This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File:                     mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier:          FpAzOD1t5Eb+iQ2l22QH/qe6RnS8aiHS2US34v4aVao=
Subject key identifier:   2B:C2:45:79:EC:72:83:49:23:49:68:2F:5C:73:E3:A8:F2:EE:57:83
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer:       /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number:          024F
Signing time:             Fri 16 Jan 2026 15:52:47 +0000
Manifest this update:     Fri 16 Jan 2026 15:52:46 +0000
Manifest next update:     Fri 23 Jan 2026 15:52:46 +0000
Files and hashes:         1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: PNzJyOw4BYShWeMB2WVUjtHyhgeeYnhWziFIGXAd2FM=)
                          2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: DDQFrWham/U59GyXcADDkISHhTPDVVw43nsQI5/mJPk=)
                          3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: QOYUSMPGM1+90C8A1BEomdU9Hz2wdTfmlCl8DZMPUHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 15:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
        Validity
            Not Before: Jan 16 15:52:46 2026 GMT
            Not After : Jan 23 15:52:46 2026 GMT
        Subject: CN=696a5ecf-dc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:f4:6e:93:29:99:03:e9:0f:fc:8c:e9:8e:
                    2b:49:bc:df:a8:0c:6a:87:c5:22:fc:13:7c:c3:cf:
                    3b:7c:f0:12:34:24:6e:39:7f:5a:5a:00:b9:86:95:
                    6a:c8:a0:2c:64:f9:84:2d:97:46:63:8e:4e:72:22:
                    bc:55:ad:01:36:3f:ed:e7:65:53:de:7b:6d:a6:91:
                    c8:bd:2f:9e:15:65:cd:7c:c3:ba:e8:4d:dd:de:94:
                    18:fc:98:65:4c:4f:a0:c2:83:a3:c6:44:49:df:57:
                    a3:30:78:6c:66:cc:7f:d4:97:53:56:1f:9d:d4:f2:
                    8c:18:3a:53:5c:a8:ad:c7:7d:09:e9:5e:64:3f:00:
                    0e:74:64:2d:86:06:3b:e8:d8:a8:f1:24:8e:ff:d4:
                    ab:a5:2d:ae:2e:12:30:23:3a:98:9f:3a:a2:54:3e:
                    9c:27:7b:40:8c:54:66:02:0f:11:30:7c:b0:4b:bd:
                    1a:b4:a2:c0:ad:20:0a:ac:c6:88:a7:b7:bc:6f:fa:
                    7b:4d:bc:77:92:d9:fd:06:f1:3f:5b:a4:1f:50:09:
                    e1:5a:b9:0c:f2:a6:ec:c7:52:0b:65:c0:48:0c:d5:
                    ac:60:44:64:e2:49:72:aa:89:1d:af:6e:9e:c0:f3:
                    11:77:a0:f4:6b:f1:ef:10:6a:1e:66:24:f9:28:86:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:45:79:EC:72:83:49:23:49:68:2F:5C:73:E3:A8:F2:EE:57:83
            X509v3 Authority Key Identifier:
                keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:2b:11:06:44:e4:55:62:61:9a:25:3b:ef:0f:78:0c:d4:
         82:fe:97:f4:15:20:b3:3c:3c:4b:f5:1b:78:a6:18:84:4c:a2:
         7b:fd:f3:a3:da:a6:5a:8e:09:b9:7a:49:09:d9:40:31:4d:54:
         40:5f:07:ae:99:4e:1d:67:24:fc:4a:dd:11:88:53:44:16:c3:
         5d:da:0c:b4:0f:3d:dd:ed:c6:6c:a7:7f:05:b4:ec:5c:e5:04:
         7e:61:98:04:db:be:b1:ed:6b:06:60:9a:53:b4:a1:b1:63:74:
         02:d2:90:73:49:90:71:37:91:fc:c8:19:d2:af:e1:68:a0:3b:
         e0:a4:91:f8:20:82:62:0b:19:56:b5:f0:06:5d:b8:16:2c:1f:
         0f:eb:79:4d:94:0a:a5:0b:ff:16:fd:2b:33:14:d2:0c:bd:bc:
         5d:40:fd:90:81:44:a8:03:9e:45:42:e0:88:10:99:9b:02:0b:
         37:38:c2:10:62:55:5c:d6:19:48:f0:55:0e:d0:73:ae:4d:7b:
         21:7b:74:0a:73:ef:11:b7:0c:98:a0:58:b6:ff:93:26:71:d6:
         60:ee:4a:00:90:24:7c:e6:bf:8f:1f:99:96:10:c8:72:45:76:
         fd:f4:6e:aa:87:39:74:d5:69:19:b3:24:0f:ee:ff:b9:4c:f7:
         e9:27:37:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5
MDg5NkFCRUIwHhcNMjYwMTE2MTU1MjQ2WhcNMjYwMTIzMTU1MjQ2WjAYMRYwFAYD
VQQDDA02OTZhNWVjZi1kYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfD0bpMpmQPpD/yM6Y4rSbzfqAxqh8Ui/BN8w887fPASNCRuOX9aWgC5hpVq
yKAsZPmELZdGY45OciK8Va0BNj/t52VT3nttppHIvS+eFWXNfMO66E3d3pQY/Jhl
TE+gwoOjxkRJ31ejMHhsZsx/1JdTVh+d1PKMGDpTXKitx30J6V5kPwAOdGQthgY7
6Nio8SSO/9SrpS2uLhIwIzqYnzqiVD6cJ3tAjFRmAg8RMHywS70atKLArSAKrMaI
p7e8b/p7Tbx3ktn9BvE/W6QfUAnhWrkM8qbsx1ILZcBIDNWsYERk4klyqokdr26e
wPMRd6D0a/HvEGoeZiT5KIaoNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvCRXns
coNJI0loL1xz46jy7leDMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx
OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu
Ym1hTVI5UkltTUNRaVdxLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApfSsRBkTkVWJhmiU77w94DNSC/pf0FSCzPDxL9Rt4phiETKJ7/fOj
2qZajgm5ekkJ2UAxTVRAXweumU4dZyT8St0RiFNEFsNd2gy0Dz3d7cZsp38FtOxc
5QR+YZgE276x7WsGYJpTtKGxY3QC0pBzSZBxN5H8yBnSr+FooDvgpJH4IIJiCxlW
tfAGXbgWLB8P63lNlAqlC/8W/SszFNIMvbxdQP2QgUSoA55FQuCIEJmbAgs3OMIQ
YlVc1hlI8FUO0HOuTXshe3QKc+8RtwyYoFi2/5MmcdZg7koAkCR85r+PH5mWEMhy
RXb99G6qhzl01WkZsyQP7v+5TPfpJzeA
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:16 2026 by rpki-client