This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File:                     mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier:          a+YIF2fDqkFi8fPIh9RcP23TuWyrcjgN5Sc0JOWeiS4=
Subject key identifier:   1F:94:A9:CB:D9:7F:7D:28:9B:01:D6:6E:16:CA:B7:BA:9D:36:FD:22
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer:       /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number:          08
Signing time:             Sat 17 Jan 2026 07:05:25 +0000
Manifest this update:     Sat 17 Jan 2026 07:05:24 +0000
Manifest next update:     Sat 24 Jan 2026 07:05:24 +0000
Files and hashes:         1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: pytk5yCWLQcH+E37xVIGu64McqZNO8XEbLOkgiGkeAk=)
                          2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: ZhcQJbrC1/0EL+xA9V5mKW9bp21ubHFqtWHWB54vKrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
        Validity
            Not Before: Jan 17 07:05:24 2026 GMT
            Not After : Jan 24 07:05:24 2026 GMT
        Subject: CN=696b34b5-09ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:02:fc:2c:58:a8:a6:b8:53:85:d8:e8:38:
                    1b:54:3d:37:3e:4f:c3:83:f0:55:2b:3f:40:71:b0:
                    1a:b7:a2:24:11:9d:01:a2:df:6d:90:2f:6d:7b:41:
                    98:ab:48:7f:fd:5d:b2:8d:87:70:ee:02:0d:a4:be:
                    61:54:a9:1c:be:2b:8d:10:e8:d4:e3:d4:2b:96:cc:
                    c9:ef:1a:8e:cf:9e:73:41:dd:56:64:6d:ae:04:db:
                    14:26:67:86:b3:94:f6:71:bf:a7:f3:e0:a2:55:94:
                    b7:94:4a:06:3a:26:d7:1b:84:99:eb:08:da:53:25:
                    53:9f:0b:e7:c1:7e:5f:91:3f:d9:e1:74:6e:7d:c9:
                    a4:b5:1e:9c:13:72:1d:10:b5:1d:c6:0f:73:7c:a8:
                    58:ac:b4:e6:a8:cc:5b:47:d8:27:70:ce:cb:9c:aa:
                    c8:41:5b:96:89:87:8a:7b:bc:6a:aa:d2:fb:36:31:
                    a0:37:8d:be:48:e4:c2:17:b6:81:a4:bb:22:72:ed:
                    60:96:80:7d:fc:df:6a:43:62:be:8a:1d:86:f6:23:
                    54:02:0d:fd:88:6b:66:6e:b5:64:39:fb:64:4b:73:
                    dc:b9:ff:56:60:4c:9c:b7:f1:a9:c0:72:2e:38:74:
                    ef:08:20:29:93:dd:55:1c:7d:5e:c4:3b:45:8b:4c:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:A9:CB:D9:7F:7D:28:9B:01:D6:6E:16:CA:B7:BA:9D:36:FD:22
            X509v3 Authority Key Identifier:
                keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:d4:86:eb:d7:07:3b:ac:1b:2d:7d:b4:8a:f0:06:1a:3e:
         19:5f:f8:ae:29:7d:2b:b1:55:f7:51:e6:36:ae:ef:49:77:2e:
         03:5e:d7:18:f6:d7:87:bd:cb:42:e6:b7:28:55:19:32:13:49:
         7d:1f:b0:92:a6:2e:79:58:ec:4c:eb:bb:74:0e:b8:7d:6b:5b:
         08:18:3b:02:dc:04:bf:e0:8e:7a:48:ed:21:49:6e:15:91:6b:
         49:5c:d5:5b:f6:af:a8:8d:f3:37:0d:ae:7b:80:ee:a5:ff:5a:
         ba:e2:c1:fd:1b:21:99:d6:14:2b:c3:01:87:0a:b0:4e:74:ea:
         a8:0b:bc:62:a0:df:4e:0f:8e:f8:f4:45:39:e0:29:71:44:54:
         62:68:c3:8b:c6:b8:12:6e:fb:41:4f:d7:35:7d:c7:7b:e6:d8:
         c5:e3:6d:63:8b:c2:6f:ad:37:5e:9b:d0:d6:23:74:eb:e9:a2:
         46:6d:b1:eb:e6:b4:bb:f7:c3:27:1f:15:80:aa:80:e3:1b:0f:
         ba:1d:f6:fa:15:50:e0:bc:3f:08:59:e0:82:4a:9e:ca:56:54:
         70:17:56:48:af:2e:61:dd:40:97:42:43:6d:cd:f9:56:fa:c0:
         df:a1:11:59:ad:57:a5:43:d1:f2:af:df:55:00:32:6a:72:d2:
         20:b6:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:35 2026 by rpki-client