This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File:                     FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier:          M009N86kJ3C22SXw+qD6Gq3d0/RN1SXSLYuGBz1eYIk=
Subject key identifier:   1E:E9:ED:FE:1D:2F:3E:04:E7:E9:EB:90:33:3A:64:94:A3:40:F8:47
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer:       /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number:          A8
Signing time:             Sun 25 Jan 2026 05:22:38 +0000
Manifest this update:     Sun 25 Jan 2026 05:22:37 +0000
Manifest next update:     Sun 01 Feb 2026 05:22:37 +0000
Files and hashes:         1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: pt4kPlYO2gteAqPNsRIN3hK5iiZSIF3SfZjbIWCIhXk=)
                          2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: blGbXq2yiWVicTOuyyoxLGQafJr97/lYQbfApO8b37w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
        Validity
            Not Before: Jan 25 05:22:37 2026 GMT
            Not After : Feb  1 05:22:37 2026 GMT
        Subject: CN=6975a89e-9301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:48:b9:eb:05:fb:dc:fe:47:22:e9:f0:36:
                    71:f1:34:e6:56:92:ce:5f:6f:e3:46:ba:59:39:7f:
                    87:6f:56:42:71:20:35:33:69:99:e3:a1:26:a9:01:
                    ff:ef:3a:c4:24:c3:cb:5a:2b:28:91:a9:32:3c:6c:
                    09:71:dd:c2:b4:01:de:c2:bf:a5:1e:93:be:d1:ef:
                    68:47:3f:1e:df:e9:ca:68:eb:2f:fb:1e:24:f6:2d:
                    4e:6d:96:aa:a8:6e:1b:e1:6b:4f:bb:6c:6a:b3:94:
                    ea:f0:c5:6f:b7:87:00:8c:2a:34:5a:c3:02:56:f8:
                    58:40:17:47:75:d9:7e:e8:24:8f:01:d7:c8:ce:53:
                    bc:fe:c7:30:ff:3c:c1:5d:ca:1d:30:4a:12:19:a1:
                    aa:0c:5f:76:a1:5a:fb:90:11:0a:e2:ba:ce:80:f1:
                    f0:c5:58:f6:6d:0a:a9:59:de:e7:c9:bf:07:86:65:
                    8c:63:9d:b5:cb:e4:16:5d:30:07:1e:aa:6e:29:20:
                    69:f4:d5:81:06:bf:4c:71:3b:e8:71:a4:5c:c8:05:
                    83:f6:6c:f4:c4:d2:be:93:0d:39:fc:fc:9a:c3:f2:
                    ab:f9:05:3c:07:af:bb:13:2d:4e:72:ee:4a:36:75:
                    76:e6:32:3e:24:03:fd:db:13:f5:ca:60:b1:98:10:
                    81:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E9:ED:FE:1D:2F:3E:04:E7:E9:EB:90:33:3A:64:94:A3:40:F8:47
            X509v3 Authority Key Identifier:
                keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bf:db:8e:f8:1e:06:91:e6:b8:31:dc:92:1e:13:77:01:46:
         2a:7a:57:ec:26:23:50:cc:e7:67:1c:bf:1c:6c:0b:a4:97:f2:
         4b:b3:08:d0:f4:ea:cd:c7:9a:fb:9d:f2:cc:77:71:76:a9:7a:
         46:5e:c0:13:e5:38:39:9c:71:fb:15:9a:84:ba:c1:69:55:dd:
         9b:a6:ce:33:3e:cb:53:9b:e6:ec:0a:01:3f:bb:d7:6e:19:2e:
         bb:b7:08:d5:d3:95:75:d3:07:8a:06:52:5b:71:1a:f4:ad:f8:
         0d:5b:86:dd:bc:c5:03:41:df:d7:d6:26:66:35:6d:e0:df:74:
         a7:82:f1:73:08:b0:a0:a1:96:90:16:cd:4e:1c:92:77:9e:68:
         73:4d:ec:d6:37:78:25:5e:b6:f0:5f:2a:e2:44:cb:8a:2a:15:
         e1:df:ef:22:04:e4:0e:c9:fd:a3:02:24:e2:1c:76:bb:13:f4:
         ee:f8:0e:0b:ca:df:f9:2f:80:50:0a:db:2b:a5:7e:14:d6:ad:
         01:3e:26:18:ad:44:2c:80:1b:f0:ab:eb:aa:f7:71:c4:61:f0:
         71:ef:01:65:a8:1b:29:e1:26:87:19:74:76:fb:66:cd:5e:6d:
         87:16:05:c0:11:63:82:63:bf:08:71:ca:3c:bb:ec:43:d9:8f:
         0b:9d:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:18:00 2026 by rpki-client