This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
File:                     8ghPeg88CpH4Jf79nxA18zVBWEw.mft (raw, json)
Hash identifier:          v7kmBx37QC4z8fXBgrUpW3vwYVfElrUHvR5EE+eKIBA=
Subject key identifier:   82:94:40:90:11:9A:21:1A:E8:B9:A6:AF:AD:A9:E8:87:64:70:70:AE
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Certificate issuer:       /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
Manifest number:          0290
Signing time:             Sun 25 Jan 2026 00:42:04 +0000
Manifest this update:     Sun 25 Jan 2026 00:42:04 +0000
Manifest next update:     Sun 01 Feb 2026 00:42:04 +0000
Files and hashes:         1: 8ghPeg88CpH4Jf79nxA18zVBWEw.crl (hash: BQ5PkENaExpGNengTsuHdpQs2FFNNStzK6C2C5Dnroc=)
                          2: EF0EFF5833F511EDA5C4F37DC4F9AE02.roa (hash: fi9xuBK43cEhmF28kvwaKFEKLhEO9BGiHXkRK7I94Hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
                          rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAEAF, serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
        Validity
            Not Before: Jan 25 00:42:04 2026 GMT
            Not After : Feb  1 00:42:04 2026 GMT
        Subject: CN=697566dc-7bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:ec:22:1e:3b:0c:e0:30:55:14:0a:5b:9a:
                    19:f9:23:11:81:fa:fc:8a:5f:63:91:ad:18:ff:81:
                    15:54:04:7b:d2:7f:15:e3:c7:c7:a4:a7:cd:9b:df:
                    38:56:dd:ed:b4:36:e5:65:86:29:16:29:13:ca:ae:
                    73:7d:f2:ae:94:d9:2b:2d:9c:ad:d7:2b:a9:fc:83:
                    0f:fc:28:be:d0:27:10:ca:f1:4f:8a:9d:1e:a9:54:
                    bd:5b:80:d7:5f:98:79:25:7c:a9:c6:e4:49:87:9c:
                    20:df:ee:19:d5:8b:72:b9:31:2c:62:27:2a:87:35:
                    79:30:9d:29:5d:fe:1b:bf:7b:79:3d:d6:00:73:88:
                    eb:a7:83:01:4f:a4:d9:08:35:cc:73:37:97:7d:1a:
                    65:79:51:3d:c6:da:cd:26:70:b7:05:2f:0b:34:58:
                    a5:0b:92:f3:b5:e2:24:0f:3b:c5:33:3f:69:00:12:
                    a6:f0:db:1f:56:98:c6:bf:ee:4c:5f:1e:62:e9:88:
                    cf:43:96:80:67:a8:62:08:78:5f:f0:18:77:55:0b:
                    4a:50:ba:9d:9c:cd:42:1d:66:87:43:7d:52:90:3e:
                    37:bf:2b:dc:ae:07:ed:82:83:1b:b2:be:9b:50:07:
                    1b:51:27:1a:20:6c:de:75:bf:40:9b:ec:67:cf:e0:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:94:40:90:11:9A:21:1A:E8:B9:A6:AF:AD:A9:E8:87:64:70:70:AE
            X509v3 Authority Key Identifier:
                keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:e9:aa:84:5e:70:56:8a:0e:0e:46:9b:3e:f4:15:fe:3b:
         ef:9e:5c:7c:c7:64:b6:20:f5:7f:a6:08:af:c7:fc:ea:0d:fe:
         c5:53:f0:7f:c2:12:c4:5e:5b:6d:f3:a0:cf:b2:fc:76:b3:ea:
         6f:42:29:be:71:dd:ad:47:e6:ef:3c:66:09:9f:66:db:a3:e1:
         ba:b1:b2:33:0e:ec:61:ab:fe:db:67:65:c3:85:ae:3d:9b:90:
         57:88:46:8c:1e:d8:01:93:6b:a0:4a:67:ad:65:81:a4:6a:ac:
         05:e1:64:2f:59:aa:5d:f8:36:57:da:f4:b0:b2:40:08:3f:36:
         b8:01:2e:1c:c4:48:a2:87:a4:c7:cb:06:36:0e:31:e0:8b:b6:
         35:3d:2f:64:fa:9b:44:5a:89:77:80:a6:95:2b:3a:40:00:4e:
         ee:46:66:d1:16:31:85:a8:c5:d2:ab:5a:58:89:8d:5c:24:21:
         a0:3b:1d:02:e1:28:9b:b3:19:88:6f:12:37:4b:ac:eb:27:67:
         06:27:5f:37:1d:7d:26:83:0e:58:7e:63:1c:6c:1c:90:4f:7e:
         93:8f:74:12:c9:08:02:cd:35:19:27:b3:94:d1:d0:d8:d4:55:
         1a:a5:bd:3a:35:5f:f2:1a:f9:88:ab:5f:49:84:75:0e:50:cc:
         ae:cc:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:31 2026 by rpki-client