This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File:                     mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier:          tK/4cK02p58el5zLiXnJCYnFVDanL3KNVCE+02ORS0M=
Subject key identifier:   54:82:FF:2A:77:DD:29:C4:10:FF:20:F9:BA:87:E1:D7:A0:F1:64:9F
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       11D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number:          0D6E
Signing time:             Wed 28 Jan 2026 19:50:12 +0000
Manifest this update:     Wed 28 Jan 2026 19:50:12 +0000
Manifest next update:     Wed 04 Feb 2026 19:50:12 +0000
Files and hashes:         1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: JoUm4EVrjWE/9hEDXma/rM2CuyZZu51EhYcbGR3r8Ro=)
                          2: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=)
                          3: A173B894112711F0845DF16FC4F9AE02.roa (hash: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U=)
                          4: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4nldf+8SF0UXyvc5ZFdPynmdfFfU94WXlTR6JoprTg=)
                          5: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: NAdbZTtzlwtewbjTfuMORoVz4S6lpr350iCxdpAhbLc=)
                          6: F7E266FEDA5211F09C836FE292D3641D.roa (hash: hcgazntWPxUxy2imzUBIxMsOW8zlFh5dhFp9AKH3xwU=)
                          7: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: LcfL6WlPDAVnfVe8FVQ0PTDxHLr1cQFF1C/EotpyU7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4568 (0x11d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jan 28 19:50:12 2026 GMT
            Not After : Feb  4 19:50:12 2026 GMT
        Subject: CN=697a6874-f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:01:5d:5e:dd:3b:a9:ce:9c:4f:1a:8d:33:
                    99:ed:6c:04:2e:d2:a6:02:1c:aa:00:0f:6a:d0:f0:
                    d2:4f:7b:7e:27:94:54:c9:02:30:de:32:c9:f4:0c:
                    c3:79:40:a9:00:39:d3:47:12:bd:e0:f8:e5:b3:01:
                    94:0a:5b:b9:1d:8c:32:61:5e:ed:e2:e6:03:6e:e9:
                    cd:b4:e5:ca:8f:2b:34:7f:1b:45:c1:e3:21:7b:10:
                    9b:bd:fa:c7:85:4d:02:f8:1f:e6:0f:47:47:ae:47:
                    ac:75:69:8f:15:b9:39:59:60:7a:84:19:dc:ba:7e:
                    11:58:6a:fa:dd:55:eb:ed:fd:2e:24:da:9d:a2:80:
                    7d:76:02:8d:73:99:1f:0c:c4:55:bd:83:c4:38:c8:
                    23:7b:c8:21:45:b5:85:be:55:8b:b2:78:67:d9:aa:
                    ee:ad:e8:e8:b9:e8:e0:21:52:73:a3:d5:f8:f8:ec:
                    07:a6:08:55:45:7e:89:bf:e1:2e:f8:8d:b0:2b:b7:
                    0f:21:89:1d:20:e9:d5:3e:cc:ab:e3:d3:6b:ed:86:
                    c8:f0:4e:e1:5e:ea:77:ae:9a:d0:5f:15:14:d0:69:
                    67:98:7b:21:74:81:40:bc:f4:31:79:2a:9e:8c:92:
                    f1:03:4b:3b:95:3d:4a:ba:f3:51:79:51:6f:fa:0d:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:FF:2A:77:DD:29:C4:10:FF:20:F9:BA:87:E1:D7:A0:F1:64:9F
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:22:74:11:d5:19:91:ed:66:59:8e:ff:f4:ea:91:df:0f:
         9f:8a:b0:e1:81:d5:3c:e9:6b:0e:a2:c8:4f:05:cc:46:be:90:
         79:77:d4:0a:9b:5d:c2:fb:48:ff:31:1e:88:7f:48:21:29:1a:
         9d:d2:1e:c8:49:42:4b:61:b5:a2:ba:19:30:a1:80:04:04:bf:
         c4:aa:ae:98:6a:4f:ae:3a:23:82:fa:8f:d1:1b:98:01:0d:ca:
         e2:b6:99:19:26:bb:df:bc:f4:a7:11:0a:f4:2c:78:c4:d5:6e:
         3d:22:e7:4f:7a:9d:66:e4:54:b1:dc:1b:ad:82:b9:ed:77:3e:
         cc:32:06:78:ce:0e:fa:c8:a8:66:bf:f8:f2:9b:83:23:c2:e0:
         f0:30:2b:aa:64:a6:e0:61:57:94:1e:92:7e:b6:40:d9:84:a4:
         b0:c6:c5:09:80:d1:98:9c:29:6f:84:90:0b:61:8d:ec:ed:ea:
         19:28:21:7a:fe:f2:67:37:19:a0:c6:4a:91:43:b8:9b:50:f9:
         0b:08:ad:0d:62:df:a0:2e:3d:a0:10:5b:28:6a:93:f6:4e:cf:
         68:7c:45:89:d6:85:af:c9:21:1c:bc:74:13:41:c0:c3:12:97:
         61:09:49:37:af:8a:a2:f0:5d:cb:b7:99:2f:db:84:8f:71:47:
         4a:b5:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 21:30:57 2026 by rpki-client