This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
File:                     DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json)
Hash identifier:          66/kYBX+U/OqAd9KIlej/wA8cm0pijVuwOUu5Jkbl5U=
Subject key identifier:   1C:3F:CA:33:5F:42:96:A5:D0:AC:02:B7:33:43:79:84:A0:7E:C5:99
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Certificate issuer:       /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial:       0398
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
Manifest number:          0392
Signing time:             Sat 24 Jan 2026 23:57:53 +0000
Manifest this update:     Sat 24 Jan 2026 23:57:52 +0000
Manifest next update:     Sat 31 Jan 2026 23:57:52 +0000
Files and hashes:         1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: DrEbsoij0If4E+q4XnEO7TmBnFWCfSvR34SHfVxnWZY=)
                          2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: U/JXwEqtoHC/7jQ68sFwAQsy+SIpyQHakkosmR6Gtvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
                          rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
        Validity
            Not Before: Jan 24 23:57:52 2026 GMT
            Not After : Jan 31 23:57:52 2026 GMT
        Subject: CN=69755c80-5949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:f4:21:30:9b:39:55:f3:70:76:9c:cb:7e:
                    d0:d7:2a:d1:ec:bb:fa:45:f3:cf:c2:83:b9:e5:09:
                    7a:04:8a:34:1d:6b:32:99:2d:3b:e7:af:59:4c:d1:
                    e7:c4:d0:05:21:1a:c9:29:df:6a:77:2c:e1:fe:30:
                    6c:bf:72:06:e1:e9:29:6f:22:b3:94:f9:49:59:0b:
                    9d:a3:d1:d8:b4:10:6c:ee:11:8a:35:3a:7a:a7:93:
                    4c:df:bb:04:f6:3d:f6:6a:9f:9b:15:73:64:d8:18:
                    06:ea:7e:3c:32:35:42:97:af:62:69:1f:d4:77:9b:
                    27:4f:8b:4b:a3:90:26:8b:57:89:19:98:32:b7:88:
                    a2:5f:83:ca:4a:24:e9:ef:22:d5:c3:95:3f:78:64:
                    34:ca:f4:01:c7:53:c3:cd:d5:5c:68:1e:aa:e0:72:
                    16:bf:bc:3b:17:b0:a7:0b:69:75:24:2c:ad:44:89:
                    a6:79:a1:25:26:8f:24:7a:76:47:10:e7:9d:5d:05:
                    91:6b:98:92:6b:76:98:f1:1c:b1:a9:b7:99:5d:68:
                    ea:16:20:0c:78:6e:80:87:b7:92:75:4d:49:7a:78:
                    80:c4:6a:59:71:2f:fd:e6:85:64:8b:d1:fe:4d:77:
                    65:40:ec:b3:ff:e3:f3:c6:d9:21:bd:39:c4:4e:3f:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3F:CA:33:5F:42:96:A5:D0:AC:02:B7:33:43:79:84:A0:7E:C5:99
            X509v3 Authority Key Identifier:
                keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:24:3a:82:48:f0:7f:10:39:68:cf:48:35:80:1c:9e:d2:98:
         22:ec:48:2c:c0:f6:c8:93:b9:10:c0:11:85:80:9c:5c:9f:fb:
         df:dc:b3:db:e4:fb:11:c5:85:0f:cb:1b:48:5d:1c:0d:f2:56:
         26:ec:dd:6d:f8:47:04:22:8f:15:ee:29:ad:d4:c2:0d:30:e4:
         25:5c:05:8c:09:63:66:cd:40:cc:2c:5b:3b:85:16:89:da:51:
         90:98:18:de:e0:72:16:e3:7c:a6:5e:25:5b:0b:9f:44:63:6b:
         c4:91:cf:d0:ae:87:c3:67:50:51:d4:98:eb:b5:8d:e7:d8:4f:
         d3:a7:31:06:4c:19:d8:f3:5f:4b:e5:f3:0b:e6:e5:f5:f9:67:
         1d:b6:09:c0:c5:d3:0a:5e:32:c9:17:ff:2a:f0:a9:7b:6b:ea:
         b4:30:13:7b:7f:81:31:fc:08:76:b5:cc:d5:97:07:2c:14:ec:
         a2:71:4b:9e:75:df:c4:72:24:e3:72:48:5b:9d:71:9b:07:18:
         0b:e1:6e:f0:80:6f:33:42:e5:fd:04:fc:48:89:ab:2f:a8:0c:
         9f:f9:21:9b:9f:61:fb:ca:9a:67:85:e6:04:c2:2d:a4:89:07:
         64:03:55:b7:f9:c1:ec:82:35:ef:34:b4:f2:5c:2f:ac:3f:92:
         cd:f3:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:56 2026 by rpki-client