This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
File:                     42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json)
Hash identifier:          xLOBoH+vCARsPflQTwR0Rg634W9gVSgj2ya4fbxPdps=
Subject key identifier:   43:C8:DB:DC:35:C5:27:79:55:58:1E:C6:0C:A0:49:21:9E:D8:72:60
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Certificate issuer:       /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
Manifest number:          B1
Signing time:             Tue 03 Feb 2026 05:57:45 +0000
Manifest this update:     Tue 03 Feb 2026 05:57:45 +0000
Manifest next update:     Tue 10 Feb 2026 05:57:45 +0000
Files and hashes:         1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: n//w6hjJE2cn6UESjwby5WeHdhuNmqzEatVJ8BpaTnc=)
                          2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
                          rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 05:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
        Validity
            Not Before: Feb  3 05:57:45 2026 GMT
            Not After : Feb 10 05:57:45 2026 GMT
        Subject: CN=69818e59-8561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:84:b8:30:90:9f:8c:86:d7:48:e2:6d:9e:
                    20:5e:2d:27:0a:94:69:30:7a:11:78:0b:fe:ea:de:
                    2b:91:33:ae:72:c7:13:dd:63:5c:13:3a:e5:62:1a:
                    9c:32:81:8d:8b:bb:88:1d:b5:cb:aa:52:c0:df:44:
                    ed:78:db:66:04:18:86:76:66:37:c8:56:74:72:1f:
                    1a:1e:32:2f:89:41:31:5c:26:89:53:90:10:b7:8a:
                    3c:78:f8:87:af:7a:fc:cb:5f:0d:44:63:95:38:2a:
                    5b:30:d9:a3:49:6f:0f:55:f5:d8:81:96:5b:5d:ec:
                    49:d9:1c:0c:48:33:63:f4:22:b9:0f:a9:54:be:f7:
                    6e:2a:36:10:45:41:11:c8:21:a7:bc:8b:42:9a:92:
                    e8:3d:6a:5d:a4:36:4c:60:5c:4a:b5:83:e1:da:62:
                    48:7d:56:76:6d:ac:43:8a:b4:f1:ad:62:b4:71:cc:
                    3b:25:ea:41:cb:1c:8e:f7:55:9c:a9:3e:75:39:c1:
                    8c:8a:e5:e8:10:d1:50:86:0e:8c:1b:37:b7:f3:b9:
                    99:a8:c5:94:7f:32:8e:28:ba:c0:e1:97:3e:19:b6:
                    da:19:0d:0b:51:38:ee:bd:50:11:56:7b:c3:de:af:
                    f4:c3:a5:3b:1b:af:e4:56:37:ff:1c:14:e0:fe:ba:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C8:DB:DC:35:C5:27:79:55:58:1E:C6:0C:A0:49:21:9E:D8:72:60
            X509v3 Authority Key Identifier:
                keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:f8:39:7e:f3:b8:76:26:ea:83:e0:d4:12:cb:70:ed:6f:
         e6:cd:dd:7c:3d:12:e5:b7:a6:c6:29:7a:aa:8a:29:85:fa:cf:
         56:7a:73:89:08:ad:62:f8:96:fb:4a:77:c5:07:4a:a0:c4:86:
         5e:79:eb:4e:1b:dc:52:8f:f2:cd:48:0d:b3:66:0d:9d:65:d8:
         36:71:b7:4f:05:f5:51:f7:c3:4f:f3:9d:15:77:d9:bc:36:16:
         48:0a:1a:c9:70:5e:fd:f9:60:bf:18:5d:f2:61:cc:31:51:6b:
         34:d8:04:c6:b3:07:88:89:1d:fb:51:4a:31:df:2a:31:39:1b:
         50:6b:35:bc:c9:49:43:84:64:b1:42:aa:ee:a3:95:b2:78:34:
         de:1f:f4:5a:bf:67:7b:ea:53:c3:8c:53:a9:60:07:0f:0e:12:
         10:37:f5:2b:15:86:03:69:87:df:95:20:ae:ae:f3:44:77:43:
         4a:8b:b9:24:86:06:03:b6:26:78:25:82:50:29:ab:f3:e8:a4:
         48:c8:f8:2d:cc:b1:f8:dc:22:32:b6:e9:09:ff:58:5c:e6:89:
         df:44:f3:84:3a:db:5f:3f:d0:17:13:56:86:5d:b9:4b:7f:0a:
         70:54:ee:73:e1:28:a2:79:58:64:49:6a:81:f3:c5:f9:96:aa:
         35:74:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:13:49 2026 by rpki-client