This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          ByQSt3371Az2XGVHbd/9d5L/mOInUCFZv3orYoqXhZY=
Subject key identifier:   8A:96:C4:E3:40:82:FD:31:EE:C1:2B:D0:8F:81:A3:FA:EA:AF:86:71
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          08D3
Signing time:             Sat 24 Jan 2026 20:02:13 +0000
Manifest this update:     Sat 24 Jan 2026 20:02:13 +0000
Manifest next update:     Sat 31 Jan 2026 20:02:13 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: 0E94gaNZUg5z/y/ggZUS4YkCSUU1yvZhzO+Qbw+S270=)
                          2: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=)
                          3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=)
                          4: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=)
                          5: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=)
                          6: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=)
                          7: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jan 24 20:02:13 2026 GMT
            Not After : Jan 31 20:02:13 2026 GMT
        Subject: CN=69752545-613a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4e:e4:77:5f:82:13:64:88:3b:f6:4e:c3:08:
                    d0:2c:b5:7f:43:26:e2:71:0d:73:ff:f8:2f:3c:69:
                    ab:0f:09:24:33:aa:ef:a2:be:3f:5e:e7:da:d9:d1:
                    8c:0e:b9:ce:91:50:2e:d3:56:78:f9:52:47:91:a7:
                    d1:6a:08:5a:73:6e:15:fd:2b:fc:7f:59:3b:0a:2b:
                    13:a6:e2:74:0c:7c:0e:a1:73:7b:b7:89:76:1e:0c:
                    03:c4:01:ca:d8:be:67:0e:31:88:8d:0f:ea:d0:b8:
                    cf:f2:36:71:1e:84:46:2b:c3:a0:c0:03:0d:cb:42:
                    53:90:5b:22:75:07:68:a5:9d:da:c8:8a:ca:87:25:
                    76:cc:f0:c9:62:68:09:24:df:69:38:aa:bf:79:b5:
                    7b:bc:34:05:dd:44:27:68:c6:f8:91:e6:af:1d:30:
                    a7:9c:c6:a1:68:89:48:32:9e:c9:fb:bd:1b:b5:b5:
                    58:d1:04:77:bb:51:cc:fc:3c:8c:d2:6a:c0:96:80:
                    04:77:b7:23:8d:1f:fc:7e:ae:20:f7:20:f1:74:45:
                    b7:bd:f0:19:e5:f3:7f:77:27:66:29:b9:cf:b4:79:
                    2c:78:0c:bc:30:2f:81:7d:a2:45:f4:1c:26:8a:61:
                    61:04:a1:06:e2:bb:20:da:c3:57:04:27:20:93:6e:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:96:C4:E3:40:82:FD:31:EE:C1:2B:D0:8F:81:A3:FA:EA:AF:86:71
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:3a:66:69:b4:b3:5e:3d:0f:59:c0:8d:51:71:4d:0a:09:
         69:dd:cd:15:94:c6:91:99:d6:02:cd:31:57:3b:74:a2:f5:16:
         e1:49:22:16:2f:05:a2:c3:1a:36:29:98:bf:9c:8c:bd:4c:a9:
         f3:43:82:c4:28:d7:10:75:a1:bd:d6:52:42:44:6c:e5:0d:0b:
         02:d2:7a:91:4e:15:f3:17:42:cc:89:54:b4:61:ee:cc:30:76:
         2b:bc:cd:8c:54:3b:d4:11:d3:02:39:eb:f7:49:f7:36:9d:f8:
         1f:a2:34:4b:24:94:08:68:00:81:6f:24:43:c7:3b:58:d5:4b:
         79:e6:74:21:43:cc:de:37:9c:bc:58:3e:06:5e:21:28:9b:4d:
         f5:3f:f2:e0:4f:f4:4f:1c:67:2b:2a:4a:61:9b:d6:21:fe:6f:
         3b:5f:72:9c:26:03:c4:56:ca:8f:27:d1:7d:ba:3e:59:62:04:
         81:23:38:27:5e:32:dd:6c:b9:8d:e3:df:a9:cd:cd:55:7a:63:
         8b:91:b7:6e:0b:cd:11:a8:b9:b2:7f:d0:86:bf:e9:07:44:b3:
         01:d6:75:07:8a:41:2d:b9:5f:62:65:5d:86:a7:34:7a:5a:e7:
         d4:60:8f:59:7d:49:59:1d:14:3c:78:52:ab:0c:13:1e:55:c7:
         4b:17:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:32 2026 by rpki-client