This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File:                     N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier:          yxM9DAvTPr9ZNO3fYiFVHdOS65IqHDqFugL3y3EBwGI=
Subject key identifier:   4A:97:E2:8E:BF:4C:C2:5D:B1:91:3D:FB:C7:DA:5D:61:CB:13:50:C3
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer:       /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial:       02B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number:          029E
Signing time:             Sun 25 Jan 2026 00:42:30 +0000
Manifest this update:     Sun 25 Jan 2026 00:42:30 +0000
Manifest next update:     Sun 01 Feb 2026 00:42:30 +0000
Files and hashes:         1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: e5X4JeL4kh04IsMENNxS7ka7EcZY0JXWv32+yKrgheI=)
                          2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: ENwpRdEuucpLR199wMX1ovh0yufktlvsonosnrFa6n4=)
                          3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: hpkK6ksOTaD7mDbT56x2zJ1eza3vKxeFROPXP1u/0+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
        Validity
            Not Before: Jan 25 00:42:30 2026 GMT
            Not After : Feb  1 00:42:30 2026 GMT
        Subject: CN=697566f6-a9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:1a:d3:eb:08:0b:50:3e:a5:b2:02:a8:53:
                    88:80:f0:26:37:a6:a6:e6:61:64:74:d2:9d:2e:6a:
                    cf:f9:96:f9:d7:2a:c3:58:36:11:7f:eb:f3:c4:b1:
                    21:dd:0b:99:89:35:d7:cc:39:5c:76:00:ca:2b:e9:
                    b7:7e:97:86:89:df:4f:83:46:eb:35:09:29:3d:6e:
                    e3:bc:a3:5a:e5:74:19:45:0c:fd:a4:f9:db:6c:23:
                    d9:1c:e4:b5:c3:b0:3c:cb:d7:7f:28:fc:ce:59:19:
                    c9:39:51:bb:52:7a:18:15:a7:50:70:06:79:2b:e5:
                    2e:c7:0f:31:76:74:72:5c:af:3c:d6:00:f3:a0:68:
                    d4:5a:2c:72:43:ac:5f:51:ea:b2:84:20:34:43:a3:
                    ad:8d:22:cb:0c:7d:27:c7:16:12:ed:8d:bc:79:26:
                    7f:ad:13:1a:b7:e7:95:d7:f7:0d:69:02:3e:4d:ff:
                    82:80:55:03:25:9e:ec:e9:5e:6f:6c:ea:67:ef:65:
                    a2:7e:88:8d:ad:41:57:9a:04:3a:bc:c7:67:d8:cc:
                    da:14:2b:42:ac:8c:0d:f8:23:a9:70:11:f2:0e:61:
                    35:a4:f2:19:a6:85:6a:15:c7:f6:48:71:51:f9:56:
                    a4:46:d8:e7:d5:42:4d:6d:5f:de:f5:f3:dc:fc:60:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:97:E2:8E:BF:4C:C2:5D:B1:91:3D:FB:C7:DA:5D:61:CB:13:50:C3
            X509v3 Authority Key Identifier:
                keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3d:b6:4d:dd:4f:23:13:69:cb:f3:6c:92:12:0e:aa:66:f7:
         23:e2:1e:9e:24:be:58:c4:10:73:b6:e0:f1:0a:f3:01:0e:7a:
         9f:33:f8:08:51:8c:c0:f7:1e:9b:99:52:a4:19:ad:4c:ea:f8:
         2b:2b:d2:95:f7:dc:37:33:09:de:16:4e:4f:cd:65:bb:e1:9e:
         b1:27:54:55:5e:60:f3:fb:0c:04:5b:a5:0f:5f:48:5f:3c:9d:
         b2:5c:d1:97:52:4d:17:b9:f6:99:b1:ee:51:49:d6:f2:8e:9a:
         bb:31:f4:eb:cd:59:21:b5:9c:35:f0:13:c7:fd:06:6a:81:d5:
         d9:94:63:da:f7:b7:7e:be:27:38:67:d3:53:a1:86:07:36:39:
         76:85:17:c2:8a:fc:cb:cb:d3:ea:c5:62:38:5a:89:d8:b1:2a:
         c2:f5:bb:e0:8e:e0:fc:60:27:98:ac:07:97:73:23:98:d1:5c:
         80:93:d9:d8:62:c5:36:84:6a:1c:91:bc:da:ec:8d:80:6d:6a:
         8d:cd:69:d4:e8:f7:fb:9b:24:94:db:bb:88:c0:0d:f4:02:95:
         b4:71:4d:e6:a0:16:29:09:32:9e:8e:92:de:6e:8c:d3:d0:35:
         bc:d2:34:56:13:91:cc:9e:df:17:0d:dd:37:62:7c:be:1e:3e:
         00:f8:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:19 2026 by rpki-client