This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
File:                     FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json)
Hash identifier:          llRCgdiT5HDjTdRknYoN3dyCWc0Prf9IbDIoPcRzzdA=
Subject key identifier:   00:AC:9E:68:B3:95:1A:9A:23:A8:73:65:E0:EF:7D:E2:D0:CE:A8:FF
Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07
Certificate issuer:       /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
Manifest number:          67
Signing time:             Sun 25 Jan 2026 06:07:28 +0000
Manifest this update:     Sun 25 Jan 2026 06:07:28 +0000
Manifest next update:     Sun 01 Feb 2026 06:07:28 +0000
Files and hashes:         1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: VgGAVrikhN10R+SX1+EIzHDxJ7b4jy8hcouG1AETruc=)
                          2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: emv514v8DwKzvHJH8ilfs/YN+XFNOa2awfMLCjPK/mI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl
                          rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
        Validity
            Not Before: Jan 25 06:07:28 2026 GMT
            Not After : Feb  1 06:07:28 2026 GMT
        Subject: CN=6975b320-d960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:99:4f:39:57:f5:02:68:ad:9d:07:96:fd:
                    c9:64:23:2f:37:5d:ac:33:d2:1d:2a:3d:06:3c:72:
                    08:ac:0d:bb:b1:0e:c3:9d:fd:63:f8:6c:37:a9:83:
                    06:86:ea:c2:55:55:43:76:db:d9:ac:53:18:9a:cd:
                    52:b0:34:07:8e:a4:5c:f0:8e:08:7c:6f:51:8a:10:
                    18:1f:62:45:8a:13:e6:fc:91:b5:16:c4:be:7c:a3:
                    14:be:08:a2:b5:27:39:dc:20:38:a0:65:89:fc:61:
                    61:a4:87:41:5f:89:d5:c3:03:d7:71:01:eb:e5:e4:
                    35:2e:c8:b7:8e:0c:cb:01:ac:77:2e:fa:9d:4b:9e:
                    aa:53:bf:20:30:0d:b2:01:b0:b9:d1:2c:ea:8e:79:
                    e7:5f:2c:ff:73:16:61:7b:22:80:20:99:14:e9:3e:
                    aa:6a:0e:c5:aa:fd:4c:04:03:ed:6f:30:95:52:22:
                    d8:aa:95:c9:a7:19:f4:5e:36:16:da:e2:71:ff:92:
                    bb:0d:a2:3a:e3:ec:08:f2:79:d6:5c:55:58:46:db:
                    31:1b:2a:ef:fc:21:af:56:55:57:6c:47:7a:36:ae:
                    88:69:af:09:d7:29:88:bd:f6:e8:22:d1:4d:3e:04:
                    07:01:7b:0e:11:d4:1e:63:da:90:6c:ab:db:17:77:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AC:9E:68:B3:95:1A:9A:23:A8:73:65:E0:EF:7D:E2:D0:CE:A8:FF
            X509v3 Authority Key Identifier:
                keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:da:95:96:f2:43:13:f7:23:dd:21:5c:ae:02:45:d5:42:
         16:62:46:98:97:91:0e:b1:62:b1:aa:dd:53:a2:39:be:72:c7:
         72:a6:6e:3f:aa:58:d4:46:6e:89:5f:24:40:d2:e2:ef:54:e9:
         d8:3f:49:bf:67:d3:9b:31:be:5c:51:a8:c4:cd:c0:0a:61:ca:
         a4:bc:c7:ba:61:73:c1:1e:f3:73:91:d5:cd:b3:56:7d:d6:e3:
         3b:17:74:d2:9b:4b:fa:78:27:71:98:04:7a:47:4d:79:f7:5c:
         83:e1:3f:10:8d:22:f5:53:8d:a0:b7:85:d2:8b:c8:af:6c:7e:
         46:ad:c1:93:25:a6:f4:79:f9:9e:80:e7:97:e3:61:87:b4:3a:
         08:e5:56:79:57:86:66:72:8b:ca:cd:38:3e:a9:1c:2f:1e:d6:
         22:36:c2:dd:55:59:52:74:53:e6:2d:1f:03:7a:81:0d:77:fe:
         97:c1:92:fe:c2:a1:52:c4:a6:18:a0:c4:db:4b:ff:e4:6d:0b:
         85:c4:b2:ba:06:64:31:fe:db:a7:73:e0:a4:8b:0b:e9:7d:ae:
         1e:92:ef:cf:44:a4:f3:ae:58:8f:87:7c:ab:36:9d:64:b3:67:
         0a:3d:e0:d0:ca:9f:2f:1f:9b:cc:e7:df:fc:33:7a:3e:78:e0:
         eb:c7:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:26:58 2026 by rpki-client