This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
File:                     jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json)
Hash identifier:          UkXoiymg/iJlleertUYCqG+tnUwrJaFsermb26q9wnw=
Subject key identifier:   D9:A4:23:FE:0A:CA:5A:CD:EA:0D:53:93:4B:E9:54:DF:69:1F:EA:F0
Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Certificate issuer:       /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Certificate serial:       1502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
Manifest number:          14F8
Signing time:             Sat 24 Jan 2026 16:34:45 +0000
Manifest this update:     Sat 24 Jan 2026 16:34:45 +0000
Manifest next update:     Sat 31 Jan 2026 16:34:45 +0000
Files and hashes:         1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: jomrYsxTnSZSBohadkYMeehFPOuqDjvV8qppDa+bYNY=)
                          2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5378 (0x1502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
        Validity
            Not Before: Jan 24 16:34:45 2026 GMT
            Not After : Jan 31 16:34:45 2026 GMT
        Subject: CN=6974f4a5-326a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:54:29:19:fd:19:e4:91:6a:26:28:d5:7f:
                    f9:cf:b4:ed:19:99:76:0e:0b:46:cd:04:c3:9a:7a:
                    2a:e2:34:18:a5:99:16:d9:a8:2a:d2:6f:b5:47:ef:
                    76:3b:05:34:e0:1e:73:82:64:d0:5c:3e:25:e3:40:
                    64:7c:e0:0e:f5:be:09:1e:f9:c9:bd:1d:2c:e5:12:
                    2e:df:e6:2b:64:66:6d:78:10:8b:bf:7b:9e:9e:fa:
                    00:7f:35:d6:7c:86:00:da:96:0f:cc:9a:03:df:b9:
                    03:41:25:33:b4:66:ec:09:57:b8:90:69:26:d6:a1:
                    26:fe:9a:4e:16:9c:53:43:ff:28:b8:f4:ca:cb:9d:
                    d1:35:46:75:77:66:fe:c8:06:da:a7:5e:a3:1c:22:
                    a0:20:19:19:ae:ef:41:30:0b:d0:bb:23:83:f3:20:
                    93:40:80:c6:43:ba:24:ca:09:cf:7e:03:4c:4d:12:
                    37:fc:09:07:b4:fe:8b:c3:f2:d2:97:5e:d3:e2:7c:
                    9e:60:bc:3c:fa:da:a3:19:50:47:bd:0c:72:8d:5f:
                    90:81:57:42:c2:76:bc:be:10:be:81:88:f2:7f:6c:
                    50:bb:cf:f4:1f:bb:80:02:d3:d0:90:81:d4:78:1a:
                    12:e2:db:4d:9f:25:08:b2:cd:53:1b:c9:72:2b:74:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A4:23:FE:0A:CA:5A:CD:EA:0D:53:93:4B:E9:54:DF:69:1F:EA:F0
            X509v3 Authority Key Identifier:
                keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:37:f5:df:ef:7d:20:15:d6:59:1a:46:e2:ab:e2:99:c9:
         eb:ee:e9:4a:f2:27:1f:83:f2:1e:c6:ab:e7:20:a4:37:50:de:
         1b:d5:99:34:c2:c8:d8:37:ba:71:cf:14:38:d7:82:35:bd:68:
         da:a4:41:78:05:ca:e0:b7:d6:7d:bd:3e:e9:d7:27:c9:27:13:
         ab:7b:a9:47:d9:2d:3a:4b:47:af:9c:0c:3e:b8:62:4b:36:46:
         f7:04:bd:d2:5c:20:ff:b6:da:cb:6d:91:12:31:de:11:2a:ea:
         78:0a:84:bd:7a:65:54:0f:85:bf:a2:d5:a4:d0:16:d3:09:5c:
         f8:13:37:f1:bb:d7:b7:64:3a:39:98:6c:18:b7:34:c7:88:61:
         e9:87:b9:d0:f3:75:bf:3b:46:3e:60:f8:d6:09:85:53:ce:6f:
         af:01:ca:43:d4:be:0b:fa:50:ba:a2:38:de:14:95:ee:59:ef:
         70:f8:d4:ef:0d:d6:26:93:51:07:ff:74:7f:f6:f3:d9:3e:1d:
         19:70:5c:50:56:de:31:ee:0c:92:0c:0c:9f:e3:7c:8d:3a:bc:
         59:43:34:00:20:9c:fc:11:10:ea:8a:27:84:0c:1e:c7:dc:41:
         2d:60:55:e4:4d:dd:6f:4d:8c:53:ab:94:2a:f8:af:c5:9d:61:
         e1:7e:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:12:48 2026 by rpki-client