This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
File:                     8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft (raw, json)
Hash identifier:          4TruSKQQLdZRFTt3F4HCIiPvq7jBPDjeQ0tgcz/YkWk=
Subject key identifier:   A9:93:CD:20:CA:A6:6E:5B:37:B7:FF:06:D2:68:90:BE:7C:13:35:48
Authority key identifier: F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50
Certificate issuer:       /CN=A91E855B/serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
Manifest number:          05
Signing time:             Sat 17 Jan 2026 07:07:05 +0000
Manifest this update:     Sat 17 Jan 2026 07:07:05 +0000
Manifest next update:     Sat 24 Jan 2026 07:07:05 +0000
Files and hashes:         1: 8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl (hash: Td6OhL65X1tVYKrFBX7/VyUhsVzDiDsYiOrPsg01Vz4=)
                          2: 2D933FE8EF6711F0AD461381586F56BC.roa (hash: vd8PSyQ4UFHiAqdJ3mJNRYeQDd0f7KR/sQVvUkKkl88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=F232408485CC1A4038BDB31BFAF3261540310950
        Validity
            Not Before: Jan 17 07:07:05 2026 GMT
            Not After : Jan 24 07:07:05 2026 GMT
        Subject: CN=696b3519-dffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e1:e4:f2:7d:eb:9b:f7:45:7b:40:dd:3b:a5:
                    c7:bb:a4:95:b8:fb:6b:02:8f:64:34:cc:1f:dc:3c:
                    06:65:30:7b:20:9b:eb:2f:01:a5:ee:73:cc:a7:a0:
                    bb:45:94:ee:21:1b:05:db:3b:c0:f9:ba:8b:aa:6b:
                    2e:e4:9c:24:59:6f:76:c1:de:46:be:32:92:59:90:
                    56:cd:67:7f:10:8d:92:60:39:d6:74:4f:25:24:84:
                    be:b6:cd:b4:7e:d9:78:dd:53:bd:61:ef:57:04:74:
                    92:50:20:6f:39:80:d3:5d:55:b6:d7:14:7d:12:11:
                    c6:42:72:df:b8:f7:b0:96:75:f9:d5:db:dd:10:95:
                    89:25:de:c8:df:fd:55:86:c5:0f:dc:89:0d:14:c1:
                    99:1f:ec:51:ef:24:db:ce:85:80:1a:7f:3d:a7:1b:
                    87:1d:67:3e:8b:9d:4f:62:71:f7:51:e8:b5:74:5c:
                    a7:db:14:ac:28:be:73:c3:d1:7f:ae:73:14:0b:54:
                    16:af:83:7e:8b:2d:f8:fb:c6:9a:5b:fd:f4:19:12:
                    9b:dd:28:f9:5b:fb:02:8b:a4:3c:84:54:0f:00:88:
                    cf:18:29:56:93:2c:43:97:f9:47:36:4c:31:e2:f3:
                    09:c4:d6:b8:c2:12:15:5d:b5:6f:97:cd:67:33:52:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:CD:20:CA:A6:6E:5B:37:B7:FF:06:D2:68:90:BE:7C:13:35:48
            X509v3 Authority Key Identifier:
                keyid:F2:32:40:84:85:CC:1A:40:38:BD:B3:1B:FA:F3:26:15:40:31:09:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8jJAhIXMGkA4vbMb-vMmFUAxCVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/6805C124EF6611F0833D7B26586F56BC/8jJAhIXMGkA4vbMb-vMmFUAxCVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:07:c0:ec:d4:e7:43:85:1b:e5:97:ac:e6:b8:dd:33:4d:70:
         be:73:a9:88:67:d6:c8:cb:fe:57:bf:3e:2c:05:66:8e:01:d2:
         ed:cc:a0:07:29:c9:14:61:02:69:96:f2:0c:c8:54:0b:1f:93:
         32:96:4a:23:38:f9:f4:07:97:02:95:c7:2c:0e:1f:fc:11:7f:
         47:5a:fa:10:53:8f:8c:47:d4:bd:e7:e4:b4:90:77:77:f5:c1:
         3e:2a:3c:0a:f6:27:37:90:53:87:fb:c9:bb:a9:71:29:fc:6e:
         59:88:93:43:cd:58:a4:40:d7:d9:b4:27:6c:78:ff:41:da:33:
         c5:16:29:8b:5a:75:e4:8c:09:78:79:6b:14:85:f9:67:4c:e6:
         26:0f:7a:74:3b:c9:16:63:cf:e9:d2:21:f9:11:a3:6b:08:34:
         c4:28:88:d8:4b:97:34:21:00:b2:71:60:7b:69:23:2a:83:bb:
         67:a1:10:20:04:ac:cf:b7:81:a7:de:9e:83:fc:71:23:49:a5:
         ca:23:8b:63:f5:73:f0:27:ba:0c:62:01:b1:3e:90:25:1a:81:
         78:60:19:e0:35:8f:a0:c8:9d:cb:a3:62:71:f2:ba:41:ff:39:
         e3:d8:9d:37:2f:38:83:d2:b1:dc:79:6a:1b:37:a3:c6:32:a5:
         db:7d:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:12:53 2026 by rpki-client