This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
File:                     8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json)
Hash identifier:          1O2vaQ4WOhAo/0eYft+IdX/sj7STa6HEPzEmrSAsmoE=
Subject key identifier:   D4:0D:ED:01:13:F1:7C:96:FF:06:45:F6:5F:BD:EE:2B:E6:D7:29:A0
Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22
Certificate issuer:       /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
Certificate serial:       0A80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
Manifest number:          0A7A
Signing time:             Sat 24 Jan 2026 19:04:23 +0000
Manifest this update:     Sat 24 Jan 2026 19:04:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:04:22 +0000
Files and hashes:         1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: i5+lO+i4LmGZzA8iTN2HvDERF428EpQfkIot20AEqm4=)
                          2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl
                          rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2688 (0xa80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22
        Validity
            Not Before: Jan 24 19:04:22 2026 GMT
            Not After : Jan 31 19:04:22 2026 GMT
        Subject: CN=697517b7-280d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:94:ea:2f:e6:88:4c:5e:aa:5a:a1:d0:2b:
                    df:89:07:21:3f:dd:0e:85:01:0e:5b:dc:87:1e:07:
                    1f:9e:9a:92:3d:83:bd:07:36:97:99:80:88:dc:0b:
                    6e:2a:15:05:00:54:2c:eb:5f:12:60:7b:ec:a0:7e:
                    d0:ec:91:13:41:da:8f:8f:14:d6:97:fb:b7:70:7e:
                    92:3c:f0:25:4a:8b:11:cb:06:3d:0c:0f:54:72:6d:
                    1a:b5:30:32:e5:36:9d:05:69:fa:d3:28:89:da:dd:
                    da:2d:d8:4f:3c:e8:96:10:ba:81:f9:04:c0:f8:05:
                    e0:cd:78:77:e4:80:98:53:84:55:7b:54:62:e7:67:
                    0f:2d:eb:b5:09:14:bc:18:a8:0e:6e:a1:7e:d1:89:
                    90:5e:f9:9b:d9:bd:7e:0e:7a:f7:d5:6f:55:8c:eb:
                    5f:e3:b3:de:d7:00:10:1c:ea:7b:41:9e:92:16:d0:
                    30:30:14:18:25:95:fc:22:01:ab:f1:5a:66:2e:94:
                    c2:19:ff:98:35:aa:7e:92:22:7e:8c:64:bd:f6:3f:
                    e6:21:a6:85:0b:1b:46:7a:3a:a2:a2:35:b6:9c:41:
                    98:2a:c5:da:c5:f7:fa:29:03:ec:1e:0b:2a:46:fb:
                    c0:3c:9d:99:5f:f7:0c:25:08:9c:c5:17:44:c7:a2:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0D:ED:01:13:F1:7C:96:FF:06:45:F6:5F:BD:EE:2B:E6:D7:29:A0
            X509v3 Authority Key Identifier:
                keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:79:39:a9:2d:73:e9:d7:30:64:6c:d1:24:5a:c5:80:cf:65:
         dc:28:14:6f:7d:ba:aa:7d:92:a6:d0:46:84:e9:ea:40:12:6e:
         ff:f8:dd:4a:c9:a0:6e:68:e7:bf:3d:0b:55:a1:34:82:49:f3:
         b9:89:22:5b:43:26:3c:12:02:05:11:eb:29:a1:65:de:5c:f1:
         e3:18:6c:05:0d:c6:87:a8:51:d0:55:f6:2c:03:56:e0:17:96:
         57:2a:10:52:db:a6:26:ee:04:a6:e0:cc:28:c2:5d:3e:52:bf:
         10:c4:ac:95:9e:df:7d:35:0d:fa:50:81:1e:6a:0b:49:aa:ad:
         7f:60:17:5f:f8:a6:8b:d6:df:87:0b:b7:8f:50:65:b7:69:a9:
         af:83:f2:b1:57:4e:9f:f8:73:61:99:d1:9e:cf:f3:0d:69:6f:
         d8:88:59:8d:30:06:73:cb:d0:50:d1:39:85:c9:08:33:02:43:
         ee:7a:2b:86:1a:d3:d3:4c:cc:a1:7a:e1:fa:33:47:c2:72:19:
         c7:23:49:0f:a6:94:b8:19:d4:3d:cb:e2:99:ac:db:4f:28:b0:
         7b:39:e5:a1:5b:15:d6:23:46:55:11:bd:c1:13:80:b6:c8:d7:
         fc:f3:88:9c:eb:b2:a1:c4:28:fa:65:26:ff:96:2a:2e:d4:8c:
         e0:2f:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:01 2026 by rpki-client