This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File:                     8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier:          8y6RXAn6MvF/VXEkledMx5z4nkJtpxN3k1UlFU0eiLA=
Subject key identifier:   BF:9D:65:50:9D:1D:F6:2D:17:9C:6A:C6:66:95:B7:D9:5B:5D:BE:C4
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer:       /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial:       0E5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number:          0E55
Signing time:             Sat 24 Jan 2026 17:27:00 +0000
Manifest this update:     Sat 24 Jan 2026 17:26:59 +0000
Manifest next update:     Sat 31 Jan 2026 17:26:59 +0000
Files and hashes:         1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: 66AtgY/sbd5P4YHDqIpPV6lG5Deopxxdq/hI+fS2yyY=)
                          2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl
                          rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3675 (0xe5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
        Validity
            Not Before: Jan 24 17:26:59 2026 GMT
            Not After : Jan 31 17:26:59 2026 GMT
        Subject: CN=697500e4-3d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:97:f9:7b:34:a3:d6:f0:41:b0:79:5d:72:
                    c5:2e:2d:d1:ab:ec:2b:23:51:9c:e3:1f:06:9c:20:
                    15:54:98:d9:73:07:29:b6:7b:ea:ad:f4:ee:bd:f0:
                    fb:c8:56:6e:82:71:7c:aa:91:32:d3:00:63:98:ac:
                    b0:61:99:37:64:bd:e5:23:ab:41:ec:10:04:7f:65:
                    a9:44:d7:9c:43:10:bd:da:77:a5:5e:4a:8b:74:39:
                    8a:79:6f:50:74:3a:e0:98:8a:45:2c:05:ef:36:b1:
                    7c:0e:1a:6a:df:7f:64:26:b8:5e:2f:51:8d:af:7c:
                    18:37:15:a6:dc:32:89:5a:33:16:dd:d2:b4:1f:db:
                    49:bc:6b:b4:49:a7:2d:72:40:b7:05:a4:a3:0e:b1:
                    4d:02:81:11:d8:76:bb:7e:31:1d:23:fc:c1:79:9b:
                    1b:c9:fb:31:23:9e:34:14:cc:30:84:c5:2f:00:80:
                    e2:8a:88:74:b5:a5:79:85:bc:29:e6:bc:d8:f6:62:
                    56:b8:04:89:e0:b4:15:71:66:39:6c:3f:91:28:68:
                    1d:e8:28:24:b9:b1:87:74:0d:d3:a9:3d:03:45:62:
                    02:4f:4e:65:22:d6:65:1a:77:6d:a2:6a:89:18:32:
                    11:2a:64:9a:76:5a:11:46:cb:8e:68:0c:12:ad:ae:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:65:50:9D:1D:F6:2D:17:9C:6A:C6:66:95:B7:D9:5B:5D:BE:C4
            X509v3 Authority Key Identifier:
                keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:46:1e:f6:ea:99:88:6f:22:77:6b:f1:0c:74:9c:a6:53:
         23:31:bc:6e:4d:b4:31:9d:db:6e:cc:e1:09:8e:94:53:fb:e2:
         ad:97:a5:5e:19:8f:a6:68:ab:5b:9e:c8:a5:e1:95:ce:b4:30:
         27:7e:f4:cb:ea:7c:30:ec:d5:4b:13:55:96:b5:94:cd:4d:cf:
         b4:8c:58:16:b2:a7:68:2e:70:de:d6:1e:fb:fc:ca:6a:96:54:
         02:04:aa:84:af:f4:50:6d:d8:ac:ee:9d:3a:28:0c:a6:62:47:
         45:21:d9:29:eb:3d:65:b3:34:13:5b:fc:95:f0:7e:02:e5:29:
         16:5b:61:02:73:bd:29:80:64:f8:41:89:08:80:6c:c4:71:20:
         ba:b6:06:34:77:d6:fb:2c:81:b2:3d:3a:ff:43:cf:6b:ec:5a:
         cb:7d:41:9d:2f:87:ab:70:d8:39:03:4b:a8:7f:a2:0d:d4:69:
         ee:f7:31:84:81:4d:cc:31:3f:be:a4:22:81:0b:f7:09:80:39:
         31:5d:c3:39:c5:26:de:31:2b:95:e4:a3:04:5b:69:b4:f8:cb:
         f0:8a:e5:be:17:d8:de:55:eb:02:87:73:d0:f4:c0:c4:37:81:
         b9:ec:a3:68:2c:79:3d:04:1a:4f:64:47:cd:9c:6b:1e:c3:0f:
         c8:6b:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:29 2026 by rpki-client