This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
File:                     JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json)
Hash identifier:          ZoyZ7CwgVW41rlItxxqC/V/fmbaOPN+C8D6HVQhGMX8=
Subject key identifier:   F7:70:BD:CC:96:5A:08:12:FA:CB:35:EE:F1:4A:F4:95:46:60:2C:B1
Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB
Certificate issuer:       /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
Certificate serial:       023F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
Manifest number:          0233
Signing time:             Fri 23 Jan 2026 01:11:16 +0000
Manifest this update:     Fri 23 Jan 2026 01:11:15 +0000
Manifest next update:     Fri 30 Jan 2026 01:11:15 +0000
Files and hashes:         1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: cFdMPpE0tluutiq2880cBOxwMmMHV+gkV4AtnLURN8E=)
                          2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 9jnw1aARjHyF52AZmLzz1KZPU/gVKpTI8tsdq5qbfSk=)
                          3: 6696898E98C711ED81343D33C4F9AE02.roa (hash: /wwDND7QccrcqJxhHF46a4yMNxr2Ty/mu+4DhWd/iqA=)
                          4: 660CF80498C711ED81343D33C4F9AE02.roa (hash: uheRD5R108rfOXweynaljqfwmSw850yqoXx0a1F97Fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 01:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB
        Validity
            Not Before: Jan 23 01:11:15 2026 GMT
            Not After : Jan 30 01:11:15 2026 GMT
        Subject: CN=6972cab4-bc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:49:e3:3d:ce:ff:5b:be:e4:05:ec:2c:1a:
                    df:92:61:a5:06:77:f1:43:29:6a:a6:9e:cc:aa:c7:
                    c5:d1:aa:3d:59:40:26:6b:18:5f:70:fd:c6:fd:03:
                    19:7f:95:aa:bd:5b:ba:66:d1:72:94:02:6c:46:53:
                    13:08:8c:5a:14:94:15:25:c2:57:ba:7b:98:4d:39:
                    10:d7:24:ea:31:f5:85:8b:59:0d:8f:70:40:3a:ec:
                    4d:9c:de:e6:d9:8c:e6:63:59:95:f6:34:f9:90:ac:
                    c1:a3:d9:49:3b:13:25:d5:88:99:c4:3d:b7:c6:b5:
                    b6:2e:53:9b:41:8a:75:db:ff:4f:b3:00:12:0d:a0:
                    01:9d:3e:93:53:7d:ff:12:43:ce:9e:fd:fd:be:e7:
                    b2:a9:31:c0:ed:8d:f6:72:83:85:85:ab:26:a6:fd:
                    f4:c9:3d:2c:a4:65:f1:40:57:bd:2a:47:d9:b7:b3:
                    fa:0a:7a:4e:20:29:ec:92:38:f1:68:bc:84:c8:e3:
                    d4:29:56:eb:db:05:3e:8b:a6:03:da:26:58:47:80:
                    e9:4a:01:16:54:ed:96:8a:c0:fd:c7:e5:55:f4:4e:
                    7f:df:f8:7f:8e:67:62:50:7f:26:3f:d6:7a:87:11:
                    c1:f4:09:f4:c1:65:ec:91:8c:ca:ca:4d:c1:cd:53:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:BD:CC:96:5A:08:12:FA:CB:35:EE:F1:4A:F4:95:46:60:2C:B1
            X509v3 Authority Key Identifier:
                keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:be:5b:fc:67:4f:ac:f6:84:c6:b8:83:ef:58:39:83:86:
         c4:d6:bd:2f:fa:ba:71:2a:a6:97:ac:78:df:67:5d:97:3a:96:
         86:51:63:86:d0:3e:01:de:bc:80:7c:00:b3:3b:45:99:03:36:
         d4:f5:58:5e:b7:64:48:9f:51:c0:6d:34:c5:a5:8b:dc:1b:e6:
         dc:20:0b:cc:ab:05:e1:17:ea:5c:89:36:2a:f5:1a:7a:30:dd:
         20:10:9b:e7:ee:29:d2:fc:cd:b2:bc:f7:6c:a3:63:09:8c:e9:
         3b:3f:3e:75:30:80:f4:fe:a5:83:e8:36:a8:cd:a4:ce:1d:c3:
         7a:43:9c:48:67:16:aa:3d:01:e0:c8:9b:31:f6:c7:09:f5:bc:
         9b:da:f0:45:c3:5c:bb:16:43:9c:c3:e9:9e:99:be:7e:5b:92:
         d6:c1:95:9f:e5:45:27:51:cd:9d:e3:b1:06:25:00:b1:9a:16:
         fd:07:07:04:7c:4e:c2:f5:2e:ed:67:f6:de:e4:5b:a1:f4:f5:
         bd:af:18:3b:89:cc:ef:f3:d4:ec:b8:2d:33:97:37:30:f4:fd:
         fe:67:54:64:24:a7:d2:ea:29:62:dc:eb:50:51:e0:af:07:78:
         4c:09:3b:31:0c:48:f7:4f:d7:49:1a:4b:fe:9e:2d:6c:d1:1e:
         e8:98:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:43 2026 by rpki-client