This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File:                     8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier:          GS0uytBbjJKO0sExSrJHJ9LR4y6am3Wikh3WRuZSAD0=
Subject key identifier:   40:41:5C:8B:BC:21:06:5A:E2:EC:2A:93:40:E6:B5:CF:39:D9:3C:47
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer:       /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial:       24EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number:          24CB
Signing time:             Sat 24 Jan 2026 15:37:17 +0000
Manifest this update:     Sat 24 Jan 2026 15:37:17 +0000
Manifest next update:     Sat 31 Jan 2026 15:37:17 +0000
Files and hashes:         1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: 6cim5HqDaEvnyyw73XveOMgC37qld5cpyro7ZqPFUQc=)
                          2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=)
                          3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
                          rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9451 (0x24eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
        Validity
            Not Before: Jan 24 15:37:17 2026 GMT
            Not After : Jan 31 15:37:17 2026 GMT
        Subject: CN=6974e72d-cab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:e9:2e:b9:1c:5a:1d:e0:12:92:bb:ac:97:
                    1c:43:46:fa:d6:8d:4e:b3:a2:ec:ca:eb:66:b4:0c:
                    32:19:17:1e:93:33:60:7e:eb:46:50:9d:64:73:e5:
                    94:27:93:69:63:d6:65:db:f3:72:7f:de:26:26:3a:
                    71:79:f0:ee:62:2c:f3:14:ab:5c:d5:b1:7b:54:aa:
                    b6:80:d2:d4:80:49:66:21:6d:c1:6c:c5:ef:ac:32:
                    a6:28:52:69:aa:12:d2:19:36:68:03:c7:c4:0d:b5:
                    6f:71:c3:14:fd:ff:d0:8e:40:ad:e9:62:56:1f:ad:
                    99:6b:08:28:94:d1:52:ec:aa:41:39:44:ab:79:c5:
                    11:29:0b:5f:ec:8f:bb:26:b0:1c:c0:ab:7b:49:77:
                    3d:5d:a8:44:4d:a1:30:4d:05:e1:88:34:af:6c:64:
                    f8:25:32:a4:ea:e5:2e:5b:db:61:71:fd:c5:d5:5a:
                    dc:b2:8f:b7:91:9c:1d:ba:f9:bc:f5:9f:9e:5b:1e:
                    23:e7:29:59:6e:d3:16:c5:6d:a4:19:87:7f:9c:27:
                    43:dc:7b:dc:b5:1b:bb:ee:69:7b:43:93:17:a9:88:
                    14:e0:a6:65:0d:39:e8:4c:c0:32:61:b0:82:e4:ed:
                    55:82:b0:5c:61:97:e9:0b:ef:28:18:7b:08:22:8b:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:5C:8B:BC:21:06:5A:E2:EC:2A:93:40:E6:B5:CF:39:D9:3C:47
            X509v3 Authority Key Identifier:
                keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a2:37:35:a4:66:53:36:dd:48:6f:34:c3:82:0a:4f:77:f0:
         08:e3:58:78:0c:d5:81:6b:51:2d:e2:5a:8d:e1:26:4e:ac:81:
         2a:f2:28:f7:43:56:e2:32:b6:53:a0:18:f3:5f:14:56:d7:bc:
         0c:03:ef:0a:d5:68:63:48:77:e6:95:8a:83:8a:ef:e8:05:fe:
         75:76:65:7a:06:cf:1a:b2:cd:e7:fb:8e:f3:ef:1f:0f:71:58:
         66:9b:11:c4:67:6c:21:0c:1f:ba:0d:3e:65:63:ac:26:50:a9:
         e0:0a:22:eb:19:7c:49:01:52:09:d6:12:b6:ec:42:51:04:f6:
         01:11:38:9e:d5:48:20:79:48:0c:c4:e5:8f:7c:20:20:ed:04:
         94:ff:fb:36:42:ff:2f:d7:c9:45:2b:81:0c:55:86:ee:c9:b1:
         00:e6:94:d8:3d:83:82:21:68:3d:c9:9e:a7:0e:a3:ef:6b:c2:
         62:8d:bf:ce:37:f4:6a:9c:1c:6a:c6:2b:32:8c:04:1f:42:35:
         26:d6:b8:08:0c:62:41:e8:a3:da:7e:f9:aa:bc:9b:0a:dd:02:
         1d:ab:ee:31:06:31:a1:43:c4:7c:22:15:e3:9c:00:67:58:bb:
         6d:f7:5f:12:b8:91:50:66:04:1e:44:ec:78:fe:bc:fb:8a:a9:
         81:4f:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:02 2026 by rpki-client