This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File:                     i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier:          3YN3qWWsK8RO5Y+GonGeuC+ydQgTFTBgBNIdLLAt7C8=
Subject key identifier:   2F:B4:58:0F:03:31:DA:A0:63:9E:93:37:A8:DD:E7:55:F5:33:61:54
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer:       /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number:          0282
Signing time:             Sun 25 Jan 2026 00:44:12 +0000
Manifest this update:     Sun 25 Jan 2026 00:44:12 +0000
Manifest next update:     Sun 01 Feb 2026 00:44:12 +0000
Files and hashes:         1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: PdOi3gAaGutD81anoFkXFuMDT/WVjKO7e8ZNHuMhdwc=)
                          2: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=)
                          3: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
        Validity
            Not Before: Jan 25 00:44:12 2026 GMT
            Not After : Feb  1 00:44:12 2026 GMT
        Subject: CN=6975675c-a6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:0b:b0:8f:e9:a8:f4:15:70:e6:96:fe:11:
                    e6:ae:81:80:85:db:55:49:d5:a2:df:2d:37:b1:fb:
                    94:16:7a:e9:bb:be:7b:22:45:bf:74:d9:c9:69:30:
                    7a:d4:ac:e0:b1:a0:ea:2a:52:68:7d:dd:df:7e:6a:
                    1c:2c:af:9a:a8:d3:23:9a:a1:87:47:b0:59:c3:6a:
                    71:dd:0d:64:4c:51:78:03:2b:d8:8d:11:32:f7:40:
                    f8:91:69:52:0f:d8:bd:76:71:56:16:df:e9:2a:87:
                    84:81:5c:0e:01:91:f9:21:07:65:14:ef:1f:f1:e6:
                    a8:df:00:d5:10:4b:57:16:ca:28:f0:7d:73:25:58:
                    c5:29:d3:dd:7f:df:a0:4d:66:86:51:5d:0d:c0:e9:
                    42:cc:2b:e3:34:47:84:b9:fa:77:db:a6:49:20:97:
                    61:65:95:c2:4f:e4:ec:e8:8c:c8:89:1c:7f:4f:18:
                    1f:71:ae:08:98:95:81:60:3b:d2:7b:d8:6c:78:ed:
                    e5:8d:63:c5:96:40:61:15:da:b3:b0:5f:76:36:28:
                    6b:75:94:c5:b4:59:da:0b:38:6f:5a:dc:96:d2:7f:
                    57:77:9a:44:9a:1e:cf:e5:e7:e3:d4:7f:49:ac:bd:
                    52:65:dd:86:61:f6:44:a7:de:ca:0d:3c:e3:1f:93:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B4:58:0F:03:31:DA:A0:63:9E:93:37:A8:DD:E7:55:F5:33:61:54
            X509v3 Authority Key Identifier:
                keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:83:01:9f:ba:a9:bf:87:4f:fe:4c:b2:d5:a7:c4:cc:d5:
         0e:65:89:91:61:3e:31:ad:f0:e9:59:5e:0f:29:80:d5:81:a2:
         d5:e0:27:1a:f2:4d:ab:cb:5d:93:74:8a:75:b9:c0:26:28:f1:
         16:1b:9b:8b:c1:4d:b2:67:b5:84:c1:a1:31:40:a6:f4:23:e5:
         a4:34:63:37:11:ef:56:39:81:57:b4:f3:bf:93:ec:0b:3d:a5:
         d8:a5:a5:e1:49:73:1f:ad:b6:34:6f:8e:96:19:a9:11:84:d4:
         9c:6b:48:84:db:29:50:a4:93:ae:4b:d3:9b:d6:7b:a3:96:f1:
         e2:e3:c2:b2:43:38:64:55:08:b0:31:80:b3:b5:ad:6a:ac:70:
         f5:e2:0c:61:2b:71:fd:04:1e:2f:90:a6:12:b7:4a:02:27:2e:
         a3:87:f8:dc:e5:d8:e8:dc:e3:af:03:3f:17:f9:8b:cc:1c:8b:
         c0:ba:e6:ea:0e:64:d4:58:e8:ba:73:ea:b2:f1:1d:e2:e9:48:
         8a:c5:7e:30:c0:1a:2e:2f:f7:dc:18:48:12:79:df:37:14:10:
         07:be:09:eb:7a:a3:57:0a:9b:ee:cf:43:99:e3:b5:2a:e5:0d:
         a2:1d:2f:77:a9:04:51:60:08:a9:14:bf:cc:8b:97:b7:68:8d:
         a3:ea:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:17 2026 by rpki-client