This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File:                     b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier:          sbK++IEkDapJkaD+eKRZt5fFSmALMn5CH/PtNwa7o+s=
Subject key identifier:   66:5B:3E:B1:BC:BB:13:A3:C4:24:EE:74:94:D3:63:74:5F:80:F6:15
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer:       /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number:          014F
Signing time:             Sun 25 Jan 2026 03:35:21 +0000
Manifest this update:     Sun 25 Jan 2026 03:35:20 +0000
Manifest next update:     Sun 01 Feb 2026 03:35:20 +0000
Files and hashes:         1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: 2ln2GwXzH5Q4Fw0RG8AF/46U99DSKk0beFPMZ8D4KbA=)
                          2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4s3NtIvsEComlAClIWN0C/pBpA6ARQs8HzKhlcubCoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
        Validity
            Not Before: Jan 25 03:35:20 2026 GMT
            Not After : Feb  1 03:35:20 2026 GMT
        Subject: CN=69758f79-59f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:02:01:45:fd:78:49:4c:b2:bc:77:3f:74:
                    3c:cb:e4:49:03:a2:7c:65:c2:19:25:5a:fc:54:3e:
                    66:28:0e:5a:6d:29:14:45:78:bf:8f:29:93:64:1c:
                    34:4e:44:83:de:6f:5b:f6:65:60:4c:c9:80:c8:88:
                    f1:ed:32:78:78:e0:3f:a9:00:fb:bf:3e:e8:58:0f:
                    c3:24:2c:d1:4c:2a:4a:be:4e:c0:92:ca:45:99:fe:
                    fa:16:e5:33:97:24:95:f6:4e:95:c4:ab:16:9e:68:
                    4b:12:ab:37:5b:49:61:df:4a:5e:fb:04:a5:ef:72:
                    69:9b:08:d5:9f:78:72:c5:9a:ba:d7:a2:54:fa:ba:
                    a5:14:02:1a:da:c3:8f:8b:42:2c:9f:00:37:99:8d:
                    ed:42:4c:30:a4:25:17:d3:66:78:13:41:01:61:2f:
                    25:35:d6:d0:96:69:7b:f6:12:27:3d:dc:32:42:2e:
                    1e:d7:46:37:f3:94:4e:d6:ff:70:8b:53:39:e1:1d:
                    49:66:56:19:de:5b:e1:b2:4d:69:35:65:19:50:9d:
                    45:65:30:45:3b:35:c2:a7:f3:d3:87:f1:c1:be:b4:
                    3a:8c:f7:db:66:6e:9a:7a:e8:2a:5a:34:52:a7:a4:
                    02:6a:0d:4d:c7:67:73:43:00:70:91:51:66:71:4f:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:3E:B1:BC:BB:13:A3:C4:24:EE:74:94:D3:63:74:5F:80:F6:15
            X509v3 Authority Key Identifier:
                keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1d:d7:e7:40:d4:90:e5:27:64:6e:19:da:24:6b:21:16:ac:
         e0:7e:18:ef:97:fa:8c:0b:2d:be:ca:01:4c:df:c5:a8:ed:1e:
         21:28:e2:7f:b1:87:6c:e6:63:2a:c4:51:c8:81:0d:6f:f7:b5:
         3c:88:0c:a3:ba:06:87:4e:60:da:49:2b:85:67:5b:42:99:df:
         67:2d:fe:44:4d:e6:2d:bf:02:e9:1c:f0:12:b4:7f:37:1e:81:
         5b:35:9d:75:c3:5a:d8:fb:3a:12:95:50:66:ab:25:0c:2c:72:
         33:9e:65:ca:c4:16:ea:a9:22:d8:ed:77:3d:9b:9f:fe:38:8e:
         3c:0f:df:5f:12:52:71:9f:c1:01:37:1d:38:57:9b:db:13:57:
         de:a5:fb:32:8a:9d:80:9e:5b:ef:79:83:5a:83:7d:c9:8a:bf:
         47:11:1d:e7:d7:99:75:16:e4:5b:cb:60:e6:bc:23:13:20:57:
         07:66:a8:b1:7a:bf:a8:de:d3:90:aa:32:15:55:87:70:b9:26:
         ab:58:ed:59:16:a4:e1:82:78:cc:e4:48:6e:bb:31:ce:d3:39:
         aa:10:76:23:fc:6c:04:00:e6:df:b3:9f:6a:63:69:87:28:b9:
         37:9e:42:1c:19:32:b2:e6:ef:21:a4:db:37:ec:a7:09:4a:f3:
         df:a6:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:12 2026 by rpki-client