This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File:                     DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier:          mNuT94MRzKp/V0yDlt/6cp9GqxNvB15QZT+HCvN/47o=
Subject key identifier:   86:EB:8F:E9:09:4C:87:49:32:31:AA:05:B2:E4:EE:E1:4E:FB:AB:52
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer:       /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number:          08CA
Signing time:             Sat 24 Jan 2026 19:50:43 +0000
Manifest this update:     Sat 24 Jan 2026 19:50:42 +0000
Manifest next update:     Sat 31 Jan 2026 19:50:42 +0000
Files and hashes:         1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: GLXvHuFHNEQfj7NpasvdItvXQQ3JnHgr/AqEhzbrtDs=)
                          2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UoilLNu3ETB9DmYNTcuXP1NIaDKZxQjUXn9bZTv+2gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
                          rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
        Validity
            Not Before: Jan 24 19:50:42 2026 GMT
            Not After : Jan 31 19:50:42 2026 GMT
        Subject: CN=69752293-dd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:d8:ae:c2:f1:b9:2f:09:cc:24:c0:4a:33:
                    f6:f1:e7:82:17:61:24:84:71:b5:6b:25:dd:1a:a0:
                    90:a9:2b:9a:25:e0:64:ed:51:df:b8:68:77:25:38:
                    52:c9:64:11:4e:a3:bd:2a:8f:a1:8d:fc:f1:75:dc:
                    9e:31:8e:44:1d:f4:82:65:59:17:a2:ae:dc:87:84:
                    33:5e:a8:1f:9a:d7:7a:70:32:4f:e4:64:a3:c3:84:
                    34:d5:99:7e:a8:4a:ca:c0:30:26:0e:a2:13:2b:f1:
                    07:08:9c:6e:da:a2:d8:b6:d7:03:f8:28:f3:86:16:
                    40:b8:b4:ea:0e:7f:a4:03:24:dc:80:28:6d:ee:fd:
                    f3:08:0d:5d:45:40:cf:46:3c:ba:6f:7a:70:93:2d:
                    f3:26:e9:e9:3c:98:c3:66:cd:eb:a9:2e:d2:b0:5c:
                    cd:8e:0f:a6:b2:a9:f8:bf:af:28:15:be:20:7e:e7:
                    72:61:dd:cc:35:15:14:dc:a0:8d:cf:58:a8:05:2c:
                    5d:35:8e:39:9e:51:0d:b3:86:83:d5:c1:dd:94:39:
                    2a:04:65:24:d2:b2:37:37:30:15:62:10:5c:16:6d:
                    82:36:a0:6f:ae:b5:7b:46:a4:7e:bd:02:a6:86:27:
                    3d:cb:3e:12:3c:5f:65:a9:07:bb:97:ac:0b:d6:30:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EB:8F:E9:09:4C:87:49:32:31:AA:05:B2:E4:EE:E1:4E:FB:AB:52
            X509v3 Authority Key Identifier:
                keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:9e:8f:2e:54:b6:3a:d8:e8:47:a0:79:3d:3e:33:a9:e3:
         f1:a2:01:3c:9e:66:d6:22:f9:a0:d3:2f:75:07:1e:37:cc:76:
         b1:46:01:1e:62:53:be:53:57:9a:c3:84:4d:40:9e:af:c6:65:
         40:9e:a2:d9:22:e2:c2:b3:4a:00:87:f5:56:9d:92:5a:fa:7f:
         89:5c:3f:36:53:eb:f9:6e:a9:ea:31:a6:2f:f7:21:8e:2b:fd:
         f3:03:2d:c3:2d:ee:f5:6e:74:80:74:53:9f:69:5e:64:4a:e7:
         f4:5b:24:ec:0d:27:18:9f:c9:46:2c:fc:0b:23:f5:4c:a9:fc:
         25:e6:9e:7f:f5:45:fa:28:43:8b:83:e3:76:03:bf:c4:80:db:
         6d:41:02:16:63:3a:a8:fc:dd:ed:1c:bb:f7:f4:d1:fc:99:b4:
         75:04:1a:d6:4e:68:48:b1:fa:8e:24:1c:33:27:2b:51:d4:60:
         28:57:5f:68:be:49:91:40:7e:40:8b:57:c2:b3:cd:f7:6b:7e:
         0e:9e:8d:86:5c:4c:33:5c:fb:15:73:e0:2d:cb:a2:3f:1a:40:
         88:05:90:67:1a:f4:20:0a:e3:23:90:4f:83:5a:ac:d8:66:60:
         3d:7d:10:cc:ee:9b:22:08:67:ea:84:90:4c:4d:c6:82:7d:75:
         9a:2d:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:47 2026 by rpki-client