This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File:                     rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier:          O4+oUB0DBu7gWLpLqP7ELyzpP+CCADmHkVAWF5xYYJc=
Subject key identifier:   61:16:A4:35:EB:7D:2F:05:14:6A:77:E7:3D:E0:4D:C1:6E:58:72:D8
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer:       /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial:       091F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number:          0916
Signing time:             Sat 24 Jan 2026 19:42:18 +0000
Manifest this update:     Sat 24 Jan 2026 19:42:17 +0000
Manifest next update:     Sat 31 Jan 2026 19:42:17 +0000
Files and hashes:         1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: d6pSJEl52J32Z6CXXmlnziuU5FQsga8nHUCcpDg3r90=)
                          2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: gGfvaVEV+hPlcS/KUAGxCctceZxcis75EZYZWWO9DrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
        Validity
            Not Before: Jan 24 19:42:17 2026 GMT
            Not After : Jan 31 19:42:17 2026 GMT
        Subject: CN=6975209a-c49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:d2:07:a8:27:3c:61:81:7c:0e:3d:c9:d4:
                    b7:db:f1:08:4f:23:2d:44:f4:59:d3:a7:e9:6c:41:
                    53:25:18:17:5b:fe:2d:72:7f:69:18:9f:f9:89:3b:
                    de:0d:e8:8a:a0:bb:e7:e2:69:93:7e:1a:0c:d3:c6:
                    d8:96:1f:eb:c4:af:8a:07:09:e0:a0:5a:1d:f1:37:
                    58:96:71:d8:8a:d8:fc:c3:9b:f6:d1:6d:43:ae:23:
                    a3:0e:bd:e6:2d:a1:2f:8b:b1:8c:f6:9e:90:b2:81:
                    bd:2f:78:a6:36:2a:57:72:d9:b0:5b:d1:99:10:7c:
                    b1:c0:0f:81:c5:5f:ae:2d:bc:f2:f0:f3:d5:53:c7:
                    b3:af:c1:76:2f:ad:c1:aa:2d:8d:6f:13:71:ab:43:
                    b4:df:af:8f:54:ee:6a:3b:40:13:f6:ad:a7:0a:07:
                    06:b4:c1:8e:53:a0:01:2f:70:fa:68:be:ee:49:6f:
                    c4:f9:d6:b8:f2:cb:0d:f4:e1:2f:1c:dc:04:b5:74:
                    b1:e8:03:42:20:80:09:dd:1d:67:4b:ab:e7:a9:45:
                    48:bf:dd:45:fc:72:4d:15:29:b5:c8:39:7a:1d:22:
                    aa:87:a8:8b:5f:fe:27:13:d9:b9:b4:fa:ac:8b:d1:
                    5d:b6:54:cd:8c:32:a6:a2:61:7b:c5:1b:2e:84:81:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:16:A4:35:EB:7D:2F:05:14:6A:77:E7:3D:E0:4D:C1:6E:58:72:D8
            X509v3 Authority Key Identifier:
                keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:36:dc:57:60:52:76:be:e3:3f:07:a1:2e:3e:ac:41:e5:d1:
         51:57:6e:74:93:5c:1c:81:80:3c:5a:29:3a:9e:3f:d8:2a:36:
         3f:ca:f9:25:21:09:7c:9f:a7:2b:a9:71:1a:c1:42:63:f0:17:
         b1:cd:72:56:9a:32:ca:47:d3:53:2d:fd:b4:f8:77:49:52:5d:
         54:96:4c:f5:3a:e4:5c:d0:62:47:c9:9c:54:f4:7a:df:80:ca:
         fb:38:6d:09:c3:45:18:0b:d1:5f:f1:e7:f7:fc:1a:c0:18:e1:
         fd:a6:d5:d5:a3:f8:b0:cb:d8:7e:a2:b6:47:11:dc:15:b6:7f:
         d1:af:e0:d4:48:4b:de:d2:42:80:20:ce:bc:79:41:d3:71:23:
         e0:07:b4:9d:22:85:be:ca:7b:ef:78:ec:66:90:2a:66:19:22:
         9b:a6:d8:fe:f9:d2:6d:99:53:0c:46:36:b2:f7:e4:bf:94:57:
         c3:f0:3d:4f:19:4f:d8:0f:c4:49:b4:8a:f9:f7:b8:6f:dd:45:
         8b:2e:69:3e:cc:3b:25:1b:16:c0:ac:0b:f5:f5:58:36:bc:31:
         3e:2f:26:2e:31:dc:4b:b8:3c:3d:98:67:78:58:8a:d3:a2:44:
         f6:85:3c:69:61:fc:25:47:47:c3:8f:a4:d6:01:59:38:af:7f:
         24:14:39:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:04 2026 by rpki-client