This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File:                     F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier:          2q7uxtH06G8d00ZkFlxubSzopM9LWbVWtduuMAlTcxM=
Subject key identifier:   35:9A:B1:1A:CB:BD:90:DB:3D:3D:F4:87:03:24:91:08:AE:6B:30:78
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer:       /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial:       0FB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number:          0FB0
Signing time:             Sat 24 Jan 2026 17:12:37 +0000
Manifest this update:     Sat 24 Jan 2026 17:12:36 +0000
Manifest next update:     Sat 31 Jan 2026 17:12:36 +0000
Files and hashes:         1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: DBSRu0NTqHBCNRmUv5vcQqs608nFTUp2GDteH5ldKOQ=)
                          2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
                          rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4025 (0xfb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
        Validity
            Not Before: Jan 24 17:12:36 2026 GMT
            Not After : Jan 31 17:12:36 2026 GMT
        Subject: CN=6974fd85-05a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:fb:db:f4:d4:df:17:c9:09:04:66:54:66:
                    23:3a:1c:7d:3d:40:95:fa:c6:c9:d8:a7:62:ef:2a:
                    8a:b2:40:27:45:9a:f8:59:08:46:39:73:42:2e:c8:
                    3b:03:cc:4c:dd:c7:ec:49:9b:f9:c7:03:f7:03:e3:
                    9b:c2:78:54:fd:3b:ec:8d:40:a1:67:f5:8c:d0:22:
                    7f:61:42:24:04:39:7b:2e:20:fa:64:de:3b:23:76:
                    af:90:99:27:4b:8f:e9:c1:ea:cc:69:e5:99:d5:06:
                    57:4b:8f:64:32:55:67:f7:3a:12:81:d2:56:e7:ae:
                    73:41:a9:b0:a3:94:aa:d5:79:be:d6:f8:92:cb:b9:
                    7e:8f:63:08:7f:81:cf:34:16:39:22:95:b8:5e:97:
                    42:68:48:26:e5:2f:45:cf:69:36:e3:81:84:be:dc:
                    92:4e:04:fa:41:cf:2b:b6:85:8c:40:4c:8c:59:c1:
                    76:87:9c:38:5a:ee:db:03:a6:6b:7e:11:52:d3:7d:
                    b2:05:90:b5:31:83:e3:2b:0d:ee:ab:7c:85:75:fa:
                    36:4c:8b:67:20:79:40:6f:2c:de:32:31:e3:ee:cb:
                    0c:1b:de:ed:30:da:de:40:c6:37:22:46:a8:34:b9:
                    59:b8:d6:73:ea:fc:bb:25:5a:8d:0a:2b:b2:e9:a1:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9A:B1:1A:CB:BD:90:DB:3D:3D:F4:87:03:24:91:08:AE:6B:30:78
            X509v3 Authority Key Identifier:
                keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:51:86:13:44:55:7e:0d:04:d3:7d:19:6b:25:d1:60:1b:
         50:70:da:92:cc:4a:f1:f6:0d:a4:42:84:15:66:11:7f:51:48:
         1a:0d:71:61:61:9a:00:ed:83:8d:bf:9d:9d:2f:1d:b1:24:26:
         68:f7:a0:41:59:3e:51:ad:e9:3e:bc:20:df:cf:2f:cc:24:71:
         bf:cf:34:bf:6c:60:52:ed:52:5f:f0:e3:c0:c1:e5:d9:0d:75:
         23:9c:da:b8:7e:cf:84:60:9d:bb:1e:08:82:d5:97:31:f9:4d:
         47:db:a3:03:77:52:a1:e7:11:fb:aa:09:d1:c1:0f:a9:1b:3c:
         d9:c6:f7:9c:49:34:c0:7d:2e:05:03:0a:13:2a:3d:10:fa:56:
         47:99:23:db:21:dc:ab:02:84:a5:67:4c:69:a8:29:d4:59:1a:
         5b:53:cb:bd:18:95:66:08:ea:13:de:7c:e8:d8:a9:9a:e6:b4:
         35:eb:37:aa:aa:76:e5:40:a0:bf:60:ab:12:8a:69:61:86:0a:
         e3:92:37:2e:2a:11:53:e2:7e:a5:f1:02:c9:69:4e:72:87:26:
         77:d2:50:f6:39:63:b4:a6:7e:4e:10:c5:25:0d:62:fa:8f:16:
         24:02:18:54:d5:af:ca:28:3c:24:ff:ca:65:92:a7:23:88:ce:
         41:2e:dd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:50 2026 by rpki-client