This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
File:                     DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json)
Hash identifier:          RHMH0nIxQag+y6t3RXaD1y5Zta+XzU4bqjH7hmeuv2E=
Subject key identifier:   8F:8A:8E:0B:67:C4:0B:05:C6:86:40:64:79:34:6E:8E:A6:DE:07:51
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Certificate issuer:       /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
Manifest number:          8E
Signing time:             Sun 25 Jan 2026 05:40:05 +0000
Manifest this update:     Sun 25 Jan 2026 05:40:05 +0000
Manifest next update:     Sun 01 Feb 2026 05:40:05 +0000
Files and hashes:         1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: idx5bgPMawcgWmr3Udu+d6fD7sqWqOpICsj5LXIlLZs=)
                          2: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 7JB/cgKUwfUR4YGlIPTezqpMMVQ3OA1LBmpMpECbKmQ=)
                          3: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: ttGRTVXm63FmqLPQgqhgqVrA4iCgFY4E8md2K51N5m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
        Validity
            Not Before: Jan 25 05:40:05 2026 GMT
            Not After : Feb  1 05:40:05 2026 GMT
        Subject: CN=6975acb5-b44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:59:16:48:b7:af:17:81:b7:81:1b:75:ba:
                    57:f3:1f:ff:1a:2d:d6:88:12:4b:d8:3f:5b:5c:a9:
                    a1:c1:1e:09:56:95:12:a6:44:53:4f:98:f5:c0:92:
                    64:c7:57:f6:1c:8a:12:7e:5f:de:4c:4d:cb:28:15:
                    bf:64:93:46:b0:c8:93:4d:5f:9f:06:78:1b:8b:ee:
                    1e:0d:86:d5:42:d2:16:99:91:37:b3:8c:c2:87:40:
                    5f:ac:0b:cc:0f:de:35:32:6c:5d:9d:0e:ee:dc:ef:
                    75:77:3a:0f:a9:81:7b:e6:f7:16:9b:96:e8:c6:b3:
                    28:20:82:b9:48:b4:a6:2a:73:13:1f:f3:21:c6:eb:
                    82:3f:a8:07:bb:c6:f5:c2:08:52:78:6a:68:7e:18:
                    9e:9f:bb:b4:35:bc:de:2d:bf:45:0f:63:35:b7:c4:
                    ae:ac:7f:22:96:6d:cd:8f:f9:19:fb:04:a1:14:96:
                    56:df:ae:d9:fe:50:bb:de:24:81:1e:8a:15:0e:c7:
                    61:3d:08:f2:73:f3:f3:f2:ed:2a:7b:68:fa:72:d5:
                    e1:f5:f3:16:6d:80:ee:4f:48:03:5f:f4:1c:09:15:
                    f1:af:88:56:51:00:a6:26:97:10:26:c2:8e:a9:e4:
                    bd:be:7a:72:48:6d:64:bb:57:d8:4c:4f:43:9e:05:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8A:8E:0B:67:C4:0B:05:C6:86:40:64:79:34:6E:8E:A6:DE:07:51
            X509v3 Authority Key Identifier:
                keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:54:ba:72:13:e7:93:09:93:82:db:5d:b3:13:28:58:14:6d:
         bc:f4:8f:2c:03:56:97:d1:67:37:c5:f4:87:44:2f:98:e6:7e:
         a1:8d:cb:52:3c:de:25:2b:e9:34:da:31:29:70:41:68:5f:19:
         62:28:4a:d2:3d:22:aa:cf:a8:51:4e:e4:f4:44:b9:2c:36:d4:
         91:ac:3a:46:d5:80:07:c2:6d:86:c9:86:51:fa:83:72:7e:73:
         33:cc:f4:b4:36:f9:31:e1:fa:49:93:31:86:92:73:9a:3a:f5:
         8a:46:c6:89:7e:00:48:2c:32:b7:fa:aa:3c:14:52:05:03:06:
         c2:da:dc:8f:8d:9c:ec:00:33:0f:de:0a:f2:61:d7:34:f2:32:
         2a:f7:e6:96:ab:36:a9:47:a0:f9:dd:00:99:eb:6a:2e:5d:0b:
         67:f9:04:88:d0:0a:4a:64:59:d4:44:d1:65:9e:9f:11:51:d0:
         7e:a8:ac:4a:dd:fb:63:f5:fb:34:04:13:eb:67:e5:11:00:29:
         47:fe:6f:4a:d5:1d:74:0a:c3:b5:29:dc:76:bf:01:aa:22:3b:
         a8:75:ba:8a:aa:b1:70:47:bd:85:66:3a:d9:6e:7d:fb:99:1a:
         5b:12:6d:ba:2f:3f:5e:78:49:87:2f:93:57:19:f7:a5:b5:c6:
         b5:c1:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:57:55 2026 by rpki-client