This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File:                     0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier:          6GKTfeKOXXVJ5RTYU6fc4FAmkIUVEZAhY4ePkn5+uPE=
Subject key identifier:   81:BC:BC:B2:CC:32:AC:C3:36:E5:0D:C8:B3:7D:2F:B6:92:EF:31:C5
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer:       /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number:          80
Signing time:             Sun 25 Jan 2026 05:50:12 +0000
Manifest this update:     Sun 25 Jan 2026 05:50:11 +0000
Manifest next update:     Sun 01 Feb 2026 05:50:11 +0000
Files and hashes:         1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: OQ8xkT+IaCLxKuSLFzEg7n0Qo/xWk8Cnu926W9kndaQ=)
                          2: C3C056A636DD11F08C82E269C4F9AE02.roa (hash: HBKXI2AjuuTAqBzBKbi8y9q49xdsPFITyMYY5p5WuOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
        Validity
            Not Before: Jan 25 05:50:11 2026 GMT
            Not After : Feb  1 05:50:11 2026 GMT
        Subject: CN=6975af14-3ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:7a:07:16:aa:f3:bf:b0:fa:3f:a0:45:50:
                    03:5f:93:40:e3:84:15:12:54:e1:ba:82:19:05:e7:
                    8d:e3:4c:66:8f:3f:9a:c1:1a:ab:c2:ec:e5:a2:4d:
                    fb:4a:1b:47:64:45:7e:47:44:38:9f:14:f5:43:f4:
                    65:99:39:b1:fd:58:b3:9b:e0:66:02:26:1e:99:44:
                    f9:1c:f6:3b:47:2c:33:7f:2e:f0:7c:c7:86:86:da:
                    31:32:57:70:37:c2:4c:06:45:74:65:70:4b:05:9c:
                    ae:cb:40:0b:f4:80:99:e4:2b:ae:27:6a:d6:b5:cd:
                    22:95:8c:64:c3:a7:8f:88:d9:da:1c:38:92:18:7b:
                    56:d4:38:2f:a5:0d:ae:79:7b:0e:2c:76:9c:21:49:
                    b0:56:f2:78:07:f0:a5:0d:b4:ae:87:b6:44:92:98:
                    d4:d8:b0:94:db:22:92:96:c5:9f:6a:7e:36:52:29:
                    08:ba:9b:6f:52:5a:89:ec:7e:66:0d:f3:a4:a8:9d:
                    87:13:b9:20:50:6f:cc:92:42:ac:79:58:8c:6b:40:
                    48:35:99:f2:5f:bc:8c:0a:89:fd:46:8e:b1:31:b2:
                    55:90:85:ac:12:1b:2f:18:e3:cf:a5:d2:68:b4:e3:
                    0d:a9:a4:ef:3a:ea:44:b5:16:26:56:ac:79:4e:93:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BC:BC:B2:CC:32:AC:C3:36:E5:0D:C8:B3:7D:2F:B6:92:EF:31:C5
            X509v3 Authority Key Identifier:
                keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:44:ab:24:e1:3a:59:f6:9b:f8:89:29:c3:18:70:0c:ff:6e:
         88:36:77:6f:16:18:02:90:9d:cb:80:0f:3c:a7:9b:6c:29:ca:
         96:fe:6f:cf:38:cc:70:e4:2f:fd:b3:23:da:c8:6f:14:fc:f8:
         5d:50:91:26:90:45:56:a9:16:8e:ba:69:a1:5d:20:e2:0a:20:
         66:2b:a4:e3:de:fe:bb:0f:19:a5:76:84:a5:54:7b:b0:05:e0:
         d7:ed:60:a3:30:4e:65:72:0f:75:64:40:90:98:ca:8e:fb:12:
         1b:c1:ee:ea:62:01:2c:3d:4b:c0:b5:d6:e7:5c:da:8d:88:72:
         34:1e:4b:89:6a:30:f4:88:b7:74:58:1e:29:05:98:b8:82:c1:
         6c:27:45:81:63:01:43:2c:13:0b:db:65:92:73:1a:bb:5d:2e:
         1e:de:bd:06:8b:86:2f:45:82:01:53:4c:58:67:6c:17:15:18:
         e3:bf:cb:b0:b3:8c:26:83:d0:50:e6:56:be:35:c8:35:fe:6a:
         1d:90:39:6e:38:ed:dc:cf:9c:2e:00:71:7f:88:61:e0:72:05:
         fd:d2:ea:53:80:74:34:26:e0:95:1c:ab:35:30:ee:60:d6:bf:
         0b:24:b9:31:df:ec:bb:db:60:84:11:5e:73:44:43:3a:6d:97:
         02:35:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:22 2026 by rpki-client