This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
File:                     MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json)
Hash identifier:          E9/z8fQJQasqIK/Jr94ehfQEzCPeWMb6LE6UMxhvnxw=
Subject key identifier:   05:E3:62:44:20:ED:F4:C3:8C:15:FE:BF:23:13:BD:B5:0B:89:21:DE
Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B
Certificate issuer:       /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
Certificate serial:       1AE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
Manifest number:          1AD9
Signing time:             Sat 24 Jan 2026 16:05:42 +0000
Manifest this update:     Sat 24 Jan 2026 16:05:41 +0000
Manifest next update:     Sat 31 Jan 2026 16:05:41 +0000
Files and hashes:         1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: UpZHZALm1JqVuMJzG7IHztp3SY+gd7bV0VYwcilz1A8=)
                          2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: JDbo72SPqBZERT5W0ydUMhl3jfbjfWwgaMjrsH1k1kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl
                          rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6884 (0x1ae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B
        Validity
            Not Before: Jan 24 16:05:41 2026 GMT
            Not After : Jan 31 16:05:41 2026 GMT
        Subject: CN=6974edd5-cbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:fe:d4:98:7b:70:dc:6d:cd:a3:c7:b9:32:
                    bb:83:d6:2d:48:8e:1d:d4:af:fc:ef:b5:13:38:55:
                    fc:0d:f9:dd:4d:c0:23:78:be:5c:10:2c:f4:68:fe:
                    cd:f1:49:50:30:b1:66:06:21:09:06:3f:b5:ac:91:
                    66:b8:a3:df:26:aa:dd:24:6f:05:99:37:ec:45:bd:
                    5d:2f:0a:68:d9:a2:04:89:6a:ce:34:ea:f1:09:dc:
                    fa:34:f2:49:bc:14:34:d1:17:0e:3e:5b:f9:91:9f:
                    e1:b8:52:80:11:bb:c3:90:04:39:38:11:ed:87:d2:
                    d8:c6:0b:99:d3:d9:30:45:d6:4e:0a:1c:09:c4:b2:
                    8d:1f:34:61:ca:eb:9d:27:67:8d:fe:44:4c:e1:e0:
                    fe:4a:3e:f3:43:c1:23:8d:27:92:51:ab:6c:94:1d:
                    ce:a1:d5:6d:a8:c0:8c:43:f6:35:c9:1d:95:8e:2e:
                    40:b5:ef:fa:33:2d:da:f2:61:9b:e1:9b:91:6c:55:
                    fc:07:bb:ab:37:68:90:66:61:49:90:dc:27:d9:41:
                    ab:c7:3f:8a:02:25:07:88:59:1c:fb:24:97:19:d6:
                    80:8b:72:28:4d:ae:84:23:2a:d6:38:6b:13:27:f0:
                    d9:a8:d3:7d:b8:de:61:cb:fb:86:fd:9b:f1:13:95:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:62:44:20:ED:F4:C3:8C:15:FE:BF:23:13:BD:B5:0B:89:21:DE
            X509v3 Authority Key Identifier:
                keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5d:06:3f:7f:22:dd:5d:96:fb:ae:57:4e:e7:81:a5:a2:35:
         b4:a5:82:d4:6c:a7:b9:67:b9:f8:17:1b:64:08:2b:73:6c:a0:
         23:e8:9b:b4:bd:91:00:0f:f6:81:02:c8:d2:1a:57:76:9c:6f:
         49:74:22:d3:46:85:7e:44:80:7b:1b:f1:06:68:64:f6:60:f8:
         23:22:b5:a2:03:64:cc:27:73:d7:06:3f:e0:8f:51:9c:30:3c:
         a6:0a:9a:97:41:0f:20:24:8f:dd:76:f3:97:fb:17:4e:fa:c6:
         ed:5b:c4:23:ff:ac:da:d6:51:ae:9a:5d:b7:bc:e1:ee:7a:19:
         c5:95:5f:4c:1e:61:2b:3a:93:e3:72:d1:d9:4d:d7:d6:a3:0f:
         6e:00:31:fe:49:2f:c5:e3:c3:18:2f:e7:7d:d4:9f:9d:89:0c:
         b7:6c:00:21:9c:10:ab:dc:a3:4e:d2:d6:3d:13:4a:71:b9:91:
         55:ff:b8:b5:ce:15:a8:97:18:49:e7:ec:c6:58:42:05:9d:2c:
         07:70:67:ac:f2:b4:5c:d8:b7:71:b2:2c:98:51:31:0b:64:b3:
         1c:40:da:1d:18:b0:82:3d:02:25:7b:81:eb:a5:93:21:f5:a6:
         0c:02:4f:fb:47:5b:84:a6:2c:fc:3f:fd:7d:3f:6a:23:79:3f:
         01:84:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:34 2026 by rpki-client