This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
File:                     2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json)
Hash identifier:          jDpfZpUcPxsFS+StxqOUFPoM7ZE8o9dep684SZK2tTE=
Subject key identifier:   89:AE:51:6A:FA:84:5D:C9:4E:1D:92:9B:BC:E1:C3:76:11:95:7A:8C
Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
Certificate issuer:       /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
Manifest number:          0750
Signing time:             Fri 30 Jan 2026 21:18:00 +0000
Manifest this update:     Fri 30 Jan 2026 21:17:59 +0000
Manifest next update:     Fri 06 Feb 2026 21:17:59 +0000
Files and hashes:         1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: rUUbVfoUskGmH5+YvLCWZJ1MrsPpVUEFHtHnuKNCQ5w=)
                          2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl
                          rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Feb 2026 21:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
        Validity
            Not Before: Jan 30 21:17:59 2026 GMT
            Not After : Feb  6 21:17:59 2026 GMT
        Subject: CN=697d2007-64e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:e7:ba:b3:91:18:29:6f:12:ad:c3:de:b2:
                    a5:f6:7e:76:fe:df:81:a2:d4:b5:e9:bd:fa:20:9e:
                    0d:fc:15:0b:68:15:09:f6:27:56:35:7a:b9:dd:f5:
                    22:a7:72:22:c6:04:e5:23:27:cb:07:70:ae:b5:8d:
                    7e:50:d6:08:52:e5:c9:df:79:65:7a:7b:7b:99:06:
                    5b:c5:82:03:e9:11:70:09:d5:af:58:e4:62:51:f9:
                    02:9c:77:45:77:08:1e:c2:64:9e:39:b9:09:24:95:
                    ad:21:70:49:ff:0f:0b:3a:35:1d:b1:26:1e:19:ab:
                    da:5f:ae:f6:8a:4d:19:b8:c5:8f:83:03:ee:28:5e:
                    b6:60:b8:d3:5c:6d:4c:49:07:e0:c4:2e:5d:fa:b2:
                    3e:6a:22:a1:08:e5:2b:97:f7:4a:a8:2d:08:52:bc:
                    b0:12:fd:29:f6:dc:bb:3d:72:7d:db:27:18:79:30:
                    4c:4d:4e:5b:d4:e1:f5:07:14:22:4f:ad:f4:13:b1:
                    c9:9f:66:30:6c:1f:f8:5e:73:ec:0d:d3:e3:dd:0e:
                    ea:f4:b0:95:3e:0a:ba:1a:54:de:1b:64:3b:4f:77:
                    93:59:83:43:eb:52:8c:da:3d:ac:a0:13:de:35:1e:
                    d2:0e:b2:fd:34:d9:ff:ce:a3:4a:07:c6:48:bc:bc:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AE:51:6A:FA:84:5D:C9:4E:1D:92:9B:BC:E1:C3:76:11:95:7A:8C
            X509v3 Authority Key Identifier:
                keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:bb:1e:07:61:61:5b:c1:dd:e0:20:02:8b:80:89:6d:74:72:
         8e:02:5b:17:c7:62:a3:46:64:6b:df:0c:40:2f:ee:05:40:b0:
         96:5a:ac:75:0e:78:54:2b:a6:40:ed:ed:8f:f5:43:a6:46:ce:
         38:f8:c3:8f:a1:80:a4:6c:1b:9a:82:f4:4a:96:a7:25:9b:3a:
         8f:b1:01:7c:61:8d:08:6d:3e:cd:48:70:43:27:63:99:5c:cd:
         39:26:4d:b5:db:06:ef:27:18:b1:d0:fa:1b:e3:ea:40:5f:75:
         31:08:ad:68:26:07:2e:b0:34:cf:b7:4a:e8:f7:d4:a9:00:a2:
         61:9a:9c:c9:5d:71:4c:cc:d5:8f:15:2c:15:63:fd:5f:cf:2a:
         13:16:26:3c:0b:a8:3a:87:7b:69:29:82:5b:a8:57:15:e4:27:
         54:18:44:c2:96:e4:ea:8a:40:54:33:ce:23:33:b1:1c:a5:c7:
         2a:c1:84:e2:c9:db:9e:7a:fd:30:19:43:39:5b:5a:c5:b1:df:
         d4:7a:cc:2e:f9:b1:34:43:17:b4:26:a9:c6:95:1f:46:5a:90:
         a0:58:2f:ab:29:6c:52:d9:c4:31:36:ce:dc:c6:d8:ab:d5:94:
         48:cf:6b:1b:c5:3a:06:84:ca:17:f3:57:28:53:bd:4f:d5:2a:
         db:a0:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 11:54:06 2026 by rpki-client