This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File:                     cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier:          4lRPTB/PaWek/OxCY9ZGrDfcEzSql/1e7RVdxEzo0Ck=
Subject key identifier:   D7:B9:51:EE:7A:0C:B8:A3:85:E7:B3:1A:64:6E:D4:AB:DA:B3:23:5F
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       0A73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number:          0A5B
Signing time:             Sat 24 Jan 2026 19:08:01 +0000
Manifest this update:     Sat 24 Jan 2026 19:08:01 +0000
Manifest next update:     Sat 31 Jan 2026 19:08:01 +0000
Files and hashes:         1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: zNO6OKxmqzRSAJzWQp7iE5c8LtExJ3wDfX+cYgnKMZs=)
                          2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=)
                          3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675 (0xa73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: Jan 24 19:08:01 2026 GMT
            Not After : Jan 31 19:08:01 2026 GMT
        Subject: CN=69751891-c62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:d1:56:10:26:c1:d2:9d:a1:d3:01:6e:b7:
                    67:ec:a0:5c:02:88:8d:7b:aa:e5:0f:01:a2:c2:fd:
                    dd:c4:ab:9f:e2:9c:ba:03:83:ce:ba:da:59:f9:82:
                    3c:b3:f3:3d:95:90:fd:a4:f6:61:99:f0:dc:b3:b0:
                    30:fb:1d:28:a6:f6:68:43:4c:36:ce:ba:ed:0d:e0:
                    1d:0b:9c:8c:5f:6e:9b:9f:62:8b:38:5b:f5:80:9c:
                    78:57:f2:fd:48:a6:3d:e9:e3:99:ec:2e:7f:87:9d:
                    48:57:a4:3c:9c:c4:5e:3f:95:1a:83:12:39:92:a9:
                    51:97:15:72:5b:dc:15:42:10:49:4e:d6:0b:68:2f:
                    89:52:42:5f:c9:0e:99:f2:f6:99:72:0f:79:e8:5e:
                    10:7e:9a:ef:a1:21:50:f0:be:5c:21:41:2a:72:cd:
                    d7:c8:7a:38:14:f0:6d:60:dd:d8:67:ce:a2:1d:4a:
                    5b:ce:e3:6c:da:a1:11:32:39:5f:9c:6e:c1:ca:36:
                    a3:fe:66:1e:fd:a2:3b:b4:d9:8c:7d:11:6c:c8:cf:
                    7b:25:13:14:a7:2a:67:6d:2c:fa:ab:2f:15:d9:29:
                    c0:93:da:a0:9c:1f:13:b7:95:ad:00:2a:df:fc:36:
                    31:12:2a:79:8b:bd:40:7b:4f:2b:b1:5c:eb:8a:02:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:51:EE:7A:0C:B8:A3:85:E7:B3:1A:64:6E:D4:AB:DA:B3:23:5F
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:81:3b:58:40:01:d2:c5:59:a4:35:ec:cd:de:8e:a2:86:
         5a:e6:8a:37:39:20:3a:68:ff:cc:a7:2b:c5:8f:07:1d:4d:71:
         59:16:e0:a5:f2:a8:f2:b6:65:3c:71:3a:08:17:24:b6:13:f3:
         e6:51:6e:8b:62:c8:05:42:87:46:98:9e:b6:84:f0:df:c1:8c:
         bd:31:75:03:bc:14:c0:92:0f:b3:45:d1:16:11:2d:29:51:53:
         18:9e:49:fe:d8:dd:b3:19:7d:87:b5:1c:eb:39:b0:ec:80:05:
         c8:0f:1b:12:a4:b2:76:ab:59:23:74:6a:4a:8d:38:b3:eb:90:
         3d:bd:39:43:80:87:46:df:73:c8:11:bf:ba:73:f2:14:79:96:
         bc:98:62:64:05:6c:20:f1:16:b6:84:33:d6:02:95:be:fc:9c:
         99:92:a9:e9:f1:c1:2b:f9:4a:d3:b1:ca:32:5c:00:9a:ff:7a:
         c0:c0:b1:11:5e:97:66:33:08:36:08:a1:3d:1d:84:f2:27:60:
         cd:f4:f3:12:10:fc:80:08:0b:fb:47:a8:7d:d9:a5:62:ee:a0:
         2c:4e:14:39:0b:19:a2:4a:f9:9b:6a:a4:75:e6:ed:4b:7b:c5:
         29:a3:93:a4:25:fd:f4:5f:00:af:26:4f:a6:49:65:86:1c:0f:
         b6:4f:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:36 2026 by rpki-client