This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
File:                     s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json)
Hash identifier:          EMKXdRDPOBz+gP0HR2jXcfpLa3YvzKiC2Hy+XCJQLhA=
Subject key identifier:   95:51:B6:27:47:DB:23:D0:71:E2:D4:5B:6A:53:43:8C:15:9C:1C:6A
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Certificate issuer:       /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial:       0B5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
Manifest number:          0B54
Signing time:             Sat 24 Jan 2026 18:43:57 +0000
Manifest this update:     Sat 24 Jan 2026 18:43:57 +0000
Manifest next update:     Sat 31 Jan 2026 18:43:57 +0000
Files and hashes:         1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: BpNtcZlY1NwYR/1J7AcMXhL8zP5sPSiBjx5wHllbKUY=)
                          2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: 7dou7EZJS0k+10u39gMW4DiImFVNtTINLLrPstsJeHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
                          rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
        Validity
            Not Before: Jan 24 18:43:57 2026 GMT
            Not After : Jan 31 18:43:57 2026 GMT
        Subject: CN=697512ed-fbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:2d:2a:9d:d4:56:c7:53:2e:96:bf:82:da:
                    65:94:10:d3:f6:c0:65:d4:ef:03:81:19:1a:4e:be:
                    ec:88:b6:c9:12:ed:66:74:02:f3:12:f7:c8:b7:97:
                    dc:d0:47:38:49:6b:36:e2:6b:29:95:f3:5c:80:ce:
                    da:b0:44:73:06:f7:dc:06:6b:34:1c:86:df:74:f6:
                    96:f2:ab:46:32:ce:34:71:7d:b4:0e:b0:31:c7:d6:
                    0f:fb:1a:1d:fc:5e:d4:0c:40:90:36:e6:6f:d7:6e:
                    e3:8c:02:e4:89:b8:b3:f8:9e:55:e6:f6:76:bf:d1:
                    82:58:e4:70:9a:73:3b:5c:94:4a:f2:59:c7:cb:31:
                    68:64:c9:33:12:0d:db:d4:77:f8:ed:a2:07:b8:eb:
                    0b:0b:82:e5:bd:b5:90:9e:40:0e:7d:33:7a:9b:26:
                    c1:8a:78:6e:e0:63:2a:14:8b:d9:04:99:e6:e9:40:
                    12:aa:00:db:08:51:01:00:91:03:70:5d:02:b6:3d:
                    af:3f:f3:00:18:64:7f:0a:86:d6:c3:a2:19:7b:cf:
                    a7:e6:3d:2f:80:82:e6:cf:42:12:d8:be:93:2b:a1:
                    d2:5a:ce:49:12:f5:58:b9:6d:30:92:4d:bf:06:f3:
                    18:11:88:4f:16:d0:7d:ff:34:d0:bd:1f:7f:3a:7f:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:B6:27:47:DB:23:D0:71:E2:D4:5B:6A:53:43:8C:15:9C:1C:6A
            X509v3 Authority Key Identifier:
                keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:bc:e4:bb:3f:7f:f0:86:22:24:3c:bd:34:f2:84:ce:15:
         09:e0:e0:04:47:a5:16:d2:af:c7:62:22:e3:58:7c:4a:cc:64:
         14:83:84:e8:9d:ff:67:ba:55:dd:1a:f6:dd:0e:67:98:6c:23:
         e6:ff:4a:87:56:ad:26:72:75:6f:73:e9:ef:55:09:18:83:12:
         23:69:e5:7d:b9:3b:e9:0a:15:08:5c:93:1d:81:71:e9:fe:1b:
         fc:a1:90:3e:5d:54:6a:b8:a7:3a:c2:22:c3:85:4a:00:ed:c7:
         aa:f6:7d:62:8d:87:56:17:d5:5a:31:14:9a:84:6e:3f:da:44:
         2c:08:02:94:73:2e:0e:e0:d9:6c:2a:ab:1e:6d:e5:94:9b:8a:
         c2:37:38:e0:63:f4:cb:eb:6a:f1:1e:73:28:2e:16:60:3f:5e:
         16:4f:1d:a6:65:db:7f:68:7b:ee:e8:40:b8:2b:10:3c:35:5b:
         e5:14:2f:4e:ce:77:2b:6d:aa:ae:dd:8a:98:70:e1:57:42:80:
         b5:c8:25:8f:d4:8e:fb:f9:02:0c:2b:f7:b7:2e:8f:18:37:61:
         dd:0e:7d:3d:d4:19:48:0c:4b:7e:12:5d:16:85:7c:90:96:0d:
         43:38:52:b7:08:7d:b8:27:d4:69:3a:43:58:fb:73:f4:8c:98:
         e7:0d:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:55 2026 by rpki-client