This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File:                     CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier:          GSerZ8zzDjhYJi0DbWNRVBaQOHu6CUGpn8iKhMsA0ck=
Subject key identifier:   4F:20:1F:98:09:68:70:F7:7A:D5:61:1C:F8:0A:FE:A0:18:16:1C:73
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer:       /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial:       0FAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number:          0F92
Signing time:             Sat 24 Jan 2026 17:14:39 +0000
Manifest this update:     Sat 24 Jan 2026 17:14:39 +0000
Manifest next update:     Sat 31 Jan 2026 17:14:39 +0000
Files and hashes:         1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: 49aUChsK79aVdIjXcfZM6HWndhumfqSto2Y2fruVpNo=)
                          2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: 2FUCg0y6j+fzZjDHWeWQ+0mvZPhX1zx72r0IB9sChxs=)
                          3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: xbh5NpVKALglVtZNCUBnPO9evcznNHzqKAZUvaztOkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
                          rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4014 (0xfae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
        Validity
            Not Before: Jan 24 17:14:39 2026 GMT
            Not After : Jan 31 17:14:39 2026 GMT
        Subject: CN=6974fdff-5c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:38:1e:1a:7d:f5:e0:69:5a:04:34:d8:64:
                    4a:4e:0c:99:5d:b7:6f:5f:49:ec:43:52:35:14:03:
                    eb:64:a8:15:47:9e:79:0d:4c:70:d9:aa:d3:06:86:
                    9c:ed:03:0e:f2:df:12:91:11:7e:db:07:c9:a4:47:
                    68:84:03:89:74:7d:4d:01:db:0e:cd:89:fc:4e:87:
                    af:0d:c7:e2:7d:c0:db:fa:11:31:78:1b:cc:88:41:
                    c5:33:ba:30:56:8c:e4:54:77:5c:bd:75:cd:ca:ef:
                    5c:f2:57:d7:ee:44:a8:74:a9:8e:ee:d0:54:d4:c3:
                    98:2c:b3:c7:9c:df:2a:1a:08:8f:d2:e4:4a:9d:9c:
                    49:53:f1:e1:16:ed:31:c5:0c:0a:32:fc:1c:bb:35:
                    4a:66:b4:64:de:11:b7:bc:e3:83:75:d0:16:95:74:
                    4c:2a:86:10:33:ea:58:88:fc:dc:6b:f4:54:ea:d4:
                    a2:c9:b1:39:08:04:21:01:97:2c:db:1e:31:75:b1:
                    12:b0:62:a5:cc:9c:7d:3b:0f:33:01:7a:a3:a1:b7:
                    9e:c1:fe:cc:1c:4e:b0:10:5f:98:75:69:d1:fb:2e:
                    b3:97:5b:e8:35:78:8d:ee:2b:d1:3a:3e:3e:71:c2:
                    9f:4e:58:2e:03:1c:e9:2c:05:f1:db:b6:40:c7:f0:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:1F:98:09:68:70:F7:7A:D5:61:1C:F8:0A:FE:A0:18:16:1C:73
            X509v3 Authority Key Identifier:
                keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:15:20:1a:dd:f3:df:ff:40:27:15:88:4d:54:85:ba:50:50:
         af:cf:a9:5c:dc:0d:e6:50:ee:e1:05:f3:9d:94:33:ca:58:75:
         a9:05:68:b4:7d:84:ea:26:17:36:cb:30:63:90:8b:43:44:28:
         d9:43:cb:c0:61:7a:1e:f0:20:04:0c:53:f5:30:0e:62:f3:fe:
         39:39:42:2c:26:fb:c9:37:15:56:c2:0d:5d:02:a0:9e:94:3c:
         8e:4c:17:3a:8d:95:1c:b5:38:c3:54:3e:91:a9:59:21:8f:36:
         dd:71:43:3e:07:b6:23:43:f8:dd:df:d2:98:be:38:07:88:fb:
         a3:ca:06:27:f4:0b:a0:e7:f1:f3:48:8c:ad:1f:a6:22:2d:52:
         2a:13:92:f3:89:55:7e:0f:73:f8:75:b7:28:c8:c4:5d:26:ab:
         a0:2a:ec:09:1c:55:88:a5:8e:50:37:36:c9:23:e4:0a:a4:a3:
         55:3b:9b:d3:6a:4c:ac:92:93:d2:a5:41:e0:e7:75:1d:e5:7c:
         0a:f1:1a:22:95:00:bb:f2:72:8a:3a:88:55:33:ae:3a:8c:c8:
         03:3d:aa:6e:7a:69:fa:b0:73:a1:10:7b:51:ae:86:9b:ed:29:
         ff:71:3f:56:bf:ac:d1:e6:fd:9f:03:90:2e:2f:ad:36:3e:9d:
         67:45:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:47 2026 by rpki-client