This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
File:                     aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json)
Hash identifier:          JO4uKF8TJhtJjgfpT7i68Mx2kfHytZznHZNAB7u+bQo=
Subject key identifier:   21:35:71:16:FC:01:32:5E:9A:F4:D7:8D:6A:E9:DB:C8:BC:CC:26:8E
Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51
Certificate issuer:       /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951
Certificate serial:       0670
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
Manifest number:          066B
Signing time:             Sat 24 Jan 2026 21:50:42 +0000
Manifest this update:     Sat 24 Jan 2026 21:50:41 +0000
Manifest next update:     Sat 31 Jan 2026 21:50:41 +0000
Files and hashes:         1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: uOxgVlTC3FQZVD8PvqmLMAuJ3WUZtH1iQXt9/G5c+ww=)
                          2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl
                          rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648 (0x670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951
        Validity
            Not Before: Jan 24 21:50:41 2026 GMT
            Not After : Jan 31 21:50:41 2026 GMT
        Subject: CN=69753eb1-2b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:9f:0e:48:e4:3d:34:66:f8:09:16:d8:a6:
                    6c:de:bc:42:b9:c3:b0:ea:66:32:23:99:21:19:02:
                    07:cd:a1:70:9a:aa:0d:e8:18:1b:3a:35:4d:bc:86:
                    b0:31:e1:03:51:f5:51:53:e9:68:65:24:5a:f4:cf:
                    8a:d3:fd:07:7d:3b:da:ed:48:4f:c8:57:19:93:f0:
                    b9:9d:d1:71:61:e5:d6:a3:a5:f4:4a:53:bc:86:4a:
                    5e:a9:6d:de:6b:d5:af:2a:d6:09:a1:6a:b1:a3:79:
                    a9:0a:01:ae:44:d4:9b:22:1b:77:bb:e8:fe:51:c9:
                    cc:ee:da:c2:92:54:01:7e:1a:e9:2d:e2:1a:b4:9a:
                    fe:46:ae:d1:5e:22:ed:ff:72:d5:f9:e2:9f:7d:87:
                    9a:1c:28:b6:85:ec:2b:5d:f9:ca:99:97:0e:d3:ff:
                    c3:6d:00:55:e6:99:58:91:23:2e:f5:40:cf:a1:a1:
                    96:e0:4f:38:b7:ae:83:3a:d9:6e:4c:b8:b4:0f:43:
                    18:7b:0a:02:7d:0d:30:51:1c:7b:17:de:13:0b:14:
                    8a:53:be:bc:f2:c3:07:f9:85:b1:8d:6b:02:da:26:
                    6c:f5:3b:14:a0:90:11:81:60:92:d7:7b:08:01:06:
                    c7:a1:63:06:55:34:c9:30:8b:b6:c2:f3:b6:06:3c:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:71:16:FC:01:32:5E:9A:F4:D7:8D:6A:E9:DB:C8:BC:CC:26:8E
            X509v3 Authority Key Identifier:
                keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:cc:02:fc:b0:79:0d:26:83:fb:a3:c1:4e:4a:5f:bc:12:
         e6:e1:99:e3:cd:ad:8b:08:a1:8e:2e:21:6e:2e:10:6b:45:6c:
         c2:e3:de:7c:be:07:bd:b5:e6:79:7b:1b:6e:ce:c0:ce:22:58:
         c3:94:9d:57:71:74:72:58:51:28:e1:73:45:6b:ec:78:1c:3d:
         6a:a2:33:81:3a:97:e2:17:c2:48:f2:6b:a2:21:68:10:dd:9b:
         84:74:7b:85:cf:45:f2:40:c8:60:7f:4f:b8:01:9b:12:13:d7:
         38:ea:99:ac:f1:b4:73:e4:a8:4d:95:04:b0:a1:94:af:8b:26:
         91:1e:65:72:52:f5:9e:3f:be:69:69:bf:4f:9a:3c:30:80:77:
         87:a9:39:ba:56:fa:3b:6b:aa:2c:ee:47:14:0a:3b:9a:cf:55:
         2a:6c:08:8a:11:33:cc:8b:00:43:4b:7f:7c:cf:e8:5d:5f:5b:
         bb:1d:f3:2d:43:bd:e5:53:ec:bc:5f:a6:a8:79:12:fd:00:ed:
         a0:02:a0:ae:7a:e9:0e:07:a6:50:7b:6a:b3:65:bf:c9:0f:09:
         ec:0b:b9:05:ce:90:09:70:10:bd:06:6f:17:7a:0f:a7:28:ef:
         57:82:ef:f7:15:a8:e9:3c:52:e0:57:cb:9f:a5:a4:45:f5:58:
         ec:b9:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:46 2026 by rpki-client