This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File:                     8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier:          Hrz2IS3I6B9bIVXiTmmTuVrqUsm58f931s8hll/NW0U=
Subject key identifier:   36:65:26:0A:28:2C:22:74:7D:25:60:16:9B:D0:B4:82:D4:92:93:FE
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer:       /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial:       0619
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number:          0602
Signing time:             Sat 24 Jan 2026 22:12:25 +0000
Manifest this update:     Sat 24 Jan 2026 22:12:24 +0000
Manifest next update:     Sat 31 Jan 2026 22:12:24 +0000
Files and hashes:         1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: K41MLEOMHc7nEuCXyhT59RKtV7sq9FkUQh1JqnTSH8w=)
                          2: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: UjG7oDUQ214221eoKLkpu49JL/kh+6CSjcDdtuUyQv4=)
                          3: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: eZp28/ZhhARP0YeFheqkwTLrrVm+pDubRXIX/coSMO4=)
                          4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: K5rdCvcUlROQ0BuNDtcUQ3F8rgeuD4032+cfZuPHo+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
        Validity
            Not Before: Jan 24 22:12:24 2026 GMT
            Not After : Jan 31 22:12:24 2026 GMT
        Subject: CN=697543c9-63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:7c:c5:32:0f:33:d0:80:f8:2e:da:a2:fd:
                    26:0b:65:1d:8f:e1:67:88:9a:db:c8:ef:db:70:0c:
                    b0:71:7d:d4:ac:31:a6:a6:bc:43:c3:28:c0:04:88:
                    af:ab:fa:e5:f9:03:f6:e8:1e:e2:a3:09:00:06:32:
                    3a:aa:2c:28:a2:3c:97:3e:92:c6:74:09:be:69:53:
                    20:bc:02:39:9e:ad:bd:58:19:3e:f7:0e:34:e3:b6:
                    d2:53:0d:9d:51:1c:db:17:b3:f1:84:03:65:bb:1e:
                    1c:fe:88:77:75:93:b5:d8:5d:33:67:8e:87:d2:b7:
                    42:10:df:60:dd:65:99:5a:69:83:58:7e:a2:32:70:
                    9e:51:cc:2c:76:21:31:c5:2b:b3:dc:70:ed:a3:92:
                    0d:56:55:06:1a:27:33:5e:14:39:ca:4c:8f:ce:44:
                    ae:9d:82:c8:bd:4e:79:ca:db:51:9a:44:30:a0:1f:
                    45:c0:e6:80:46:c6:63:2c:48:52:b8:68:34:d8:48:
                    47:3a:05:a4:29:2d:85:89:53:5f:8f:bc:b7:39:b6:
                    57:1a:f1:30:8d:41:ae:11:e7:ae:b4:45:a8:15:c2:
                    c6:da:56:e9:a8:4d:2f:1f:da:58:5d:e3:00:14:dc:
                    1f:5a:50:57:75:65:d8:67:71:ea:d9:c7:07:6f:af:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:26:0A:28:2C:22:74:7D:25:60:16:9B:D0:B4:82:D4:92:93:FE
            X509v3 Authority Key Identifier:
                keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:de:31:ee:bc:b3:9e:c6:24:96:5d:8f:cd:62:90:9d:88:
         43:82:f0:7c:a6:f5:b0:43:67:91:b7:42:b0:cd:6f:91:e2:5d:
         0d:64:d9:70:d8:68:5f:38:9f:1d:55:62:80:6c:34:5b:6c:89:
         96:9a:7c:ee:25:83:3a:4f:4b:1b:29:0d:b9:8a:bd:48:0e:fd:
         ee:c0:24:52:af:ba:30:56:44:3f:10:d8:52:71:2f:17:20:8b:
         6e:95:b7:84:7e:5d:7c:9b:48:b9:18:51:82:96:8c:c3:7d:80:
         6f:94:57:6d:e6:f8:bc:e2:b1:bf:52:16:61:ba:ef:9a:c9:f6:
         ea:7f:4c:e1:7d:84:10:1a:b1:82:d4:fe:01:02:3a:d2:ee:d1:
         95:2b:28:15:24:7a:5b:58:d4:5b:b4:95:4e:8a:c2:93:b7:f0:
         18:75:e8:a3:22:a5:51:9b:59:13:54:ea:fa:3d:55:f3:9c:b4:
         c1:1d:b3:59:6f:49:43:17:bf:1f:ac:48:49:fb:7f:b0:2a:c7:
         53:b9:67:b4:74:4d:6b:c5:da:7b:f9:f9:a6:d1:1d:c6:9d:69:
         5e:c3:cb:b4:a2:86:a6:c9:de:0d:71:8b:63:db:41:7e:6e:23:
         b9:97:88:6d:d9:02:7c:46:17:f1:41:d1:4e:4e:a9:f8:0c:04:
         ed:dc:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:49 2026 by rpki-client