This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File:                     tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier:          RiszL+Zhb9uW2l9y5GTCurXddTLXQNMf8XZe9oLlqRc=
Subject key identifier:   95:16:0C:B2:BF:9A:CD:F6:62:7F:72:C3:FE:CC:E8:27:78:62:BD:F5
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer:       /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial:       0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number:          0CBD
Signing time:             Sat 24 Jan 2026 17:55:59 +0000
Manifest this update:     Sat 24 Jan 2026 17:55:59 +0000
Manifest next update:     Sat 31 Jan 2026 17:55:59 +0000
Files and hashes:         1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: GGqbjxIlOIjyrfCZdEUGTIB1qAzeF0EY1pb8OGvmRgc=)
                          2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: Tom7u2KILmaBR19TjEIpuUPoq7F9nKzmH+Ll43MgfGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
                          rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
        Validity
            Not Before: Jan 24 17:55:59 2026 GMT
            Not After : Jan 31 17:55:59 2026 GMT
        Subject: CN=697507af-f0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:f8:ca:98:1b:02:58:10:84:c3:a0:d2:f5:
                    c1:a5:8d:a9:27:33:81:a2:33:ac:ab:c5:87:4c:23:
                    39:98:93:7b:e8:70:03:2d:55:3d:c9:8e:7c:77:ec:
                    c5:fe:52:32:63:05:78:8f:99:bb:20:0c:ab:3e:cc:
                    2f:56:da:0d:5a:b1:4b:80:1b:6c:b1:8f:9e:d8:7d:
                    dc:83:23:bf:65:36:4d:70:dd:e8:0a:1b:1a:1d:c3:
                    e5:77:65:9f:b9:21:01:e8:44:4f:b3:af:c4:d2:a9:
                    de:b5:50:30:89:96:f5:95:af:b2:ad:c1:1d:e1:26:
                    6b:08:51:13:de:f1:11:d9:c0:95:38:6a:6a:1b:db:
                    25:2f:1b:48:f2:0c:de:90:b7:47:92:73:45:8e:06:
                    f0:b0:77:28:69:af:fc:dd:4a:ba:93:bc:b2:96:9f:
                    c4:70:28:46:6d:ee:8a:a6:be:0a:88:97:dc:50:a6:
                    29:49:1b:11:2a:23:7a:68:e1:d0:ce:6e:6e:ea:10:
                    0b:36:f7:5d:03:ac:a9:e6:0e:3d:26:a0:f9:86:7b:
                    64:2b:47:2f:b5:2e:62:b8:d4:5b:7b:57:4b:db:ab:
                    52:fb:87:2b:4b:9e:b4:83:ec:77:65:22:ad:44:1c:
                    c8:89:0c:b9:c3:f5:96:9e:99:d0:70:ea:e5:8b:24:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:16:0C:B2:BF:9A:CD:F6:62:7F:72:C3:FE:CC:E8:27:78:62:BD:F5
            X509v3 Authority Key Identifier:
                keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b3:da:52:7a:ba:4a:26:13:5c:e8:17:1d:18:3e:5b:a6:8f:
         bd:02:b6:c7:d5:b8:78:0a:8b:a0:e0:ac:a0:ae:30:da:06:a9:
         20:ba:89:9f:48:ff:ed:e0:10:7b:e7:ad:ad:41:27:3d:c3:3e:
         bc:aa:51:eb:05:0f:cd:62:ba:06:74:f7:1e:65:5f:1e:db:e8:
         14:07:d8:96:0d:c7:46:2f:ad:6c:25:90:04:2e:e8:4c:ee:7a:
         1b:d1:ed:69:dd:de:9d:82:89:2d:dc:49:7b:a7:81:cb:66:02:
         ac:0c:fb:90:26:d3:13:db:3b:e9:64:78:d3:5b:c4:a5:56:e6:
         41:ee:de:86:a4:ea:04:66:66:4e:3c:b0:da:f2:4a:78:c6:e2:
         0f:a4:82:3b:f7:70:5f:44:43:aa:96:0f:9c:80:2c:5c:46:98:
         da:5d:42:65:59:8c:69:4e:98:fd:16:c3:08:ac:72:fe:ac:50:
         c4:c1:98:cc:25:3e:96:8c:64:e6:5b:11:e7:2c:f9:b9:08:6a:
         e6:ce:38:93:a4:33:46:6a:d8:3c:30:31:67:56:45:74:63:f9:
         a6:17:1f:8c:f0:76:04:f9:08:61:4b:ca:01:43:16:ca:1c:49:
         7c:14:1e:1d:0d:23:9b:df:f9:bc:5e:45:c3:50:43:21:b5:fc:
         03:0b:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:07 2026 by rpki-client