This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
File:                     y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json)
Hash identifier:          XM71qTVsrIC8tkNPi7fi9ajm3hXfR0Y3N0GlrlwqZHQ=
Subject key identifier:   C4:65:33:A6:B6:0D:BE:E9:C4:25:4A:B2:5C:A7:5F:BE:3A:94:33:49
Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57
Certificate issuer:       /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
Certificate serial:       03B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
Manifest number:          03AF
Signing time:             Tue 03 Feb 2026 00:10:29 +0000
Manifest this update:     Tue 03 Feb 2026 00:10:29 +0000
Manifest next update:     Tue 10 Feb 2026 00:10:29 +0000
Files and hashes:         1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: Q+kVhopvoG4/0kBtR+Epuk9S6XziyXeE+rvLGgK+bTk=)
                          2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: jgn+IjzdhxyJSAgxV7AsSre4TgUxRmV/YSZYucj9K7o=)
                          3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: mF7kZS6Jy+xmheJVzwvgL67SCm3/Tv+kyRiKbt147Mc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 00:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457
        Validity
            Not Before: Feb  3 00:10:29 2026 GMT
            Not After : Feb 10 00:10:29 2026 GMT
        Subject: CN=69813cf5-5364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:53:ff:f9:51:d2:83:32:e0:bf:63:bd:c9:
                    10:ee:33:5e:21:26:3c:0b:ee:9c:4c:1a:9e:a5:a6:
                    27:b7:15:90:25:cc:a5:c2:ac:5f:eb:90:d3:30:77:
                    86:a4:43:00:bf:36:29:e2:f9:bf:81:9f:de:94:85:
                    c8:95:dd:47:25:c5:4d:52:ff:8d:ae:d5:e2:02:ef:
                    9e:41:c8:a7:0c:f8:5c:8d:5b:33:0f:5d:2e:6f:73:
                    df:5c:c8:4d:96:9b:fd:54:3f:ca:25:49:a9:6a:cc:
                    eb:88:e1:ef:61:1d:f3:55:8c:0e:df:5a:b9:f2:69:
                    18:41:e1:c4:8b:13:25:31:f9:7e:9a:9d:32:54:dd:
                    9e:f3:10:84:3c:9e:d0:ae:df:26:12:87:0a:fd:9f:
                    00:dd:56:0d:ab:b8:46:2a:2c:b6:64:45:e5:e8:08:
                    16:bb:ca:2f:06:44:8a:f7:cd:55:ac:11:ed:42:9a:
                    cf:8e:74:29:ab:b7:2c:66:81:21:d0:a2:93:e3:94:
                    cf:15:c8:eb:ce:bd:79:b8:9b:80:4e:cd:64:2b:b6:
                    db:38:b4:52:cd:96:7b:77:ff:a9:b4:2b:df:7e:c5:
                    fd:07:a6:ff:c1:8a:4f:5a:44:b7:39:37:04:e6:53:
                    4f:8e:34:7b:21:53:cf:4b:68:b9:84:3f:fb:8f:a9:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:65:33:A6:B6:0D:BE:E9:C4:25:4A:B2:5C:A7:5F:BE:3A:94:33:49
            X509v3 Authority Key Identifier:
                keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:76:91:35:bd:99:42:05:90:68:b4:22:1f:fe:09:5b:26:b4:
         2b:de:24:5b:9e:f6:78:4d:3a:f7:9a:b6:44:e6:e6:ff:b4:69:
         9a:01:67:53:87:23:fe:f8:e2:b8:f3:52:df:b5:4c:4a:bc:de:
         de:5c:ab:db:68:06:a0:8a:6e:b7:bd:d7:93:7b:d8:63:86:a0:
         f3:a7:2a:a6:50:09:ed:7e:0b:36:d4:c1:53:ff:b2:1d:cf:1b:
         e1:b0:0b:d0:1b:0e:1a:b7:65:44:6a:db:99:ea:9a:99:20:97:
         1e:c4:55:5a:be:ad:92:a4:f3:95:ad:35:eb:ae:ff:c6:77:3b:
         a2:80:ee:a3:54:40:bf:d3:03:f5:db:13:c6:de:b3:d3:d4:e3:
         fd:64:a9:01:41:b5:ac:02:bb:c5:5e:73:69:e1:44:d4:a1:05:
         0b:44:a2:56:ce:42:32:99:12:bb:50:62:15:25:c9:2d:43:9c:
         d0:c1:86:55:43:10:e6:1d:28:57:03:5b:41:9d:2e:32:ab:30:
         e9:df:4a:27:5a:16:b3:15:45:5f:cf:69:5d:30:a2:56:da:99:
         1d:2d:ab:ee:69:db:a0:aa:f8:ad:88:30:e1:f7:8b:58:09:8c:
         24:1a:78:12:43:8d:a2:c8:cb:42:a8:2c:ed:bd:f3:ef:55:fa:
         91:64:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:17 2026 by rpki-client