This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
File:                     MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json)
Hash identifier:          TkO3IHz1bVufbF4Cj7HtkCk2EYywvym17R7nIU2lJW0=
Subject key identifier:   46:73:B1:B1:91:B9:B2:D3:8C:5B:04:F1:40:37:41:DA:AB:B5:B3:80
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Certificate issuer:       /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial:       198E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
Manifest number:          1983
Signing time:             Sat 24 Jan 2026 16:10:28 +0000
Manifest this update:     Sat 24 Jan 2026 16:10:28 +0000
Manifest next update:     Sat 31 Jan 2026 16:10:28 +0000
Files and hashes:         1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: xIUKNHASniuyZNAtvcceQZnsvi8L/DA/NR8DvyrJN/k=)
                          2: AE929D88823711E782F9A440C4F9AE02.roa (hash: E6UpldRotsggXgn0nl1/UsRHEfM+J1lVtu1dNLHwKlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6542 (0x198e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
        Validity
            Not Before: Jan 24 16:10:28 2026 GMT
            Not After : Jan 31 16:10:28 2026 GMT
        Subject: CN=6974eef4-7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:3d:7c:a3:1c:9b:a1:d2:d9:e7:5e:d1:d8:
                    0e:54:66:7d:af:64:a0:74:01:44:14:21:16:2a:e6:
                    5d:7d:e9:3a:5e:78:ff:22:18:3a:3f:c4:7a:5e:51:
                    55:4d:4a:a2:a8:a6:96:02:80:43:0d:54:50:e1:2f:
                    e2:3c:04:5d:71:46:90:0b:ea:f8:34:1a:64:75:85:
                    77:f6:64:7e:f8:34:b9:60:68:01:8c:e1:ba:79:bc:
                    76:72:c4:68:43:59:1d:1a:ae:e6:06:7b:b1:c8:43:
                    c7:ba:4f:97:79:f6:5a:6e:97:d2:01:65:6b:c1:cc:
                    7b:fa:80:4f:fc:db:16:7c:61:58:52:55:fc:5a:eb:
                    9d:76:c8:86:a7:b8:7f:ac:cd:89:7a:c7:00:5a:83:
                    12:ef:7c:41:38:38:79:32:0f:4e:d1:df:08:98:90:
                    a0:81:da:bc:c2:91:37:f2:32:00:3b:d1:a4:c5:44:
                    74:97:95:9e:d1:ae:5d:01:02:1d:4e:58:8a:2e:7b:
                    4d:24:3b:b8:91:c0:77:4e:84:fb:d8:85:81:73:e1:
                    54:eb:12:71:70:77:55:af:b9:25:c2:fb:81:26:41:
                    f8:61:a5:2e:fa:a3:03:a8:6c:37:91:69:59:c8:8f:
                    e5:26:f3:36:6d:83:83:30:61:02:7f:b5:df:b8:69:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:B1:B1:91:B9:B2:D3:8C:5B:04:F1:40:37:41:DA:AB:B5:B3:80
            X509v3 Authority Key Identifier:
                keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:2f:cb:99:18:bd:c6:a2:b7:be:fe:54:10:3d:7f:89:dc:
         cc:43:bb:45:91:89:c9:7c:9f:cd:d9:5f:ef:08:a9:d7:44:28:
         54:cc:84:70:39:55:76:06:5b:c7:88:aa:84:c0:09:af:51:ea:
         9b:93:2f:bb:cd:d3:6d:3d:5e:86:34:ea:ed:02:b5:98:81:6b:
         b3:76:c3:8b:bc:08:44:af:91:09:a8:54:8f:14:28:05:8a:c3:
         a2:df:3f:c9:7e:ef:79:60:a7:2f:3b:29:7e:a8:a7:4c:e5:7a:
         05:70:9a:47:27:57:df:07:02:de:41:65:0a:e7:18:cd:46:ad:
         4a:88:ba:b1:63:0d:9f:7c:b1:d7:cd:c1:05:01:08:0e:e8:81:
         9f:ee:aa:b2:6c:a2:84:3f:96:0a:79:4c:84:4f:e6:b4:da:98:
         d3:d0:d4:8c:be:68:64:86:10:4b:af:5b:24:7d:5b:c8:e5:c4:
         a0:ea:af:a4:48:1b:a6:2a:28:0a:4d:d5:68:9f:23:66:23:81:
         b3:78:d5:8f:a3:47:95:69:22:09:4d:ef:f1:bf:31:ea:6d:9f:
         af:67:a6:77:74:67:b8:33:ba:d8:84:2a:9c:5e:50:ae:7c:b1:
         d0:d7:79:18:1c:0b:cb:49:46:7f:9d:21:ba:67:91:7d:64:7f:
         94:76:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:49 2026 by rpki-client