This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
File:                     DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json)
Hash identifier:          frMqrZSUSzib2BtGxtz9ds9ULvJJz56bz2Kpt44vqbU=
Subject key identifier:   2E:5B:34:B4:48:F8:FC:65:EF:05:62:9C:C8:83:44:02:EC:B3:55:3B
Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8
Certificate issuer:       /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
Manifest number:          27
Signing time:             Sat 24 Jan 2026 19:42:29 +0000
Manifest this update:     Sat 24 Jan 2026 19:42:28 +0000
Manifest next update:     Sat 31 Jan 2026 19:42:28 +0000
Files and hashes:         1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: IRGHUSMw9ShoSaqiIQ0VDcB/fyvwxH4G+gDub3IVlvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8
        Validity
            Not Before: Jan 24 19:42:28 2026 GMT
            Not After : Jan 31 19:42:28 2026 GMT
        Subject: CN=697520a4-de7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:25:e3:27:0b:c8:ee:38:2b:f3:f2:47:54:
                    67:e3:64:fb:2d:61:ce:9d:1e:0f:96:ad:74:fb:13:
                    4b:a8:32:12:9e:c1:be:75:d7:1f:a5:0a:4d:a1:6e:
                    30:7f:e2:0c:e4:9e:7f:16:93:29:09:d3:72:f4:8c:
                    e5:1d:5c:5f:79:71:fe:7b:3d:8e:f7:98:d3:90:d6:
                    a2:7d:22:0c:06:a2:a5:7f:8b:6e:33:c1:b1:6a:4b:
                    63:2d:7c:67:f4:d9:70:36:71:aa:9d:80:29:64:4b:
                    b4:57:4d:e5:96:83:0f:70:d3:73:14:bb:0c:fc:fa:
                    04:f0:88:1e:41:2b:74:1e:c3:0b:b3:45:b4:9a:52:
                    31:a9:d9:6c:39:1a:43:17:ad:12:09:40:9c:66:ca:
                    f1:85:58:ab:62:65:27:8c:37:d8:bf:06:61:17:6f:
                    92:c3:45:79:45:c1:f9:50:f7:c2:7f:f4:da:0b:c8:
                    e6:38:12:cd:b6:00:59:b9:b7:4a:31:7d:0d:63:bf:
                    77:8d:39:14:a0:30:84:1d:74:fb:b0:f6:f2:89:2f:
                    89:5b:5c:44:84:2e:1f:41:c5:fd:47:8f:cc:a3:b1:
                    a3:db:25:d8:57:09:07:85:aa:61:27:9b:4e:ee:c0:
                    54:f0:28:6f:07:7b:13:1c:54:9f:5d:2c:41:7e:1f:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5B:34:B4:48:F8:FC:65:EF:05:62:9C:C8:83:44:02:EC:B3:55:3B
            X509v3 Authority Key Identifier:
                keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:64:37:96:3b:ef:e5:7a:8a:1c:4c:4e:a6:8d:fe:30:db:5a:
         14:0d:b7:3d:62:e0:8a:fd:1b:30:0a:0e:0d:7d:ec:d9:a9:6d:
         68:38:f0:95:82:7a:75:66:cb:ec:27:05:7a:4c:ae:2c:2b:a9:
         91:d1:a2:df:b8:25:a2:98:40:59:bf:11:4a:7d:a2:50:56:9f:
         fa:dd:ee:86:eb:00:fe:12:48:cf:93:43:cd:de:6d:82:ef:d2:
         d3:52:7c:bb:dc:ef:e3:5c:87:59:83:72:86:ff:46:98:ca:d6:
         c8:b9:48:c7:40:c1:d6:9e:78:7d:44:0a:a9:de:b3:c1:d2:52:
         ef:3e:fc:d5:dc:db:ef:19:0b:d4:a3:bf:ba:b0:3b:6e:8b:f4:
         36:70:99:b6:31:5f:ac:c4:6c:26:c7:3a:c4:cf:9c:5b:eb:b3:
         b7:ea:05:f1:2a:a3:af:bb:00:4c:a0:b8:7c:4e:d3:12:35:ad:
         8b:f4:f4:d6:9a:66:c9:fe:5b:25:3f:c7:73:38:2b:48:29:65:
         a9:24:0c:82:70:60:56:11:41:89:03:89:3e:8e:4e:cd:2a:aa:
         39:c8:02:7b:72:2c:c7:82:8a:d1:b4:08:35:14:10:66:c4:17:
         cc:24:59:1e:72:89:d9:2f:24:da:75:ce:50:4f:ba:74:be:ef:
         4c:45:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:05 2026 by rpki-client