This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File:                     foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier:          8fkDv6HoE3S1jGrskNh/odZGlHthURB1EPQlZFWW+H0=
Subject key identifier:   3C:33:23:7F:7D:C8:59:39:9A:A7:47:7F:2A:4E:E1:3E:F9:28:A4:4C
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer:       /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial:       3557
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number:          489B
Signing time:             Sat 24 Jan 2026 14:20:35 +0000
Manifest this update:     Sat 24 Jan 2026 14:20:35 +0000
Manifest next update:     Sat 31 Jan 2026 14:20:35 +0000
Files and hashes:         1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: vhY56aw2etanA3JUNL/mR1PDEzT0VjGN+iwLU0W/1CI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13655 (0x3557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
        Validity
            Not Before: Jan 24 14:20:35 2026 GMT
            Not After : Jan 31 14:20:35 2026 GMT
        Subject: CN=6974d533-65ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:39:39:ec:11:24:b4:50:03:2a:ac:d1:20:
                    03:16:be:be:9b:9a:14:8b:3f:4f:5f:2e:4d:45:ec:
                    5f:f8:2f:6e:27:d7:59:0a:5d:e1:0f:a5:32:49:8a:
                    81:9a:04:a8:95:0d:a7:08:c0:a3:4a:7b:75:c3:a7:
                    1a:6a:25:4a:9b:68:59:92:69:06:22:28:d8:9c:4a:
                    6f:76:9b:77:c3:2a:0a:9d:36:0a:c5:01:81:bb:99:
                    3e:53:f9:3d:31:49:68:f3:3b:4f:2a:66:20:05:23:
                    07:4d:3f:28:50:83:55:ff:9a:e0:08:22:09:3b:53:
                    c7:22:63:0f:56:55:94:73:4b:f0:1e:80:44:7e:54:
                    8b:37:c0:fd:b8:91:3f:a0:0d:a1:c1:c5:8e:4c:4a:
                    26:23:88:e3:d8:68:05:6d:91:84:eb:82:9e:a5:52:
                    dd:2d:e3:71:be:f7:88:8d:58:59:5a:0b:97:9d:41:
                    d4:d9:ce:ee:18:18:71:12:fd:b9:f3:d6:f6:33:e3:
                    f8:a1:78:b3:43:d9:7e:fa:b0:16:43:e9:9c:24:74:
                    bc:93:b7:68:f0:ef:62:46:51:26:b4:2a:b9:92:89:
                    ee:47:49:18:95:e5:81:72:92:55:e1:34:e4:5e:87:
                    2a:95:34:f6:72:8f:d9:45:4b:02:34:77:97:74:2d:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:33:23:7F:7D:C8:59:39:9A:A7:47:7F:2A:4E:E1:3E:F9:28:A4:4C
            X509v3 Authority Key Identifier:
                keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:8d:42:dd:c5:31:a5:b6:d8:ab:30:05:f7:77:ed:2d:1c:17:
         94:60:db:24:2d:1e:e1:67:23:9a:3d:2d:94:83:2b:56:45:69:
         a2:ce:3b:a7:b1:7c:9d:06:87:83:d6:18:0a:b9:5e:33:dc:65:
         10:46:e5:49:7f:94:9a:a8:56:19:37:54:ab:2e:1a:72:59:b9:
         0b:fa:07:5e:ae:8e:99:7a:5f:c5:99:8b:c5:db:e5:29:d5:8f:
         62:fa:79:51:e6:46:bd:46:51:f6:72:c2:00:98:47:f5:bb:36:
         77:fa:58:19:22:92:6a:42:5f:10:57:38:b1:02:87:e4:0d:a9:
         02:65:d2:32:fc:d5:09:13:2c:f7:9a:9b:99:81:d1:bd:d9:c1:
         a7:1e:66:b4:ef:5f:b2:31:8b:b4:db:e8:40:1c:b0:a1:74:62:
         09:e4:ac:b1:6c:4f:a1:b6:6d:c3:82:2b:d2:ba:33:f0:10:c9:
         c3:d7:87:f8:39:9a:86:d5:c4:17:9d:5d:0c:63:b3:1f:d6:06:
         35:bc:e6:8f:07:4f:32:a2:49:ac:98:8c:3d:56:e8:48:05:46:
         00:80:13:24:7a:d8:b6:dc:d5:3f:68:b5:7c:6f:6b:e8:b5:30:
         b6:3c:37:a4:44:cd:b5:16:1e:c7:14:4f:ab:91:81:7a:6d:97:
         02:2d:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:37 2026 by rpki-client