This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File:                     RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier:          UKqnwIXwSj1F+eQojtdDvREwUYH3PzPCc5jAdZYXAKY=
Subject key identifier:   23:A2:B4:E9:82:19:BF:01:AD:32:8E:AA:45:A6:72:63:A6:B2:0D:40
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer:       /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number:          023A
Signing time:             Sun 25 Jan 2026 01:15:59 +0000
Manifest this update:     Sun 25 Jan 2026 01:15:59 +0000
Manifest next update:     Sun 01 Feb 2026 01:15:59 +0000
Files and hashes:         1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: xS/LpbzPX5rneXOpL8AeJ86ILXneZhwRRmKC2oMRmqU=)
                          2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: V+A9+3TWv6PDJfONkiYGSLwYtuk75uf9VZIwDYRykJo=)
                          3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: GzbxM9C1MjlQY8/LbZ9rlFb8KN037sgMyJVoACbdjQg=)
                          4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: 8XCBqH3UeeuDPYwwqRpO+AoZOfKPyRMZ7ican69IhKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
        Validity
            Not Before: Jan 25 01:15:59 2026 GMT
            Not After : Feb  1 01:15:59 2026 GMT
        Subject: CN=69756ecf-6e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:0f:b1:d6:ff:b8:8d:41:b4:99:a1:e4:50:
                    ea:55:9c:d9:4e:00:6f:d3:2d:7e:12:c8:f7:06:89:
                    68:5e:60:04:03:7a:e6:21:44:56:09:f1:2a:08:b5:
                    af:a9:33:c4:84:e0:0a:d8:a7:df:9b:99:f8:8c:e4:
                    29:f3:a4:53:4e:fa:ab:56:83:a7:1a:41:6c:56:14:
                    32:84:90:4d:28:a6:11:76:92:d8:48:fb:55:25:85:
                    5e:ce:22:4e:7e:d3:b2:15:2b:98:43:84:03:0e:34:
                    3e:64:0e:b6:e2:7c:c6:4b:b3:e6:5b:e8:9d:cb:b2:
                    67:f1:60:fc:27:3c:42:78:c6:1e:e0:1d:0b:6e:0d:
                    39:40:60:ef:17:dc:ef:f8:b3:70:1d:81:2b:89:d6:
                    d4:65:87:91:0f:c2:e2:5a:db:06:94:c3:43:31:c5:
                    c4:60:83:eb:b8:57:9e:19:09:0f:bd:56:a6:43:59:
                    55:1b:31:5b:a9:c7:b4:3f:bb:dc:17:c9:90:d4:a5:
                    b5:04:d8:e6:f0:30:5a:d2:dd:07:cc:95:1c:93:ba:
                    4f:3f:03:db:f8:88:0b:8e:ed:f2:a3:9d:9d:fc:ef:
                    47:2a:b7:9f:22:f7:9f:25:5b:06:dd:ac:9b:08:a0:
                    40:68:b3:ad:08:af:fc:e0:0d:24:39:01:f1:77:69:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:B4:E9:82:19:BF:01:AD:32:8E:AA:45:A6:72:63:A6:B2:0D:40
            X509v3 Authority Key Identifier:
                keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:64:90:8f:71:31:e4:a4:bd:35:db:8a:83:08:78:d9:b7:
         a3:35:1a:18:d3:f0:5c:4e:24:b8:90:c2:4b:c3:e4:7c:ea:e6:
         7a:a5:68:cb:fd:12:75:d8:39:82:4b:f6:c7:4c:3d:52:41:d5:
         60:58:b1:16:aa:c5:87:49:dc:58:e4:93:85:25:e0:f3:80:90:
         97:ee:77:36:c8:7b:2d:b9:79:83:54:45:63:a6:46:c8:f9:22:
         66:d1:b4:67:a4:cb:26:3c:0d:0a:9e:51:70:f2:26:61:ac:03:
         a2:08:65:0c:c6:97:08:4e:92:4d:3b:73:eb:c3:06:5c:16:0c:
         5a:84:8f:6f:c0:11:29:46:6a:ed:42:80:fc:fc:42:a2:f1:5c:
         4d:0c:3f:a3:d3:68:8c:98:1a:c1:2b:71:93:1e:89:1f:fd:6a:
         98:13:85:e9:74:2e:09:28:b9:b4:ce:b5:12:fb:0f:a0:fd:21:
         1d:2e:e8:1c:a9:be:7f:e1:a8:aa:c2:e5:39:f3:18:d5:a9:e9:
         ff:13:8c:a5:30:a7:9d:0c:d4:71:ff:e6:72:27:b3:02:8f:c3:
         a8:0b:d1:4e:7a:34:89:29:dd:98:1c:3b:c4:0f:16:f8:dc:31:
         dc:0b:38:2e:f4:d3:51:e7:64:6a:6a:3f:0f:15:e1:21:05:88:
         c7:69:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:29:07 2026 by rpki-client