This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File:                     ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier:          msBXRSXt7h+Ly4DpXT70xNRNYtAVeZZJla9BHdOGLU4=
Subject key identifier:   A0:BF:12:43:F2:AD:C3:B9:3F:8E:81:49:8E:BC:5E:3C:28:08:AA:70
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number:          047C
Signing time:             Sat 24 Jan 2026 23:19:13 +0000
Manifest this update:     Sat 24 Jan 2026 23:19:13 +0000
Manifest next update:     Sat 31 Jan 2026 23:19:13 +0000
Files and hashes:         1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: PYY2oyOtqD5Ta3SaIzOAWEWVCxO/+gUO+xK651VVg0k=)
                          2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: DlL3SJChckNOqua785W26axk8/KnPljvxeRS/X/r6xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: Jan 24 23:19:13 2026 GMT
            Not After : Jan 31 23:19:13 2026 GMT
        Subject: CN=69755371-f884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:c4:5c:de:53:6d:7f:06:13:b9:1b:83:64:
                    03:05:6f:cd:09:39:12:f0:7c:8b:06:2c:90:dd:c9:
                    7e:1f:41:d5:c2:0c:00:75:28:fc:87:3d:f8:37:88:
                    94:75:84:d5:98:23:94:76:24:e2:07:f6:57:f6:1c:
                    86:ea:60:51:67:77:7f:26:83:42:62:89:eb:7a:3c:
                    d6:b7:38:44:ad:46:22:a0:6b:be:2e:c8:d7:83:9a:
                    22:43:93:d2:76:3a:c1:eb:08:43:6c:4e:22:e6:10:
                    42:1f:15:41:65:14:ac:ea:ef:a9:20:55:50:9c:ae:
                    49:01:45:5f:14:1b:00:71:87:85:3c:2f:a2:df:22:
                    b3:0e:a8:f1:e8:04:74:f9:d6:06:ed:d8:97:a3:be:
                    ad:a7:36:07:53:52:a8:d7:0b:7c:88:50:8a:8d:24:
                    e7:54:1f:b1:06:1b:b3:50:89:51:02:8b:48:a0:65:
                    74:03:bc:0b:1f:80:dc:0b:61:a2:3e:77:63:67:3e:
                    3c:a6:48:5d:fc:0c:e2:e5:bb:12:9d:65:0e:db:9c:
                    b9:6c:43:f1:08:cd:36:96:65:bd:7d:d6:cd:ae:3f:
                    f2:4f:19:25:fe:1e:2d:9d:eb:f5:b1:ff:de:4a:98:
                    a2:0b:c1:7f:8f:5a:ce:27:34:20:dc:71:bf:55:03:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BF:12:43:F2:AD:C3:B9:3F:8E:81:49:8E:BC:5E:3C:28:08:AA:70
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:de:ab:e7:95:e0:29:83:e4:26:90:db:b8:a1:66:eb:79:
         12:17:fa:de:16:76:a7:b3:23:8b:b0:00:1c:6c:35:d7:80:12:
         30:94:31:8a:6c:50:52:82:35:6e:a7:1f:10:99:96:bc:e0:8d:
         40:9a:af:3c:22:e5:16:5b:a1:91:b8:bc:3e:1b:18:74:11:bc:
         20:7e:1e:fc:cc:4b:95:88:38:d0:49:41:25:e7:1b:32:aa:01:
         eb:f0:5e:fc:9b:d9:d0:23:67:18:4a:00:c0:7c:08:17:47:32:
         4b:22:0d:c4:7b:c2:ac:03:6c:09:d1:80:ad:2a:1d:ca:ab:45:
         89:07:61:53:be:35:56:e9:d8:76:48:d3:b3:f6:ab:d5:9c:3f:
         89:b8:2e:86:80:2a:08:9d:11:49:6c:56:30:66:ba:8a:31:9a:
         6c:b1:ef:3d:f0:07:a9:d1:c8:0c:c7:bd:bf:74:35:4c:26:eb:
         5d:01:bb:3b:60:e7:7e:7e:01:fa:3d:29:04:98:0d:2c:c4:21:
         7c:96:a5:b1:7f:21:4e:f4:67:35:27:29:70:e3:cb:44:cc:ad:
         27:67:9e:7e:3b:d1:46:6f:8e:12:c8:66:35:ea:1b:ae:ba:65:
         dd:5c:dd:d9:48:64:10:95:93:0b:ff:d9:74:24:36:a4:59:97:
         9f:69:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:59 2026 by rpki-client