This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
File:                     45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json)
Hash identifier:          o2HNBN6hWJoxLflxGxjG9yWExh+K3Y6GNGO3ZVIuTIc=
Subject key identifier:   25:32:F1:83:56:72:94:E8:6E:44:DC:8F:FD:73:28:E8:F5:C5:1C:FF
Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18
Certificate issuer:       /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
Manifest number:          01B6
Signing time:             Sun 01 Feb 2026 02:40:16 +0000
Manifest this update:     Sun 01 Feb 2026 02:40:16 +0000
Manifest next update:     Sun 08 Feb 2026 02:40:16 +0000
Files and hashes:         1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: 4nGoc80MeoL+ISwrCe8HJk8FLOtFLWlBSatXRfsrzVI=)
                          2: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: zOKtwgFHpwRqlyTO9H77mqE2ho8WfMEhM/eJGA5uflI=)
                          3: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: 18UQJbHGEGObYcZEjw5pF1Ha/JCm9Dtoy6BRpv3dt58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl
                          rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Feb 2026 02:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118
        Validity
            Not Before: Feb  1 02:40:16 2026 GMT
            Not After : Feb  8 02:40:16 2026 GMT
        Subject: CN=697ebd10-b7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:92:ab:c8:3f:4e:ca:81:59:73:81:5c:e0:
                    03:b6:7e:2c:ac:35:fd:c8:1b:e5:5a:48:98:6d:78:
                    4e:9f:c1:7b:5d:22:40:76:09:00:04:f3:4d:4d:e1:
                    df:0c:e8:f1:01:96:cf:c6:37:ce:6f:a1:29:8d:53:
                    42:ca:93:a7:d0:6a:83:32:1e:0c:de:5a:af:61:cc:
                    39:36:9c:4d:25:6f:d9:bc:df:fa:8d:66:6d:8a:18:
                    ad:12:7e:bf:11:e3:38:1c:2d:35:ba:ca:05:39:31:
                    80:ed:d6:46:cb:47:03:50:0f:5f:8e:7f:27:aa:f8:
                    24:a8:18:f8:47:26:8f:2e:a9:42:06:d6:c6:c7:7e:
                    36:0f:64:f8:bf:5b:19:97:17:2f:74:53:00:57:3b:
                    80:fd:24:83:72:51:cd:7e:3e:89:28:81:68:14:50:
                    94:aa:01:ee:08:41:64:91:73:40:af:2d:fd:ff:79:
                    4b:65:43:cb:d0:7e:e1:14:c7:74:4b:45:ac:7a:f7:
                    4a:66:97:e1:ee:58:5d:b6:95:11:de:55:4f:21:81:
                    c9:5b:50:65:41:d8:39:ff:d0:d0:90:fa:41:c0:54:
                    ce:ac:50:21:89:f7:6a:d8:ba:5e:75:70:0d:1b:52:
                    9d:b8:15:62:b2:f9:b0:9b:28:c3:1f:a5:58:78:42:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:32:F1:83:56:72:94:E8:6E:44:DC:8F:FD:73:28:E8:F5:C5:1C:FF
            X509v3 Authority Key Identifier:
                keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:92:18:39:be:6b:e2:22:86:ff:06:fc:61:55:b7:22:ea:6b:
         ab:72:b7:b5:bb:1f:de:6e:1b:c0:17:25:17:3d:3b:d6:85:34:
         55:ce:a1:eb:4a:45:72:0c:7a:32:2e:1c:e8:85:76:69:39:6d:
         7e:ef:3e:2c:f4:ca:32:bc:0c:65:ad:e3:c5:ea:fb:3c:67:98:
         04:91:cd:8f:d6:50:e9:b3:8c:83:5a:15:0c:b6:10:b8:10:ff:
         40:59:a4:c2:83:4b:63:86:e3:52:a5:76:89:38:c6:87:74:86:
         7c:86:c9:e3:88:76:49:c5:d2:90:6d:7e:0a:ea:1c:f1:cd:6e:
         bd:ba:17:56:fb:03:6b:a6:b7:ac:29:2e:e0:d2:7b:c6:51:e5:
         64:4c:01:7a:51:63:f6:a4:35:32:ad:bd:26:ec:78:36:08:16:
         c6:3c:10:1e:74:0f:b3:1f:16:66:c0:63:27:1e:a5:c0:78:ba:
         41:eb:1a:2b:ac:5b:d3:42:19:64:5c:7b:c1:e7:08:b3:b7:40:
         a5:5c:c0:7f:64:ca:6d:2c:e1:64:70:82:65:77:5f:5c:57:69:
         34:90:d1:f9:01:39:8b:36:78:0f:38:fe:fd:09:4e:b0:1d:71:
         df:fc:c4:f1:7a:d2:19:c1:db:4b:65:c3:b0:e7:d8:b3:73:94:
         6a:03:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 03:37:15 2026 by rpki-client