
                          2: 4F467C58D3AA11ED91B0C532C4F9AE02.roa (hash: tmK0iDwld+e+aTJhpXj4A3zlzhe3/irDCWSZWb2ca9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl
                          rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA389, serialNumber=48F50E16B8305AA2C756D21C8F0FD509338A5C29
        Validity
            Not Before: Jan 25 01:37:25 2026 GMT
            Not After : Feb  1 01:37:25 2026 GMT
        Subject: CN=697573d5-2270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:69:13:13:fa:6e:ed:b8:95:dc:d6:bd:a1:
                    5a:d7:09:00:b8:2e:92:ec:ba:ce:4b:06:dc:4e:5d:
                    9d:ce:aa:db:03:7f:c4:df:6d:97:ce:0e:22:61:28:
                    f3:ec:7b:1d:19:8f:50:bc:c1:19:c9:ce:e8:b9:79:
                    f9:dd:0a:33:ff:07:72:1d:45:85:de:6c:aa:8b:b9:
                    fb:d0:67:27:8b:59:22:01:37:0b:f1:aa:65:77:19:
                    8d:cc:7e:67:c4:99:26:ec:88:b9:50:43:78:00:73:
                    46:eb:0c:70:60:bf:61:d0:51:b2:5c:fa:6a:e0:d8:
                    70:ca:55:30:4c:1e:8c:c7:38:bd:15:7f:03:19:7b:
                    88:03:a7:10:92:48:fc:80:e9:ca:7e:73:96:e6:6a:
                    37:9e:eb:a1:df:8c:13:71:fc:1c:80:ae:d7:ce:39:
                    26:79:fc:bd:1a:38:6b:73:ab:cd:12:1e:db:fc:08:
                    5f:8f:ca:dc:0e:53:cb:d7:5e:6e:00:85:af:39:22:
                    dc:37:10:56:ca:5c:ff:d3:2b:1f:8f:a6:2d:81:95:
                    a6:c4:ea:ea:bc:6e:12:ba:9b:04:89:c1:cc:74:c9:
                    72:13:7c:37:cc:17:54:fc:90:57:12:3e:e7:6a:f6:
                    dd:ef:2b:81:f6:8a:a3:9e:b7:de:06:e4:00:d9:f9:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F1:5F:1D:A7:A4:45:33:06:46:8F:FB:44:63:96:42:0F:6B:B4:12
            X509v3 Authority Key Identifier:
                keyid:48:F5:0E:16:B8:30:5A:A2:C7:56:D2:1C:8F:0F:D5:09:33:8A:5C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPUOFrgwWqLHVtIcjw_VCTOKXCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA389/B2170B74D3A311ED8806AC11C4F9AE02/SPUOFrgwWqLHVtIcjw_VCTOKXCk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b3:fa:9c:36:b4:ad:90:33:d1:c8:11:0c:68:5d:1c:e5:35:
         4c:be:b5:4e:fa:0b:60:3d:18:44:22:c6:c9:27:df:29:88:8a:
         4e:65:29:df:6a:8a:18:58:4d:9e:22:6b:7a:d7:8f:f0:b0:35:
         9d:cb:8b:3a:33:ba:a1:a8:44:ed:b5:5a:11:92:1b:45:da:f7:
         50:85:1b:a5:9e:a1:59:13:f4:1b:cd:79:52:02:72:47:37:d2:
         94:c2:2f:99:19:1f:73:34:29:09:2e:ed:9c:40:03:3a:48:44:
         4b:64:e6:68:26:15:3c:e0:f4:81:b9:f5:a0:9d:de:57:92:94:
         d8:a9:c3:7c:0c:96:8c:09:ba:a2:41:0b:ee:3a:80:32:9e:c7:
         1f:2e:02:fb:6c:d5:41:7a:f6:10:ca:0b:a8:87:8c:78:c8:1e:
         91:82:52:9e:2c:2f:a6:e9:31:b7:ac:4e:27:1d:88:3f:d7:a7:
         99:c6:fe:8f:9e:11:52:9b:f8:8f:04:39:a5:96:28:e8:18:d6:
         34:90:fe:2e:41:3c:9a:8f:70:94:86:f6:66:fa:74:ab:94:71:
         fa:9f:a6:2e:ee:93:38:ec:3c:20:bc:8b:4d:42:67:34:82:8c:
         81:c3:a5:d5:0d:4e:a7:ca:fc:94:7b:a9:ff:84:c2:81:02:29:
         07:39:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:53 2026 by rpki-client