This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
File:                     -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json)
Hash identifier:          UDK8pI5nP4074bH/XVrhQ/0APzLTts2lZTtIaumd9Uo=
Subject key identifier:   E9:AE:F5:8A:0B:2B:01:B7:9E:39:21:5B:29:7B:50:10:97:C4:07:98
Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E
Certificate issuer:       /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
Manifest number:          56
Signing time:             Sun 25 Jan 2026 06:17:21 +0000
Manifest this update:     Sun 25 Jan 2026 06:17:21 +0000
Manifest next update:     Sun 01 Feb 2026 06:17:21 +0000
Files and hashes:         1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: MkEnEUqvafw6dGi3LuYT1o2Oirf+jnkZg/KuwJqpkqs=)
                          2: D18B4798F06C11F09D48C4D25F6F56BC.roa (hash: ymEzb/RjC4f4Bak2B8TgUUQP9Ab0CH8UTwhKHwIfDvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl
                          rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E
        Validity
            Not Before: Jan 25 06:17:21 2026 GMT
            Not After : Feb  1 06:17:21 2026 GMT
        Subject: CN=6975b571-6a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:47:2b:ca:d5:26:eb:4f:0c:23:58:44:f1:
                    4e:fd:37:1c:43:0d:f8:b8:2e:f0:ec:5b:db:a4:11:
                    ce:48:52:87:7d:53:d0:80:e4:b8:ba:ed:72:4c:77:
                    4b:a2:55:d9:fe:bd:49:fe:5d:9f:30:b1:84:1a:bd:
                    7b:76:96:2c:91:1f:4a:64:01:dc:45:89:33:0f:f1:
                    16:0e:aa:85:cf:0f:e6:68:f1:47:41:a8:2e:e5:64:
                    ac:bf:f5:14:f0:9a:d2:39:6d:69:02:44:d8:31:3c:
                    0c:43:ee:86:14:c1:ef:1b:c6:47:94:b9:17:6f:80:
                    48:2d:91:97:41:e4:a3:28:70:20:4d:21:fa:9b:ef:
                    88:ef:b7:8d:a7:c4:f2:c2:c7:12:70:a2:47:ab:9f:
                    b6:82:4a:81:15:4a:16:db:1d:a1:c4:81:37:51:ca:
                    e1:69:15:78:0b:3b:92:fe:81:98:db:ab:97:b5:7b:
                    cd:a1:ea:33:41:c1:a2:ed:28:51:ac:64:c6:81:59:
                    2b:46:75:6d:cf:6d:b1:d0:78:94:d4:53:31:81:ed:
                    4f:02:20:54:04:ce:1e:07:e2:ae:43:73:20:8e:78:
                    e5:99:9d:fc:41:f7:b6:e7:f2:ed:48:94:ab:46:a0:
                    57:65:ca:09:b8:17:9e:79:80:a7:9e:35:5e:83:3c:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AE:F5:8A:0B:2B:01:B7:9E:39:21:5B:29:7B:50:10:97:C4:07:98
            X509v3 Authority Key Identifier:
                keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:df:7b:94:7e:a3:84:99:fa:ae:ce:0b:91:b0:6e:1c:59:
         00:ae:ab:1e:6a:a9:42:2d:55:1e:5b:76:28:c8:12:bc:af:df:
         09:3f:dc:68:36:1b:86:9d:a5:aa:df:db:79:37:31:eb:3e:b3:
         80:18:8a:61:5c:7c:85:3f:77:2d:a9:0b:05:6a:51:3f:87:ca:
         23:27:de:23:e6:ce:79:8f:0d:f8:59:27:5a:a2:07:90:67:34:
         0e:52:b0:fd:83:c1:75:b8:48:82:e5:d6:4a:7a:bf:4c:f9:00:
         a3:71:80:80:06:7b:c8:1a:e3:16:4a:50:31:6f:d9:ea:4e:28:
         6d:3e:6e:bd:e6:1f:44:6a:9e:ce:87:f0:20:03:83:e9:a2:bc:
         70:92:6b:bd:e9:e9:5c:34:c0:8e:a0:d6:04:3d:55:1b:37:b7:
         2b:14:69:aa:51:5d:14:59:68:a3:9f:9f:9d:d9:22:5e:2e:5c:
         bb:23:c2:cc:38:85:a4:b2:08:9f:2c:61:38:b8:ae:2a:01:38:
         52:45:1c:56:b8:da:50:77:e6:55:57:22:f1:6b:4f:6d:00:e1:
         b1:98:c9:f3:a3:d1:f7:2b:03:27:ef:06:ca:3b:3c:6f:e2:ac:
         ea:7a:2e:3a:96:98:03:4e:a1:4b:ec:69:ba:ad:52:7d:06:67:
         3c:75:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:30:02 2026 by rpki-client