This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
File:                     jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json)
Hash identifier:          m+Zul6ltDWSBSTmsTx3yk0WgWmXKs5a5OTdJg8u9Qlw=
Subject key identifier:   FC:37:B7:31:8D:1D:49:74:FC:DE:CE:1D:1E:35:5A:5B:AE:08:02:95
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Certificate issuer:       /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
Manifest number:          059E
Signing time:             Sat 24 Jan 2026 22:30:54 +0000
Manifest this update:     Sat 24 Jan 2026 22:30:53 +0000
Manifest next update:     Sat 31 Jan 2026 22:30:53 +0000
Files and hashes:         1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: PWQi5QfBnhUMl8LRdvKY7fZ9v87vGBbu4tA7EPzzTU8=)
                          2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
        Validity
            Not Before: Jan 24 22:30:53 2026 GMT
            Not After : Jan 31 22:30:53 2026 GMT
        Subject: CN=6975481d-8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:f9:32:ec:fd:18:39:ed:51:43:63:c4:4d:
                    82:0b:16:2d:bd:b7:7e:c8:6c:0b:c8:67:e1:71:f6:
                    5f:0e:1c:4c:57:06:5d:b3:df:02:70:70:98:44:1e:
                    91:85:dd:0d:73:98:f5:4f:f8:69:14:bd:39:9a:ec:
                    21:7b:be:f8:ca:9f:73:41:d6:7f:ba:44:2e:4d:63:
                    c1:3e:cd:61:4f:85:6e:e1:8c:23:9f:48:c9:31:c9:
                    c8:b5:99:bb:b5:3b:95:74:61:34:2e:eb:c9:8d:47:
                    0f:40:88:8d:c9:90:70:dd:10:10:5f:64:ab:5e:6d:
                    a3:28:d3:a8:9b:70:a5:45:87:2e:38:02:85:89:3e:
                    bf:9d:03:54:1b:2d:b0:94:b1:1c:d4:24:7f:89:e2:
                    77:5f:b9:d9:a7:68:be:3a:c0:4e:be:3b:56:9d:a9:
                    f0:4d:59:60:71:fb:b5:a7:20:c5:0b:d2:e4:7c:b7:
                    f4:48:d7:62:80:b7:1b:61:88:1f:a6:80:e5:45:38:
                    8a:56:78:7d:44:48:bb:12:9d:80:02:1a:67:de:6a:
                    3b:59:d7:a5:81:6f:81:f0:a0:ca:e0:dd:df:68:cb:
                    f0:39:04:b8:6f:f3:ef:4d:dc:15:31:b3:b9:25:85:
                    3e:16:9f:32:03:b5:ef:a3:1f:5d:d1:05:9c:d3:d9:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:B7:31:8D:1D:49:74:FC:DE:CE:1D:1E:35:5A:5B:AE:08:02:95
            X509v3 Authority Key Identifier:
                keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6c:e3:9a:06:f3:dc:c1:f7:d9:7d:98:be:02:ff:54:97:47:
         90:5a:12:34:20:74:49:28:a6:8c:3d:3b:28:c4:e6:ce:cf:f6:
         e2:2c:55:e6:e9:31:ae:08:d2:21:73:1d:53:17:db:04:69:81:
         10:df:33:1b:2a:85:7a:1b:6b:f3:07:3e:79:43:4f:fc:8b:57:
         4f:1a:6e:b8:2e:33:9e:76:bf:09:c8:af:83:36:b9:3a:6b:11:
         1d:92:b9:5d:d0:5c:c7:b5:84:64:06:47:5f:ca:6e:17:e6:33:
         d5:3f:17:b1:fd:c9:fe:30:6e:19:64:1b:33:2a:81:09:ee:99:
         9e:37:82:92:88:c9:6e:88:0e:7f:df:d5:10:5b:3c:4a:9a:14:
         43:da:48:98:5f:c5:2c:ef:e0:1a:7a:fb:92:5c:16:cd:b7:3e:
         be:38:2e:94:d7:a8:c0:56:dd:36:a4:31:64:cc:27:dc:0d:77:
         11:fb:a2:6f:e3:3f:b3:5e:c6:ac:1b:14:74:98:ca:c4:bc:16:
         8c:87:ab:aa:dc:0d:3f:6d:64:33:41:19:e3:f3:fd:c5:f3:a6:
         51:de:92:d3:3a:fe:fc:61:98:ab:bf:fc:02:c7:f0:65:c8:d5:
         15:73:47:a1:8a:5e:6b:ea:95:e1:89:08:43:f6:40:de:d4:0e:
         db:2b:de:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyOTAxMTAvBgNVBAUTKDhENUJBQjM3MENBOTJFNEY1RkQ3ODlGQzIyNzMzMTBG
OUFFQTM4RjYwHhcNMjYwMTI0MjIzMDUzWhcNMjYwMTMxMjIzMDUzWjAYMRYwFAYD
VQQDDA02OTc1NDgxZC04NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Tv5Muz9GDntUUNjxE2CCxYtvbd+yGwLyGfhcfZfDhxMVwZds98CcHCYRB6R
hd0Nc5j1T/hpFL05muwhe774yp9zQdZ/ukQuTWPBPs1hT4Vu4Ywjn0jJMcnItZm7
tTuVdGE0LuvJjUcPQIiNyZBw3RAQX2SrXm2jKNOom3ClRYcuOAKFiT6/nQNUGy2w
lLEc1CR/ieJ3X7nZp2i+OsBOvjtWnanwTVlgcfu1pyDFC9LkfLf0SNdigLcbYYgf
poDlRTiKVnh9REi7Ep2AAhpn3mo7WdelgW+B8KDK4N3faMvwOQS4b/PvTdwVMbO5
JYU+Fp8yA7Xvox9d0QWc09lHAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw3tzGN
HUl0/N7OHR41WluuCAKVMB8GA1UdIwQYMBaAFI1bqzcMqS5PX9eJ/CJzMQ+a6jj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzI5MC9GNjgxNDFFMDBC
MDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExrOWYxNG44SW5NeEQ1cnFP
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWdXJOd3lwTGs5ZjE0bjhJbk14RDVycU9QWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzI5MC9GNjgxNDFFMDBCMDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExr
OWYxNG44SW5NeEQ1cnFPUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7bOOaBvPcwffZfZi+Av9Ul0eQWhI0IHRJKKaMPTsoxObOz/biLFXm
6TGuCNIhcx1TF9sEaYEQ3zMbKoV6G2vzBz55Q0/8i1dPGm64LjOedr8JyK+DNrk6
axEdkrld0FzHtYRkBkdfym4X5jPVPxex/cn+MG4ZZBszKoEJ7pmeN4KSiMluiA5/
39UQWzxKmhRD2kiYX8Us7+AaevuSXBbNtz6+OC6U16jAVt02pDFkzCfcDXcR+6Jv
4z+zXsasGxR0mMrEvBaMh6uq3A0/bWQzQRnj8/3F86ZR3pLTOv78YZirv/wCx/Bl
yNUVc0ehil5r6pXhiQhD9kDe1A7bK97W
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:19 2026 by rpki-client