This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
File:                     r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json)
Hash identifier:          19Zrg+yfDwExq1vdvszAGsLKjew+9d6H24YL7+ycRoM=
Subject key identifier:   52:7D:FF:FD:F9:C3:AE:77:DE:F0:FA:E4:5C:AF:28:C8:68:BF:14:53
Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84
Certificate issuer:       /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
Certificate serial:       0875
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
Manifest number:          0868
Signing time:             Sat 24 Jan 2026 20:04:47 +0000
Manifest this update:     Sat 24 Jan 2026 20:04:46 +0000
Manifest next update:     Sat 31 Jan 2026 20:04:46 +0000
Files and hashes:         1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: 2Ufi+rW++nlFxyfWll3+NI11LLhvIFe47XYxRHwDaro=)
                          2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
        Validity
            Not Before: Jan 24 20:04:46 2026 GMT
            Not After : Jan 31 20:04:46 2026 GMT
        Subject: CN=697525de-074f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:3d:96:0b:d6:75:c5:b9:ca:5c:6a:c9:d0:
                    4a:78:a4:b6:2e:45:23:09:f0:98:33:42:e5:86:85:
                    de:4b:ba:6e:bf:90:07:03:3d:80:25:20:d5:ab:0e:
                    0c:1d:f0:a6:cd:2a:75:2d:5d:01:99:d6:a0:5e:21:
                    6e:fb:db:9f:bf:46:e4:f3:6f:c3:a8:16:16:e6:8e:
                    31:50:38:30:d5:83:f1:d1:72:e5:9e:04:d8:34:21:
                    ff:bf:20:47:c5:6b:de:22:16:ac:64:9c:78:82:38:
                    c4:b7:c7:10:c0:d8:58:c2:76:4a:b9:e6:c1:ce:ec:
                    ab:1b:a1:ad:ac:fb:d5:37:ce:de:21:8f:46:2f:0c:
                    35:4f:6b:01:6e:17:d5:07:f6:b5:53:8b:fe:ea:54:
                    ca:3d:7d:c3:28:7c:27:f9:57:7e:36:67:31:02:7d:
                    b7:41:12:49:3c:b7:3d:e6:69:e6:de:97:fa:3e:f6:
                    89:39:af:76:7d:72:21:af:11:fb:e0:be:da:97:02:
                    a6:29:cf:8a:5e:26:75:dc:0e:30:ba:6e:bc:45:ed:
                    13:6f:78:c2:7e:9c:fb:71:3a:80:d3:0a:90:cf:ba:
                    c4:06:b5:b1:a1:5e:3b:2c:ce:20:cc:61:07:b2:61:
                    0f:0b:21:8a:47:92:e0:f6:4e:02:3a:9a:94:3c:1d:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:FF:FD:F9:C3:AE:77:DE:F0:FA:E4:5C:AF:28:C8:68:BF:14:53
            X509v3 Authority Key Identifier:
                keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:93:1c:4d:1e:d2:aa:82:22:6b:3f:46:ce:8f:2c:3c:cf:b0:
         6b:9c:71:fb:17:b4:a7:80:41:2b:65:17:35:6b:55:b3:e1:74:
         61:bd:12:b7:1b:c7:7a:c2:b6:23:37:58:bf:ef:70:aa:64:a0:
         a6:f7:2f:47:19:80:57:52:cf:29:81:25:0b:ec:a4:97:72:04:
         fe:7c:7a:49:59:f9:88:58:9f:3a:c7:6b:eb:fb:45:ef:61:d2:
         e2:a6:83:8e:67:92:7c:93:5c:98:e4:73:ea:64:04:5b:e5:a7:
         c2:36:af:25:cb:82:36:9a:bf:6c:db:df:20:e2:e6:03:79:8a:
         a7:54:4b:fe:09:08:8b:bf:f2:bc:70:3d:ca:51:8e:d6:36:54:
         99:ea:bd:40:24:09:6b:84:58:81:b9:07:7d:c1:bc:fc:db:db:
         73:1b:10:19:5b:de:be:db:9a:a7:fb:a5:00:a8:33:8b:6c:ce:
         41:7f:e0:8a:70:f2:c5:ba:76:2a:73:4c:6a:e0:fd:2a:ec:e1:
         3a:d3:f3:ab:dc:0b:98:6a:23:83:77:6d:42:8d:a2:c2:14:07:
         8b:d4:e9:1b:58:9c:6d:b5:31:4e:4a:04:95:7c:21:ef:73:03:
         2f:44:c5:6a:9a:47:8b:ac:d9:ab:9c:8b:22:49:53:cd:b6:9c:
         4e:97:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:17 2026 by rpki-client