This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File:                     A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier:          7EJruIYOeXtxFqWFf+k+QxQVZEW8gCoyiZo7wUUzkOE=
Subject key identifier:   A7:50:4A:7F:AD:A4:B9:20:C3:FF:67:73:6B:1B:1D:AD:45:07:F8:9F
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number:          52
Signing time:             Sat 17 Jan 2026 06:16:03 +0000
Manifest this update:     Sat 17 Jan 2026 06:16:02 +0000
Manifest next update:     Sat 24 Jan 2026 06:16:02 +0000
Files and hashes:         1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: Yi+cAeRqvwU4gydXqzX6dmlrx5fnbrAycy6NI8Qv3VE=)
                          2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: Top1RS38Q6RG/Bo0KeriCxYaYwIm8AI46xZdJa/NP8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: Jan 17 06:16:02 2026 GMT
            Not After : Jan 24 06:16:02 2026 GMT
        Subject: CN=696b2923-01ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:74:a0:ae:40:73:3d:4e:2b:cf:85:44:fb:
                    ff:30:d1:57:31:6c:e3:e6:39:ba:5d:ff:d1:4a:06:
                    6d:49:0d:55:e7:1b:38:45:81:d6:4a:13:af:02:20:
                    2f:08:2e:4d:6c:bb:a5:66:06:98:eb:f2:c9:8c:df:
                    64:05:57:13:e8:36:98:fa:24:98:2f:77:c0:ee:5a:
                    a7:1f:c6:e1:93:10:e7:0c:ad:01:ee:bc:33:2b:6f:
                    b0:db:11:4a:d2:85:fa:39:f4:aa:e4:73:82:26:b1:
                    d5:b3:bd:72:f6:82:71:2e:c9:0a:6b:48:b3:df:b8:
                    78:7d:ac:2c:77:2c:77:0a:c6:09:e7:9e:d8:81:42:
                    a2:02:29:31:b9:f4:90:d2:c8:f5:5a:cb:90:e4:57:
                    57:2d:12:9b:a0:8c:86:44:ac:86:75:0f:7c:54:55:
                    d7:d1:94:17:a1:87:ca:13:34:9b:47:61:06:bc:3d:
                    01:15:c5:ca:16:6c:86:81:76:dc:7b:f0:6f:1a:26:
                    a8:e2:38:b0:cb:d8:6f:fb:7b:af:93:e6:7c:66:9c:
                    19:df:ad:f8:cf:b2:6d:32:87:bf:aa:9f:2a:78:03:
                    bd:fc:c7:55:11:71:db:a0:0d:a0:72:f7:f1:61:7d:
                    92:a3:6a:10:01:aa:2d:79:32:20:3c:6d:a7:42:7d:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:4A:7F:AD:A4:B9:20:C3:FF:67:73:6B:1B:1D:AD:45:07:F8:9F
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:cd:8e:17:3f:64:59:9b:ce:5b:8a:1a:17:31:d3:0c:ba:
         05:78:bf:c3:65:a3:36:d4:5e:74:16:f8:ee:db:98:68:c0:0e:
         76:d0:af:d6:b1:59:e8:e6:b4:4b:e5:23:7f:11:ba:22:b8:4d:
         e1:82:2e:eb:25:f1:66:c6:d9:04:78:9d:56:1b:50:51:c7:9b:
         dc:3f:93:a7:42:ff:7e:77:8c:33:01:03:de:32:79:95:4e:00:
         f6:f4:c9:bd:bd:b2:26:67:34:49:6f:9b:a3:c5:5c:b6:69:45:
         63:91:90:77:10:46:25:e5:75:fc:69:e4:43:03:bf:86:70:40:
         86:c9:03:23:f8:80:20:09:18:28:d5:bd:8a:7d:86:a3:5a:ae:
         46:7d:d1:87:aa:7e:13:ae:d6:60:ce:1e:c4:95:de:b2:42:e4:
         f7:b1:c0:04:3e:df:23:f6:68:db:6c:2d:e7:ea:58:83:89:7e:
         fd:50:b3:7d:35:56:3f:a8:8d:23:9f:cc:62:d3:43:33:98:48:
         26:65:70:0d:fd:5d:de:64:de:3b:f2:33:04:90:51:ec:9d:26:
         00:1b:6c:81:6b:a8:62:b0:27:d4:7e:30:dd:d9:d4:22:1b:1b:
         02:23:76:c8:4b:a1:62:a9:dc:99:39:c2:42:05:57:2d:d6:0e:
         72:51:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:26 2026 by rpki-client