This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File:                     fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier:          jCCaWpAglEyyxxvzbPy69S8xvaX46AYAZ8C+as2u/u8=
Subject key identifier:   09:BC:1D:0D:2B:B4:46:06:BE:C9:76:9D:FA:24:5C:3A:A8:BA:39:81
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer:       /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial:       34FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number:          9B91
Signing time:             Sat 24 Jan 2026 15:08:44 +0000
Manifest this update:     Sat 24 Jan 2026 15:08:43 +0000
Manifest next update:     Sat 31 Jan 2026 15:08:43 +0000
Files and hashes:         1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: f1HOrc2m3Q4+Nm9yH+3l0Lpk4QMVxga43ZXoMCVIAcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13564 (0x34fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
        Validity
            Not Before: Jan 24 15:08:43 2026 GMT
            Not After : Jan 31 15:08:43 2026 GMT
        Subject: CN=6974e07b-a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:1c:e5:3b:85:3e:58:e2:42:7c:94:db:55:
                    f8:cc:3c:9e:d2:9d:c7:ea:d4:20:9f:47:40:71:97:
                    c9:32:f8:39:cf:5f:18:70:a0:b7:bb:1b:56:66:83:
                    5d:42:c6:89:de:72:06:51:99:b8:42:79:a9:c6:12:
                    3a:69:72:f4:33:42:3d:f7:95:40:ca:c6:cb:a5:29:
                    c3:27:a6:78:0f:dd:74:42:85:62:cb:6f:fb:f6:8e:
                    a3:14:45:63:e3:02:a4:1f:99:ee:a0:f8:6a:14:e1:
                    7f:ca:b3:96:09:73:73:2a:26:10:51:a0:0b:49:28:
                    8b:45:e8:2c:77:2e:d6:e0:2a:e9:43:36:51:f9:91:
                    b0:f5:ae:df:fa:bc:dd:6d:2b:e6:7e:51:85:3a:d6:
                    6f:10:47:e4:96:9b:75:56:54:2d:a6:51:4e:79:4f:
                    a3:2e:67:13:cf:ec:cb:d1:0f:bc:95:91:0c:eb:07:
                    b9:5c:49:a1:7f:c2:7e:3a:0e:fa:b7:5c:c9:2a:dc:
                    37:7e:8b:f1:50:95:e6:c1:3b:bf:9a:da:8c:d3:d4:
                    38:41:f1:12:fc:dd:6f:31:03:3f:5c:f6:ab:8b:64:
                    f2:b3:35:1f:b7:37:aa:a5:3f:51:c0:cc:77:8a:85:
                    88:57:1c:76:1b:30:70:9c:1c:e1:c4:9e:dd:75:c5:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BC:1D:0D:2B:B4:46:06:BE:C9:76:9D:FA:24:5C:3A:A8:BA:39:81
            X509v3 Authority Key Identifier:
                keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ab:a8:92:3a:cb:af:62:d0:17:fc:3d:b7:dd:8b:f3:5a:27:
         c1:23:ed:e5:da:64:ff:5c:1b:aa:53:5f:b7:97:8c:67:33:f7:
         6f:1f:7d:5c:f4:36:54:83:bd:e3:54:5e:6a:bd:a5:27:5f:80:
         64:06:9d:94:e1:82:eb:00:1d:94:cf:44:9b:06:3e:a5:96:b1:
         d5:f4:45:ca:85:79:59:d1:ff:0e:ff:f1:3c:75:33:b1:3f:a6:
         1d:c4:85:57:f7:02:5d:8c:ea:de:81:f5:7b:25:b2:58:e4:79:
         49:54:6d:1d:b0:e3:35:4a:4a:ff:ed:df:9a:4b:91:54:2e:9e:
         79:d0:96:59:4f:64:41:64:9d:b6:f3:fd:34:62:19:ff:11:38:
         3b:c3:f7:9c:c2:d7:d1:78:a7:35:0c:54:16:7c:03:4c:a9:db:
         21:73:75:75:28:80:79:37:2c:f0:c9:2f:cd:cf:ff:cf:1b:25:
         ca:a1:fe:5b:23:8f:de:8b:99:41:96:cf:7a:40:78:29:74:79:
         8c:18:18:c8:af:34:9f:fb:38:1a:0a:25:12:54:04:5f:67:65:
         71:ff:89:48:38:d3:41:8f:24:52:76:8e:95:a5:f2:a2:75:61:
         fd:88:e9:30:df:44:6c:87:46:04:92:c1:96:4e:59:e2:74:6d:
         81:b2:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:26 2026 by rpki-client