This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
File:                     PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json)
Hash identifier:          6DzRvu19hYBPXDzFdLLHhRH24vflrDsdFs0Jb6Oj8HQ=
Subject key identifier:   CE:15:BD:A9:12:6E:A1:AF:89:2C:1A:A3:C0:57:FD:A6:F6:7A:67:89
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Certificate issuer:       /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
Manifest number:          01BD
Signing time:             Fri 23 Jan 2026 02:42:40 +0000
Manifest this update:     Fri 23 Jan 2026 02:42:39 +0000
Manifest next update:     Fri 30 Jan 2026 02:42:39 +0000
Files and hashes:         1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: emycpbAZW1d5AOlMZuVXrNvY+9xqIpKHKd0z7f6Roiw=)
                          2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 1Bxl9vHMR4K0dXCavsLXW0UxkDhTA+3Edc4fDYeGeeM=)
                          3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: jHywDoNB/M5/JWK2missGRiO0nqIo+DRSIZ4F6Z5slM=)
                          4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: QgMj3I5bGTGmmj+YPUJfTzhJ0oh+U+bAGWMsBoGH6bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
        Validity
            Not Before: Jan 23 02:42:39 2026 GMT
            Not After : Jan 30 02:42:39 2026 GMT
        Subject: CN=6972e020-bf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:be:0a:44:52:30:97:af:7d:db:35:0b:34:
                    6a:a8:82:13:31:45:04:1e:bf:dd:ef:1f:2c:53:56:
                    57:86:14:6f:de:10:bd:82:0f:06:f9:c0:fc:b4:9f:
                    5e:78:7c:34:5b:49:7f:9b:7f:3f:7c:26:9c:a2:72:
                    74:94:16:19:a1:52:de:f9:15:8b:43:8c:90:8d:b5:
                    b4:02:c7:89:d3:11:f3:cf:12:e5:b5:fb:ce:e2:9f:
                    41:8a:30:0f:03:6e:50:92:36:c7:ac:dc:b1:81:66:
                    c1:32:36:da:b7:f7:72:64:54:28:57:48:f6:42:a3:
                    1d:52:78:1a:b1:22:bd:0f:9e:46:d6:82:74:66:85:
                    27:59:22:58:88:27:dc:e2:76:8b:fb:43:ab:4a:9f:
                    b0:06:50:d8:2c:11:91:0b:e2:39:90:b2:d3:e9:29:
                    35:1b:f3:1a:d9:c2:3d:58:d0:40:78:cc:88:08:fa:
                    05:d1:09:af:fd:bd:0e:71:ac:32:e5:da:6e:1b:cb:
                    85:e0:a8:9f:2c:de:2a:57:8b:64:c7:28:6a:4f:fa:
                    1b:ce:2a:e2:25:de:38:9c:d0:bf:5f:23:8d:3c:84:
                    e5:e8:c1:38:19:38:96:77:74:92:2d:2e:83:5e:85:
                    4d:1f:90:ff:d0:bc:72:5a:e5:8f:0f:ac:04:87:76:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:BD:A9:12:6E:A1:AF:89:2C:1A:A3:C0:57:FD:A6:F6:7A:67:89
            X509v3 Authority Key Identifier:
                keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:0a:74:83:1f:df:a7:04:36:6e:0d:99:7a:56:fe:b3:58:
         c4:b2:83:ed:20:66:70:3c:b8:a2:31:26:e1:78:77:a6:e2:72:
         43:fc:27:90:69:fe:91:dc:fa:3b:4c:a8:7b:1c:14:16:95:e5:
         0d:e1:f1:0b:fb:7e:69:c2:7d:fb:2a:fc:39:5a:1d:75:4d:55:
         f4:83:84:de:27:78:e6:ee:82:8d:d3:48:01:78:75:64:15:61:
         c0:3e:a5:36:f6:a9:70:3f:aa:56:99:eb:bd:e6:73:18:0b:0a:
         e0:ec:66:05:ae:cc:75:f2:82:f4:7d:28:3b:73:ff:82:65:ef:
         69:ca:e7:bd:a8:bc:88:d3:72:fe:c4:35:6e:f7:30:90:64:d6:
         56:f4:a9:44:5d:de:97:51:2b:41:a0:9c:68:6c:99:ad:11:04:
         3e:e6:53:0a:37:f1:9d:90:e6:08:da:65:53:ad:e2:9d:6c:e9:
         90:3d:b0:4e:45:57:ea:ca:0c:04:f2:27:a7:1c:c0:33:85:ad:
         d6:c8:68:d4:44:24:3f:7b:c9:72:09:02:01:a8:04:ad:b3:5c:
         5c:f5:33:c0:69:f0:45:7c:7f:e2:e9:ea:ee:3e:5f:7a:a1:ca:
         ad:3c:b4:cc:ff:53:94:59:2e:ce:42:d8:03:ee:44:ef:6f:c1:
         dd:c4:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:55 2026 by rpki-client