This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          Xji4bi+QqCJEH9lOU2NVi9VF1lrItuvpIPVk6rsWsl4=
Subject key identifier:   FB:F9:3D:3E:F4:41:B0:92:97:40:9E:B3:B1:C5:78:7C:5B:3E:7F:1A
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          0657
Signing time:             Sat 24 Jan 2026 21:58:34 +0000
Manifest this update:     Sat 24 Jan 2026 21:58:33 +0000
Manifest next update:     Sat 31 Jan 2026 21:58:33 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: C0T8K/ZHqKa4Onc+utSb6scNJ3XIDDf/574I6PzMQEQ=)
                          2: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 0MKRGhD7VGcMSXw/ROEFU8wnZ9ENIjqkmhL8/Vmz8tg=)
                          3: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: pzVGtJuglLRxF/Eq8FNCa3K2+vkm9IUKeDm8AbcXfX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jan 24 21:58:33 2026 GMT
            Not After : Jan 31 21:58:33 2026 GMT
        Subject: CN=6975408a-4ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:87:19:4c:8f:f9:4d:e2:29:de:68:66:07:
                    ae:fc:8c:5a:3c:60:7f:2b:1b:07:7d:ec:94:03:65:
                    e0:f8:1f:ef:5e:b6:a1:62:b9:6c:9a:38:38:d2:92:
                    c4:67:8f:a8:24:57:2f:08:55:cc:08:64:15:4f:dc:
                    3b:fb:71:1c:66:9b:9e:87:af:fa:5a:50:de:74:9f:
                    1f:93:e6:da:31:77:76:bd:d1:f9:53:fb:52:69:ce:
                    26:c8:9d:78:4c:bc:34:68:45:53:dc:72:18:58:0d:
                    04:3b:07:2a:c8:eb:d1:90:e1:79:f9:74:05:23:6c:
                    e4:3d:60:ec:58:99:e6:e3:d2:ae:84:77:96:a9:cc:
                    2d:b9:d1:b8:af:49:7f:a7:e4:c5:46:b0:af:ae:da:
                    f8:a4:0f:81:db:79:82:58:4f:72:ce:56:c3:48:76:
                    8f:9d:38:ef:e8:fd:b1:ba:6f:77:81:ed:4a:1d:ca:
                    60:d0:e8:99:7b:1a:a2:c9:2c:33:27:fe:1b:2c:34:
                    a1:62:52:fa:42:00:08:5f:5f:22:24:7d:ac:e3:27:
                    4e:24:8f:1b:ca:63:da:f7:83:a6:f2:8f:14:1c:3e:
                    ec:bb:47:2b:06:ae:3d:86:12:be:ac:3c:7f:c5:f0:
                    51:a7:e1:10:a8:63:cf:62:a0:4c:4c:69:0c:90:ba:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F9:3D:3E:F4:41:B0:92:97:40:9E:B3:B1:C5:78:7C:5B:3E:7F:1A
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:20:f6:c1:20:d0:95:91:02:63:24:4e:7b:eb:10:84:60:69:
         64:a6:9c:38:1c:5e:93:ff:d5:e1:55:40:5d:20:79:7a:3d:f7:
         34:95:d9:23:24:04:c7:56:22:59:3b:5c:55:1a:d7:e3:28:0a:
         b5:7a:5c:7c:58:ee:66:87:f1:14:6d:1c:d7:aa:5d:c5:c8:44:
         9f:c8:ca:bf:e8:a0:61:51:93:65:9a:8a:f3:49:4b:3e:43:49:
         31:d4:f1:4b:40:81:e8:da:b5:c4:11:98:49:16:24:ab:71:95:
         5c:34:b4:d2:5a:ee:4b:6a:13:f4:a4:5c:5c:54:05:34:35:50:
         d4:55:64:cd:f7:fb:bd:39:b5:b8:f0:24:13:08:79:47:9d:24:
         ca:72:4d:40:5c:d1:6d:ed:c1:6a:57:4f:e8:54:43:56:f1:48:
         c1:a1:f5:4e:bb:41:6e:ba:1d:58:ca:66:e6:a2:46:39:61:8b:
         11:80:f2:6f:37:79:36:1d:1e:d8:de:ff:f5:72:d7:1f:73:ed:
         eb:ee:b6:be:3f:8b:99:18:41:c7:d5:5d:33:fd:fd:30:86:66:
         9d:5b:81:1f:fe:a7:6b:92:e6:0d:04:a7:9c:4d:d0:4b:ea:27:
         4a:3d:fd:3d:03:fb:0d:cb:e6:ba:b4:d1:41:2b:1f:9a:dc:07:
         c1:9d:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:19 2026 by rpki-client