This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
File:                     dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json)
Hash identifier:          4zYOPVMCsxffY7gLgj0F7UvJI/7zAD6mXxFo/SyF4xY=
Subject key identifier:   F2:34:85:E8:4F:1F:EA:73:06:BF:4A:5F:F7:4E:A1:BD:F7:84:E6:6E
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Certificate issuer:       /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial:       0465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
Manifest number:          045F
Signing time:             Sat 24 Jan 2026 23:21:21 +0000
Manifest this update:     Sat 24 Jan 2026 23:21:21 +0000
Manifest next update:     Sat 31 Jan 2026 23:21:21 +0000
Files and hashes:         1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: 6BiT7sZlP5yS4IIWwSmsdblraZzBgZXf29rWiW5CFog=)
                          2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: iIiLthCmbedJRo28SgXjSnyh36vN7rpzHjXfoOnGfcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
        Validity
            Not Before: Jan 24 23:21:21 2026 GMT
            Not After : Jan 31 23:21:21 2026 GMT
        Subject: CN=697553f1-59e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7a:33:4f:82:5a:70:58:a8:c8:b7:34:38:a3:
                    6e:ab:4e:7d:86:f9:09:47:56:e6:64:c9:55:31:3e:
                    01:14:93:be:03:3e:da:d6:5d:96:49:13:63:6f:bd:
                    9f:0f:47:00:e3:88:71:87:c9:d5:1f:8f:29:4a:61:
                    ff:24:cc:d4:77:1c:46:df:bc:6a:25:13:fd:bf:83:
                    e1:51:3e:4c:ec:06:67:76:7c:04:60:ac:b1:86:42:
                    7d:14:ed:7c:ce:3a:25:10:a6:8b:c6:1d:af:98:26:
                    6f:e8:6b:cb:f1:d3:d6:af:e2:8f:0d:6b:c1:18:a2:
                    dd:86:77:26:9a:a1:ac:e7:d1:af:a6:62:d5:c8:32:
                    de:e6:1d:38:85:16:27:3e:d9:07:54:e8:1c:0f:16:
                    ec:41:13:31:6a:b8:68:25:6c:9a:0c:6f:37:df:af:
                    19:02:2d:ca:d9:f1:54:1b:79:4e:7d:f8:bd:31:54:
                    7d:15:94:b2:1f:60:a8:86:b6:61:5e:b2:78:59:95:
                    52:e2:3e:2f:c0:ff:74:75:59:0f:44:10:da:47:1f:
                    69:88:21:50:15:1a:69:62:8a:8c:ec:3b:05:98:4b:
                    12:7f:4e:58:4b:07:df:55:10:51:44:0f:81:fb:51:
                    cc:6d:8b:de:ef:3e:77:92:74:62:d7:07:41:f4:63:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:85:E8:4F:1F:EA:73:06:BF:4A:5F:F7:4E:A1:BD:F7:84:E6:6E
            X509v3 Authority Key Identifier:
                keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:08:82:2e:06:31:29:0d:49:b6:27:dd:41:39:a2:d7:8c:ca:
         fc:0e:f5:ff:7e:87:4b:f3:ae:a3:a1:86:e0:31:34:a1:16:af:
         6d:4d:a8:8e:37:fc:ed:c6:89:0c:4d:88:c5:ca:59:3c:ae:25:
         75:d5:c9:f9:0d:39:36:5d:7c:67:7b:e4:86:87:a0:85:bf:99:
         bf:40:b0:90:20:04:06:be:35:9d:56:bf:3f:9e:27:a4:bd:68:
         c6:f9:21:50:a0:7b:65:55:10:4a:d3:72:14:70:71:99:14:7b:
         5a:39:e9:de:4e:7e:59:bf:9f:1b:7b:45:47:73:57:4a:44:1f:
         68:6d:25:a6:1f:8b:9f:82:cd:bd:35:7a:0f:11:14:17:fe:3c:
         85:3a:1d:e2:6d:30:82:0a:c6:3d:52:4d:06:21:a6:a7:48:a9:
         75:69:7c:52:19:53:a6:fc:10:94:26:cf:b7:1f:e6:33:11:ef:
         86:47:73:8b:b5:56:b6:73:40:7b:0e:02:51:9f:23:46:33:09:
         43:4c:74:7a:97:3b:23:f8:2e:85:22:af:40:fe:45:51:44:52:
         88:4d:2c:62:69:56:2b:c9:a3:f1:67:fa:b0:cb:0e:60:31:01:
         4a:62:2c:1a:f2:b0:cf:72:27:00:1e:ab:82:85:4b:a6:ed:0b:
         03:93:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:42 2026 by rpki-client