This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
File:                     v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json)
Hash identifier:          5j7yiBPcOW4OAqt9LsoU0pfliojB2mJKHACU7xtDu5Q=
Subject key identifier:   92:2F:5A:C3:98:A4:FB:2A:90:7E:23:11:6E:E9:A9:0B:DE:32:B2:0E
Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
Certificate issuer:       /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
Manifest number:          06D5
Signing time:             Sat 24 Jan 2026 21:40:17 +0000
Manifest this update:     Sat 24 Jan 2026 21:40:17 +0000
Manifest next update:     Sat 31 Jan 2026 21:40:17 +0000
Files and hashes:         1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: 5yvCInty6Uzuf2EEPr7qTGCvTWK4sXVVpfN7r1od4CI=)
                          2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: qwmxlndqpG7JrumB4z3O6rcTC15p9htgSuxchg773a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
        Validity
            Not Before: Jan 24 21:40:17 2026 GMT
            Not After : Jan 31 21:40:17 2026 GMT
        Subject: CN=69753c41-78f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:f7:fd:04:a0:7f:d4:40:44:bc:34:dd:00:
                    59:14:70:42:5e:bb:b8:79:1e:26:e1:8e:c9:b2:d4:
                    1e:36:e5:6d:c9:f8:f7:6c:d3:d2:39:ca:ba:1c:dc:
                    6d:44:62:af:7a:8d:68:df:e7:2d:02:6b:f5:63:fe:
                    bd:29:c2:47:5d:e3:b2:ea:76:37:eb:e2:e7:9e:0f:
                    a3:66:72:91:41:1e:dc:60:41:d8:fa:02:ea:f9:e3:
                    94:d6:be:6b:42:98:a5:b8:7b:7b:0f:2a:c8:39:bc:
                    37:9c:1d:1e:33:f6:6f:b9:23:d8:90:dc:2b:32:4e:
                    14:ab:d5:e6:33:7a:00:58:2f:2f:a1:e3:d4:22:d3:
                    ac:27:0a:27:12:55:94:d4:d6:ba:61:fd:86:a5:30:
                    58:c5:35:cb:33:55:8a:31:da:ce:35:b1:77:19:9c:
                    56:c1:c5:4f:65:e7:6d:e5:f4:06:f2:07:84:c5:3d:
                    d0:d3:52:8b:25:af:29:23:c4:3e:cb:77:19:c2:a3:
                    b8:8e:ff:05:97:b4:12:62:b9:d8:59:2c:32:72:93:
                    42:c1:d4:b0:ce:c2:6e:0c:a1:1a:6e:69:80:c2:33:
                    2c:a9:ff:54:0d:85:b4:34:31:8f:45:18:3e:eb:bb:
                    2d:ba:98:f8:71:a5:9b:93:1b:b8:58:ae:a0:b2:fb:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2F:5A:C3:98:A4:FB:2A:90:7E:23:11:6E:E9:A9:0B:DE:32:B2:0E
            X509v3 Authority Key Identifier:
                keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:db:a9:6b:8a:38:08:59:9d:21:38:bf:03:84:40:76:ea:c5:
         ed:47:56:38:c9:77:23:a1:ba:91:3a:0e:65:31:eb:5c:94:bc:
         05:a8:cc:70:f4:cf:ac:e4:36:2e:cf:6b:d5:28:06:96:09:15:
         0e:ff:27:b3:d5:c1:46:d1:1e:7a:9b:6c:2d:e2:0f:b5:b4:7a:
         58:ad:98:3d:6b:1c:74:1c:46:aa:47:bb:35:8b:65:a7:42:75:
         32:88:6f:32:ac:8d:0c:1d:d8:c8:31:98:e7:79:81:2e:64:5b:
         75:ce:c2:ec:dd:a5:19:36:71:64:b7:30:c0:b2:8b:ae:72:d8:
         11:88:0a:63:fd:df:06:18:bc:45:78:f0:1c:1a:af:f9:a1:fe:
         86:51:e0:8e:c0:24:77:16:e0:7c:31:01:8d:44:6d:15:0f:2b:
         4b:7a:a8:6b:74:0c:df:ac:14:fb:18:cc:c4:97:47:a5:bc:55:
         99:bf:9c:30:c7:cf:a1:1e:cf:23:f5:ab:41:45:27:af:91:fa:
         e5:df:46:a2:58:7b:07:21:b2:6b:3c:05:06:67:d2:9e:7d:bb:
         77:0e:34:07:68:24:19:1d:a0:88:1c:81:6d:4c:8e:36:6c:e1:
         b7:07:54:42:03:ad:04:f9:f5:5b:00:ac:b8:e2:9a:88:be:00:
         97:7d:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:24:13 2026 by rpki-client