This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
File:                     Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json)
Hash identifier:          RGm1c9nt21zZlf0p9JHHBfDwJk3kMOx/Ffo0Iq6GcpI=
Subject key identifier:   AA:D2:A4:0D:DF:05:6E:EA:94:48:6B:7F:CF:5C:47:02:26:C7:DE:D5
Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
Certificate issuer:       /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
Certificate serial:       04F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
Manifest number:          04E6
Signing time:             Sat 24 Jan 2026 23:00:27 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:26 +0000
Manifest next update:     Sat 31 Jan 2026 23:00:26 +0000
Files and hashes:         1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: t+nYLMz/c9flaWnQS8NA2Uesyp7ArocfFCGFI5OiVOg=)
                          2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: 3HpM5sDyPcBnfCNQnGdseSNgNAwpkHGO3HMNHlML1pM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl
                          rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
        Validity
            Not Before: Jan 24 23:00:26 2026 GMT
            Not After : Jan 31 23:00:26 2026 GMT
        Subject: CN=69754f0b-cab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:a6:bd:ef:db:b8:dd:67:e8:4e:b6:f5:b5:
                    c9:95:72:8c:a0:57:8f:2f:fa:d9:3c:5d:15:50:f0:
                    32:50:db:5f:9a:df:8d:7e:ad:6c:01:29:ea:e9:4c:
                    88:3d:63:15:18:15:bb:38:b8:f4:e6:91:65:70:b9:
                    2b:00:63:77:d4:6d:bc:21:fe:56:02:c7:eb:81:da:
                    0e:3b:89:7b:ea:d7:ec:89:14:be:8d:54:b2:cf:9a:
                    8b:fe:41:e1:57:29:25:5d:01:dd:e5:73:9b:ef:34:
                    75:b8:63:24:31:01:26:67:00:b9:b2:7a:42:a8:57:
                    71:13:f9:66:c7:47:ce:4d:0a:21:47:3c:36:37:7d:
                    71:15:c6:f7:c0:20:29:f1:f0:f8:87:8e:d9:07:f1:
                    ef:a9:1f:9c:4f:8d:ff:19:98:87:94:40:b8:46:7e:
                    30:4c:3f:b8:cb:fb:a4:2c:00:f1:73:e7:93:77:af:
                    3c:f8:2f:66:56:36:a6:a8:b3:1b:64:03:98:f6:e8:
                    2c:87:d4:cf:3c:04:e1:05:08:97:0d:0d:3d:ef:f4:
                    6e:1f:70:71:31:6f:d3:bd:59:f9:0b:06:18:0e:98:
                    68:5d:f3:36:dd:7c:d9:bd:6f:38:06:78:d4:bc:ff:
                    5e:5c:d9:6d:7b:8d:ea:cf:63:af:b8:04:66:ed:14:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D2:A4:0D:DF:05:6E:EA:94:48:6B:7F:CF:5C:47:02:26:C7:DE:D5
            X509v3 Authority Key Identifier:
                keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:d6:3a:62:d6:dd:a6:9b:ae:14:2a:25:51:58:8b:89:95:
         71:10:4f:91:6f:1f:3d:12:bb:01:ab:0c:2f:4c:1a:f1:0c:0a:
         7d:6c:23:c1:bf:f7:b0:be:1d:96:48:e5:04:90:7a:0e:18:93:
         8a:73:7c:f2:14:17:7f:ec:f0:c1:a4:f3:30:22:99:15:e3:35:
         8e:2d:c4:c0:2e:47:0f:ac:07:e3:99:2d:9c:83:00:87:6d:0e:
         e0:21:c6:1f:9a:50:bf:24:50:22:2c:ee:2b:4a:00:be:b5:58:
         e9:0d:3a:39:1b:b8:c4:75:32:ac:41:37:46:72:44:77:d5:7b:
         08:38:ab:53:f4:50:56:58:24:b3:22:80:d6:f0:b6:35:31:de:
         87:75:71:85:d8:35:ab:41:eb:13:5d:67:91:fa:52:da:27:c8:
         c2:a6:a4:98:f3:6d:53:bd:3b:81:a8:9d:80:2b:12:c4:9f:38:
         57:1f:b6:db:fd:c7:88:38:40:35:a1:9d:b1:29:62:36:49:52:
         df:ee:96:72:fb:50:22:c2:fd:36:f6:08:af:a5:ff:72:6f:7d:
         b4:51:6e:56:49:a7:16:08:29:8e:8f:1b:f1:3e:ea:59:95:36:
         9e:e0:ca:62:f2:06:bd:d1:e9:d0:d3:36:12:27:a7:00:f7:ed:
         00:58:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:43 2026 by rpki-client