This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File:                     MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier:          MdzlkmoYNMpaAZcJhhyzePgKtyVaaHAu15dv5QQd7Kc=
Subject key identifier:   01:D0:F6:77:3A:A5:F9:65:E3:8F:25:F3:A6:5A:53:38:BE:16:A0:59
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer:       /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial:       1E39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number:          1E14
Signing time:             Sat 24 Jan 2026 15:54:15 +0000
Manifest this update:     Sat 24 Jan 2026 15:54:15 +0000
Manifest next update:     Sat 31 Jan 2026 15:54:15 +0000
Files and hashes:         1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: b90K9Iqw0GBGSxOxRU/kGyQSApFqL7uzG7QthYyeOjQ=)
                          2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=)
                          3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=)
                          4: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: b0wxpwf8/vaYEOZtGJIbQgPEprx6ejeXyxzSbeJ8WVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7737 (0x1e39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
        Validity
            Not Before: Jan 24 15:54:15 2026 GMT
            Not After : Jan 31 15:54:15 2026 GMT
        Subject: CN=6974eb27-9f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:f5:54:b5:8b:52:ae:90:7a:ff:dd:63:d9:
                    10:27:de:d5:34:1d:64:39:69:30:a3:09:e7:d7:7b:
                    46:20:ba:18:68:85:73:19:9f:26:d7:3c:d1:b3:6e:
                    5d:3a:17:e5:2e:7a:4c:4a:51:09:73:b2:e1:11:15:
                    81:65:b9:ef:ce:31:e1:24:0a:89:50:fd:37:38:37:
                    8f:ae:89:77:ea:c7:41:a1:70:5c:d9:23:84:4d:93:
                    ab:bb:d2:08:3a:2a:41:ec:f3:7f:6a:07:73:17:a2:
                    97:63:fd:3e:39:ca:50:da:ca:b1:34:d5:ba:50:30:
                    2a:c0:92:b3:b7:64:ea:85:c4:ff:5f:32:79:b3:f1:
                    98:61:22:72:0b:97:ad:c0:d4:a8:8d:be:f1:c4:cd:
                    cc:34:62:4f:9b:51:7b:b0:2a:00:8a:0b:cd:9c:5b:
                    a2:9b:f0:f9:61:41:17:21:9f:89:6e:e3:0d:11:39:
                    c2:fe:a8:82:c0:66:73:32:13:d9:b7:4a:33:3e:3b:
                    7f:c0:b8:dd:0a:98:26:54:fd:67:68:25:1d:55:1d:
                    cb:86:5e:fa:7b:f3:ce:9b:3c:3e:65:0f:9b:8f:28:
                    60:39:da:1d:67:15:6d:09:be:89:60:84:0a:bb:d1:
                    e7:72:31:5a:db:2b:73:76:c5:b6:36:06:16:74:b2:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D0:F6:77:3A:A5:F9:65:E3:8F:25:F3:A6:5A:53:38:BE:16:A0:59
            X509v3 Authority Key Identifier:
                keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:a2:a3:be:a5:f3:94:c0:b9:fb:42:ab:0e:61:03:59:8d:
         5f:a1:46:2b:a1:16:7d:4a:fe:e9:25:f5:35:f9:9d:f1:82:f7:
         41:b0:b3:f2:7a:67:53:2d:71:03:fe:c5:e3:64:dc:b5:b7:a6:
         4a:06:3a:16:3e:ac:b4:58:24:35:9f:a1:34:e9:41:47:ac:95:
         22:5e:19:45:a5:60:a4:4c:86:51:28:91:97:d7:49:df:a1:0b:
         bb:f7:d0:e9:04:f3:4b:9c:37:a8:79:0f:73:bf:db:19:d9:43:
         93:2c:d2:55:03:5f:a2:e0:2c:6e:a3:f4:43:4a:b7:1c:a0:e2:
         02:ea:af:2a:ee:b3:4a:d7:cd:6d:fc:d1:45:ce:06:69:d2:e0:
         af:0f:d5:ec:55:75:61:ed:cc:cd:08:13:2a:5a:3f:75:69:35:
         0a:20:1f:37:1c:d4:13:0a:85:d6:ea:cc:8d:f3:01:0d:c3:48:
         90:f6:c2:52:15:88:40:82:d9:46:a6:a6:b2:f3:4c:2a:9e:90:
         2d:43:a9:72:d2:81:02:0c:5f:ed:c3:3b:15:85:59:f2:e3:56:
         d8:5a:18:f4:e2:77:8a:93:03:e7:a4:d4:e3:fe:38:ed:01:f0:
         50:ba:5d:68:82:2b:20:f3:93:0e:e9:d1:96:94:d9:46:09:f7:
         dc:51:ed:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy
RDM4OTY4NDgwHhcNMjYwMTI0MTU1NDE1WhcNMjYwMTMxMTU1NDE1WjAYMRYwFAYD
VQQDDA02OTc0ZWIyNy05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuef1VLWLUq6Qev/dY9kQJ97VNB1kOWkwownn13tGILoYaIVzGZ8m1zzRs25d
OhflLnpMSlEJc7LhERWBZbnvzjHhJAqJUP03ODeProl36sdBoXBc2SOETZOru9II
OipB7PN/agdzF6KXY/0+OcpQ2sqxNNW6UDAqwJKzt2TqhcT/XzJ5s/GYYSJyC5et
wNSojb7xxM3MNGJPm1F7sCoAigvNnFuim/D5YUEXIZ+JbuMNETnC/qiCwGZzMhPZ
t0ozPjt/wLjdCpgmVP1naCUdVR3Lhl76e/POmzw+ZQ+bjyhgOdodZxVtCb6JYIQK
u9HncjFa2ytzdsW2NgYWdLI06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHQ9nc6
pfll448l86ZaUzi+FqBZMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy
NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN
MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDzqKjvqXzlMC5+0KrDmEDWY1foUYroRZ9Sv7pJfU1+Z3xgvdBsLPy
emdTLXED/sXjZNy1t6ZKBjoWPqy0WCQ1n6E06UFHrJUiXhlFpWCkTIZRKJGX10nf
oQu799DpBPNLnDeoeQ9zv9sZ2UOTLNJVA1+i4Cxuo/RDSrccoOIC6q8q7rNK181t
/NFFzgZp0uCvD9XsVXVh7czNCBMqWj91aTUKIB83HNQTCoXW6syN8wENw0iQ9sJS
FYhAgtlGpqay80wqnpAtQ6ly0oECDF/twzsVhVny41bYWhj04neKkwPnpNTj/jjt
AfBQul1ogisg85MO6dGWlNlGCffcUe39
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:10 2026 by rpki-client