This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File:                     p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier:          k/nFJJ6rNBcBFd32dNpVGrw9CmBxwq7DMk5CdSVotbI=
Subject key identifier:   5E:BA:C8:E2:48:87:9B:4F:47:71:2B:B0:F0:DA:F5:45:A1:C1:5A:AD
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer:       /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number:          011F
Signing time:             Sun 25 Jan 2026 03:59:21 +0000
Manifest this update:     Sun 25 Jan 2026 03:59:20 +0000
Manifest next update:     Sun 01 Feb 2026 03:59:20 +0000
Files and hashes:         1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 2uNbcuu4LRIq3oh8U1ZQd45kJV/ScCPEOyAeCmCUhDI=)
                          2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
        Validity
            Not Before: Jan 25 03:59:20 2026 GMT
            Not After : Feb  1 03:59:20 2026 GMT
        Subject: CN=69759519-3756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:28:cc:19:d4:8a:bc:61:14:a6:2d:c5:ea:
                    c0:71:bc:df:d0:d8:1d:dd:6a:6d:7a:95:d7:d8:47:
                    cc:a8:ca:8c:e2:be:cd:28:84:92:72:42:3e:26:e3:
                    32:19:84:0f:15:54:ff:9f:d9:1d:45:8b:5d:77:1c:
                    06:56:9e:d9:14:42:56:ef:08:21:ed:a2:42:95:70:
                    c7:6d:44:4d:64:ad:db:10:06:7b:f3:ad:ab:d8:f5:
                    14:5f:2b:e4:1a:db:57:e2:07:7a:8f:1b:0f:3f:35:
                    7a:d6:a2:27:fd:b4:6a:b9:a9:48:07:98:a8:f3:36:
                    b0:9f:c5:72:2e:7d:32:91:88:49:bc:c3:21:bc:5f:
                    f3:67:56:f5:14:93:1a:29:37:4d:2f:2d:78:ae:e7:
                    98:66:79:79:31:f4:f4:95:99:a3:47:31:1f:83:64:
                    0f:28:1d:9a:c3:70:49:ef:7a:16:37:28:f5:d4:4c:
                    ad:78:74:7d:d3:26:2d:f3:46:a8:33:81:c2:2c:77:
                    b2:d8:d2:61:9c:78:b9:5e:5d:5b:0f:5f:db:aa:b5:
                    0c:69:95:3c:4f:41:1b:38:23:e1:59:3c:68:4e:e9:
                    18:08:90:77:25:a9:0e:8e:5e:ee:b5:75:71:93:41:
                    96:ea:63:b8:0d:ae:0f:bb:7d:16:d3:07:bb:a1:72:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BA:C8:E2:48:87:9B:4F:47:71:2B:B0:F0:DA:F5:45:A1:C1:5A:AD
            X509v3 Authority Key Identifier:
                keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:4a:09:5f:dd:9d:0d:38:d6:c8:f9:f8:72:4a:2d:03:b9:26:
         1f:79:08:22:96:da:c9:f2:7e:de:1e:84:4f:c2:a5:4a:fc:5d:
         2e:2f:0a:38:da:ad:4c:4a:a7:dd:bb:9e:48:a6:24:61:83:22:
         19:9e:3f:b0:5f:c0:66:f8:ae:f0:16:0d:79:48:91:b4:d6:a3:
         f7:c8:1c:8a:85:1d:a3:9f:93:2f:d4:66:30:dd:95:79:18:c5:
         9b:96:0d:6b:52:d4:f7:14:33:dd:e9:a8:7e:71:ec:df:9c:d7:
         02:58:cb:5a:9a:0c:32:c7:56:5b:9f:0b:54:1b:1b:0f:85:80:
         f7:e4:8a:23:7c:ae:e1:17:bc:9a:02:f0:e8:ee:ba:dd:2d:27:
         9f:e1:81:44:bc:f7:cf:1a:90:63:ba:64:da:d0:c2:39:26:2c:
         99:c7:e6:02:f2:d9:53:02:c9:93:51:06:3c:22:a2:4b:9f:ea:
         2a:1b:b4:e7:27:e0:eb:5f:d3:53:37:43:c3:cf:9d:b5:f0:ce:
         b9:30:fb:75:de:e1:19:b3:17:d0:25:dc:e6:2f:f2:8c:c8:55:
         ea:6d:50:66:95:c5:05:36:1f:80:c4:ee:af:b3:73:59:45:d8:
         3a:d6:c3:48:1d:53:b1:e3:c0:ec:a0:34:e4:55:9c:5e:00:8d:
         a9:8a:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:39:30 2026 by rpki-client