This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
File:                     dD54xFmO_HLaCEZGUOuPnNoW-YA.mft (raw, json)
Hash identifier:          cH3aWJOJ1JDrTc89V8pUaenQdARpzW1+TxIDKEhyMTY=
Subject key identifier:   4B:6F:87:94:A0:30:39:AB:4E:E5:7E:37:C0:E9:72:E9:5F:E3:AE:05
Authority key identifier: 74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80
Certificate issuer:       /CN=A91DE500/serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
Manifest number:          02DD
Signing time:             Sun 25 Jan 2026 03:10:03 +0000
Manifest this update:     Sun 25 Jan 2026 03:10:02 +0000
Manifest next update:     Sun 01 Feb 2026 03:10:02 +0000
Files and hashes:         1: dD54xFmO_HLaCEZGUOuPnNoW-YA.crl (hash: 21UjlcXDmBLvxYuHs3vMtH33XCadwIIMWzP8x6OzDds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=743E78C4598EFC72DA08464650EB8F9CDA16F980
        Validity
            Not Before: Jan 25 03:10:02 2026 GMT
            Not After : Feb  1 03:10:02 2026 GMT
        Subject: CN=6975898a-a285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:c3:81:2a:15:4b:af:56:9f:27:1a:88:b5:
                    67:ff:e3:e7:7f:93:98:97:f4:7f:a8:e7:bf:d9:d0:
                    fe:47:90:5c:10:a2:5e:f8:76:d0:de:da:7d:ce:4e:
                    d9:0f:46:2d:a0:af:2e:6b:26:fb:12:65:1a:8a:5d:
                    62:09:81:77:a0:46:f0:7a:a8:7c:57:49:a5:ef:38:
                    c5:70:8e:39:64:ef:0f:02:0a:ff:7c:10:5c:a1:83:
                    6e:85:b1:dd:8c:ee:76:2c:36:a9:62:cc:49:25:66:
                    f9:2b:07:7d:d5:74:25:d7:07:17:80:33:f6:03:85:
                    ad:94:f6:36:73:b7:89:b7:c9:ba:9a:2a:e6:63:0f:
                    0a:f1:31:7c:d1:67:4c:18:b5:be:ba:88:06:a0:d1:
                    e5:6e:76:8c:7a:df:73:51:23:93:69:ff:59:dc:8e:
                    93:a1:c8:b0:2c:3d:2b:19:a7:96:55:56:c4:f1:28:
                    7c:e9:21:6d:c0:74:2f:ca:9a:80:02:de:5f:9c:c3:
                    8d:f5:aa:1b:d5:24:c3:7a:bf:cb:a7:f7:99:d5:55:
                    12:65:c2:a5:20:5b:7b:11:51:ad:94:a9:d3:87:37:
                    ba:0f:d8:f0:96:fe:99:96:70:57:d7:f4:03:d4:87:
                    c6:e1:5d:4c:30:22:ba:c5:e2:31:70:b5:ba:0e:fe:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6F:87:94:A0:30:39:AB:4E:E5:7E:37:C0:E9:72:E9:5F:E3:AE:05
            X509v3 Authority Key Identifier:
                keyid:74:3E:78:C4:59:8E:FC:72:DA:08:46:46:50:EB:8F:9C:DA:16:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dD54xFmO_HLaCEZGUOuPnNoW-YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/dD54xFmO_HLaCEZGUOuPnNoW-YA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:45:33:ff:72:ac:0d:4c:c3:4e:ab:1d:59:9e:f7:b9:45:7e:
         49:33:ed:dc:aa:34:eb:f1:b3:55:d7:2b:cb:e2:57:76:67:ec:
         6f:d5:be:da:f8:2f:75:28:95:82:54:c1:15:fe:b3:67:26:2c:
         4c:13:f6:bc:17:db:ba:52:5c:cf:f2:07:70:83:2b:11:8e:3b:
         88:55:fa:7f:41:51:48:a8:e0:70:8d:9e:ab:81:71:b2:60:70:
         ae:1d:ed:87:35:88:97:2e:37:1f:35:dc:18:f1:ad:ad:5c:2e:
         7b:95:83:9c:1d:c6:eb:d6:1b:94:31:3c:ac:76:9a:ed:84:93:
         27:ee:b9:c7:0f:81:85:8f:ab:38:75:84:8b:fe:a8:f3:96:4e:
         77:87:8c:bd:db:09:9c:dd:d2:61:69:ad:63:4e:67:bf:f8:4a:
         60:a3:b9:ba:50:18:dd:2f:5d:d6:30:5b:d5:e4:ee:d4:6d:05:
         ff:ed:8a:57:0c:45:fb:6b:df:dd:3d:3d:69:1a:ba:32:bd:cc:
         2f:3d:1c:b1:8e:dd:66:8e:11:80:56:ec:09:35:95:4d:bf:fa:
         f5:39:d9:a0:59:61:d8:88:fe:ad:1e:4f:64:57:73:be:6b:c6:
         5b:f1:e7:8e:b6:7f:94:f9:da:c7:c4:9b:d4:07:ab:a0:c8:6b:
         ea:b4:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:16 2026 by rpki-client