This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          +tg08VwiirL98I/VvifwxpelT6A7Yv+LNAUBQF19vGw=
Subject key identifier:   48:50:0B:6C:F3:2C:31:3A:B4:2E:8A:AB:48:D3:F4:6E:9C:80:0C:C9
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0BD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0BC7
Signing time:             Sat 24 Jan 2026 18:29:31 +0000
Manifest this update:     Sat 24 Jan 2026 18:29:31 +0000
Manifest next update:     Sat 31 Jan 2026 18:29:31 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: JEEejyhaSs6iti+hyXMo1hoKDWAaloVKUC+2TAROlWg=)
                          2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=)
                          3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Jan 24 18:29:31 2026 GMT
            Not After : Jan 31 18:29:31 2026 GMT
        Subject: CN=69750f8b-f046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:16:f2:89:2e:c7:ce:29:ec:4f:87:ec:d6:
                    24:6e:12:e9:69:15:6e:96:f3:78:6f:7c:b8:5e:ee:
                    f0:fe:a4:b0:34:ec:73:22:56:96:13:17:8e:97:3d:
                    a2:0f:9e:52:45:2a:bb:71:61:13:ce:6f:da:e5:0f:
                    c0:ff:b1:23:08:ff:94:a3:c9:ec:0a:6a:1b:30:b1:
                    13:b1:69:56:21:66:9d:1a:62:dd:a2:b4:1a:fc:1b:
                    ba:47:6a:25:24:99:3d:15:1d:e8:31:8c:19:08:0c:
                    96:03:14:9a:8b:f1:39:92:3d:cb:54:c0:7b:47:3f:
                    57:1b:f6:04:26:c3:65:9f:b1:39:0e:31:31:02:d0:
                    58:0b:bf:23:00:e2:4a:9a:bb:a2:8b:c8:84:bd:0f:
                    94:a2:e4:b0:ee:bf:c9:0a:47:a4:60:f3:6b:4e:f6:
                    35:7a:34:85:65:6b:80:18:cf:b4:9c:ab:3e:66:d5:
                    6b:1e:86:52:f8:1d:f5:c9:d0:cc:d8:4d:54:12:ac:
                    11:d4:b5:3c:43:83:c5:5f:9f:31:0d:d8:ee:e0:58:
                    f7:9d:60:a2:1c:dc:6a:f7:a2:cb:f1:c3:53:45:61:
                    e1:05:a3:e8:61:6a:f9:44:ec:30:1d:fb:f5:28:fa:
                    dd:a0:4f:23:ee:35:1c:ca:a8:a0:ab:31:14:cd:65:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:50:0B:6C:F3:2C:31:3A:B4:2E:8A:AB:48:D3:F4:6E:9C:80:0C:C9
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:59:03:af:c0:5d:94:b5:96:fc:48:64:00:a1:e7:1a:e3:b3:
         cb:1a:14:f2:d0:e6:ee:05:6b:ad:09:dd:d8:ef:1b:b7:e0:a9:
         4e:3b:c1:3e:d5:27:fa:da:46:91:3c:47:08:3a:65:b4:1e:9e:
         c6:c1:94:f9:8c:13:f2:66:7c:cb:7e:ad:a9:12:c7:21:31:b4:
         6e:1c:21:46:fc:29:d3:e1:4d:15:e1:9f:1f:99:cf:a4:71:22:
         eb:c2:24:90:69:9c:ab:f1:c7:7f:2d:30:9c:7c:29:28:d8:c0:
         2c:15:70:4a:0c:43:3c:dd:5b:26:82:ad:de:dc:75:2f:25:76:
         36:d8:f8:6d:2d:96:45:11:0f:67:94:7f:e4:90:54:5b:db:60:
         45:db:e0:64:bd:c7:0d:63:06:c3:e9:9c:45:47:5c:00:8c:a2:
         0f:f8:82:ee:ef:23:9f:7e:f7:7c:c7:e1:1d:28:3a:60:67:b0:
         5b:cc:4b:5c:8c:e4:2a:14:dd:e4:2d:61:56:2a:f5:79:a9:8c:
         0f:b8:e2:4d:79:22:71:80:38:04:84:91:45:1c:10:c2:6b:f0:
         fb:f7:a9:c8:6c:26:97:46:d6:4d:67:c9:43:9b:45:22:bb:ad:
         aa:0e:35:0a:f4:2a:06:0f:a5:2b:7f:cc:82:16:f5:16:40:98:
         28:4f:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:27 2026 by rpki-client