This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
File:                     cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json)
Hash identifier:          L8grxNleDr4e3znsjODTJMbGWu4FNDj9Z6dfyFSKA3U=
Subject key identifier:   06:98:7C:BC:5A:DB:1A:4C:75:41:A2:FE:EF:FF:C5:AE:78:02:64:7C
Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
Certificate issuer:       /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
Manifest number:          01D9
Signing time:             Tue 27 Jan 2026 02:06:46 +0000
Manifest this update:     Tue 27 Jan 2026 02:06:46 +0000
Manifest next update:     Tue 03 Feb 2026 02:06:46 +0000
Files and hashes:         1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: Fe5Pidvtj20q04vldXiTbORGGnqaZRETLmcjKKDdQpU=)
                          2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: UyfMMb1+MxfY9sz24UI+SyQxwGOXE8nJHXlCf8yhy2I=)
                          3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: d0hrWabvEDExci5t6WU7rsD4gdFR7O4tRXZR37UM1GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 02:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
        Validity
            Not Before: Jan 27 02:06:46 2026 GMT
            Not After : Feb  3 02:06:46 2026 GMT
        Subject: CN=69781db6-baaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:4b:43:9b:9f:90:e4:6d:39:8c:66:67:9b:5f:
                    27:89:72:cf:93:56:2c:6c:36:a7:2d:3a:bf:b1:39:
                    49:01:93:34:b2:83:c9:87:57:2b:ae:68:ed:aa:87:
                    4c:c4:e5:fb:d6:e2:cb:ba:ee:57:94:3a:4e:2d:de:
                    bc:02:d3:07:a2:41:16:fb:83:0e:d9:d3:92:a8:84:
                    ef:e2:00:44:08:c8:ce:62:e6:7c:f3:dd:99:e9:cb:
                    c3:1a:e3:fb:e7:41:44:9b:82:81:ef:8d:8c:9f:b2:
                    6b:4d:2f:6a:1a:2e:15:c6:81:66:31:6c:23:dd:94:
                    06:62:22:a4:96:38:e3:0c:ce:fb:ce:82:e1:17:5f:
                    8e:b2:3e:71:2c:10:08:85:ee:b5:05:30:05:c7:23:
                    8d:a6:88:5c:a1:68:89:af:0b:d4:b1:4c:17:c4:66:
                    93:60:c5:3a:47:d4:61:32:05:f1:1e:12:5a:d1:5c:
                    f8:24:d8:50:0e:54:18:80:69:fa:e7:60:b4:56:be:
                    a5:41:6b:ea:6b:32:75:72:b2:1c:76:f1:96:51:f8:
                    a3:87:42:fd:88:11:e3:a5:dc:4c:79:f9:ee:74:4b:
                    3f:7b:6f:f1:cd:3b:24:83:46:76:78:18:23:ee:73:
                    38:d9:8f:44:75:11:7c:f8:12:1f:69:f5:bf:e6:e8:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:7C:BC:5A:DB:1A:4C:75:41:A2:FE:EF:FF:C5:AE:78:02:64:7C
            X509v3 Authority Key Identifier:
                keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:3e:26:98:b4:27:c9:cb:ae:5f:d7:e0:42:0a:57:3e:d7:
         d5:62:02:bb:79:41:9c:cf:ff:c2:54:cf:fd:c3:26:89:d8:21:
         f4:59:1a:31:45:63:7c:a1:b9:70:30:7f:ca:21:6d:df:34:61:
         fa:e1:0b:14:1a:6a:02:24:d1:f5:cb:d6:51:50:69:5d:f4:6b:
         df:ab:1c:34:b7:4f:fb:8f:f2:70:e9:fd:33:9a:2a:22:14:2c:
         c3:0f:b3:d7:07:63:e5:1f:6a:9a:e1:f7:66:cd:84:89:2f:c1:
         ae:de:97:e3:b3:e6:60:47:b0:39:7b:28:f0:a9:f7:9c:5f:40:
         3c:6d:29:41:6c:41:65:f6:30:b6:74:65:3a:b5:67:c5:e5:34:
         6b:8c:cf:e3:8c:8a:ce:0e:b6:e8:b5:37:5e:fb:5e:c1:17:c4:
         f5:b5:7c:fb:fc:ac:10:69:2f:a4:e6:5f:2d:63:cb:2e:21:87:
         d6:83:fb:f1:86:a6:dc:71:85:b1:75:cf:aa:1c:5f:a7:76:e4:
         16:1f:37:b0:18:72:4e:2d:5d:5f:10:7f:64:30:d2:b9:7c:59:
         86:c7:0a:23:e3:35:7f:7f:06:8e:bf:35:60:fa:0f:1b:76:8d:
         4a:4d:ed:b6:b9:d2:59:c9:e6:3c:d5:98:df:78:23:90:9a:c5:
         8e:ca:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:24:09 2026 by rpki-client