This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
File:                     70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json)
Hash identifier:          uEsWD0On3F+aWY//FwO5DPrR7ds9zwxsvy0tI+Yvy/s=
Subject key identifier:   8B:B0:17:16:04:23:E4:01:B1:48:73:B4:E5:ED:34:D4:4F:4F:DE:3A
Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
Certificate issuer:       /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Certificate serial:       0654
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
Manifest number:          064F
Signing time:             Sat 24 Jan 2026 21:55:24 +0000
Manifest this update:     Sat 24 Jan 2026 21:55:24 +0000
Manifest next update:     Sat 31 Jan 2026 21:55:24 +0000
Files and hashes:         1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: S3QAqdHe4UGcQUih7OQ0eI17IAptZisFuo0ImMbI7/k=)
                          2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: mRSjwQDsA2Ity8Ke/pKlCSea6N3rjwOrxrJxPkM3a1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
        Validity
            Not Before: Jan 24 21:55:24 2026 GMT
            Not After : Jan 31 21:55:24 2026 GMT
        Subject: CN=69753fcc-55e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:30:53:c0:62:79:90:43:d0:ec:eb:3c:3d:
                    37:15:26:52:90:b7:59:8d:5b:ad:88:b0:f4:5a:0a:
                    98:71:ec:c2:d1:b0:83:aa:19:e3:b0:6c:79:01:bd:
                    43:8c:d7:63:48:d9:ce:31:27:83:59:96:8a:7a:4c:
                    c9:24:a3:ed:5a:55:f4:c0:a1:8b:a1:26:0b:fc:77:
                    b2:c6:67:90:e4:b5:2f:f7:01:a2:9e:46:99:31:cc:
                    ae:73:9e:75:57:e1:8f:dd:93:ee:99:d1:70:64:e3:
                    c2:40:3c:bf:60:c4:93:df:5b:14:97:e7:fc:96:2c:
                    36:89:3a:c3:c7:4a:0f:6a:69:65:4b:dc:05:98:7e:
                    1c:ea:87:e6:a5:f3:ed:55:07:dd:6a:bf:34:a1:2e:
                    02:f1:c2:de:c6:ff:6e:8b:b2:5f:eb:7b:12:98:be:
                    73:c3:99:35:96:3e:07:e3:4f:f1:16:19:2f:fc:ea:
                    e1:c6:14:4b:3f:bf:db:53:66:6e:d3:c4:11:97:a4:
                    15:2a:dc:d1:e2:17:3c:09:f2:40:9f:e3:37:86:18:
                    26:78:2a:7c:d3:02:5b:02:ec:e1:8b:17:17:73:19:
                    b8:c2:40:f9:48:0b:fa:e8:b8:03:48:ac:f7:0a:e5:
                    bf:87:1b:65:25:f4:2e:0c:95:e5:ca:c5:70:1c:7e:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B0:17:16:04:23:E4:01:B1:48:73:B4:E5:ED:34:D4:4F:4F:DE:3A
            X509v3 Authority Key Identifier:
                keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5b:ed:f1:83:ee:8b:33:1c:4e:b7:19:78:b4:9f:ba:cb:e6:
         fe:4e:74:8a:69:15:38:d9:0d:1b:95:af:1a:e9:0b:fc:00:36:
         4d:5e:70:bf:35:cc:6b:9b:cf:b4:18:ac:2e:a5:db:bc:51:96:
         c7:d1:92:7a:8b:19:3f:22:ea:98:5d:4d:9e:7a:e9:60:ce:2a:
         b3:25:8d:95:17:29:30:d4:f0:c3:fd:16:e9:6a:7e:0b:c0:51:
         e1:67:d6:7d:3c:32:7a:f6:01:22:73:d4:cb:e0:0b:80:4b:f7:
         17:c7:1c:5c:f1:06:59:83:67:6d:03:c3:ae:dc:3e:c9:76:06:
         f8:ba:e7:83:2e:ce:a3:da:c5:4f:09:4f:4d:52:e6:70:bf:bc:
         db:59:44:62:12:f4:15:4d:13:8d:87:c5:b4:83:71:66:c1:54:
         29:68:c0:fb:3a:8e:2d:37:17:83:f2:5c:a2:02:a2:dc:d7:e3:
         d6:97:cd:a6:b1:d8:39:3d:02:5f:6d:73:45:5f:c4:6c:cc:3b:
         42:87:7b:cc:89:cc:74:81:2e:6c:5d:aa:19:f2:ef:ea:ac:7a:
         7a:da:5a:a0:43:0c:ec:7a:a5:ae:05:96:1e:4d:dc:a1:88:5e:
         55:92:5e:70:3d:86:f3:c9:80:2c:09:e3:a5:47:44:ce:7e:e8:
         96:f6:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:48:05 2026 by rpki-client