This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
File:                     8WJXDJs0J9iIMy8qJEOCiAfghyM.mft (raw, json)
Hash identifier:          0V33v1UioVnP+83gYuzWZGnVBVAAAgSNSXVJG0uZFio=
Subject key identifier:   0B:E4:DC:DF:80:54:6A:91:52:15:E3:7E:43:E8:DA:CA:9D:E9:CD:07
Authority key identifier: F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23
Certificate issuer:       /CN=A91EA850/serialNumber=F162570C9B3427D888332F2A2443828807E08723
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
Manifest number:          0B
Signing time:             Sat 17 Jan 2026 07:05:22 +0000
Manifest this update:     Sat 17 Jan 2026 07:05:22 +0000
Manifest next update:     Sat 24 Jan 2026 07:05:22 +0000
Files and hashes:         1: 8WJXDJs0J9iIMy8qJEOCiAfghyM.crl (hash: 7X83Dvn9UBb0gk1DcBZkX5ebQmJviudyHAdLuzVal2Y=)
                          2: 59A00586ED3B11F0828F39A04B6F56BC.roa (hash: avbMtWxCM2o2DX0P74mL3JeKWiHmBaAQM+9sixfY8qY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl
                          rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA850, serialNumber=F162570C9B3427D888332F2A2443828807E08723
        Validity
            Not Before: Jan 17 07:05:22 2026 GMT
            Not After : Jan 24 07:05:22 2026 GMT
        Subject: CN=696b34b2-e686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:59:af:3e:e1:00:0f:4f:4e:50:41:12:a2:
                    4e:af:b1:98:56:b9:76:04:ab:d4:a2:27:02:70:df:
                    63:ad:29:96:1f:af:1a:c4:6f:e7:2e:21:0d:46:8d:
                    30:a7:9c:bb:8c:72:36:9d:9f:71:77:40:ba:30:26:
                    5d:99:06:4f:43:83:d2:2e:92:e1:3b:cd:ea:58:17:
                    cc:b1:ff:56:ed:13:5c:7b:9f:0e:ed:45:4a:52:b0:
                    37:dc:98:69:83:28:3d:9d:c6:8b:47:32:e0:62:38:
                    f6:f3:d8:0e:13:52:ef:bf:0e:be:bd:20:03:73:30:
                    54:17:cc:f3:08:66:32:dc:5f:28:88:a6:94:dc:e3:
                    10:df:f8:b3:a4:b1:4f:0a:05:01:6d:25:a4:43:cb:
                    5a:4e:06:ab:08:75:77:a0:3d:74:5a:a5:21:d9:7b:
                    ac:94:62:50:8f:df:44:dc:a0:07:23:c9:6a:eb:82:
                    0f:5b:5a:79:49:36:42:30:63:0c:25:15:95:26:1c:
                    f9:30:ae:21:92:22:df:53:88:eb:36:2c:55:a0:ff:
                    90:d2:bd:53:59:4f:bc:20:ec:8b:0d:a7:11:19:0f:
                    28:0f:9c:47:6f:cc:c5:45:ed:53:39:4e:32:86:af:
                    d5:6d:2c:f2:5c:bc:0a:c5:74:3f:8b:1d:eb:80:17:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:DC:DF:80:54:6A:91:52:15:E3:7E:43:E8:DA:CA:9D:E9:CD:07
            X509v3 Authority Key Identifier:
                keyid:F1:62:57:0C:9B:34:27:D8:88:33:2F:2A:24:43:82:88:07:E0:87:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8WJXDJs0J9iIMy8qJEOCiAfghyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/302833C0EC7A11F09BA4E25D546F56BC/8WJXDJs0J9iIMy8qJEOCiAfghyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2e:0e:32:2d:ac:4a:d7:bb:c5:6b:fa:7c:af:d3:b4:e6:f1:
         a8:db:5a:1d:dc:4e:f0:1d:76:e6:2c:86:c3:36:c1:d9:07:11:
         23:e5:df:ba:9b:f0:fe:a7:f2:4b:0c:2c:cd:55:83:76:5a:1d:
         fe:21:10:04:41:2d:80:32:8a:49:e8:93:c9:6d:99:30:59:f6:
         96:27:01:3e:f0:53:03:0b:ee:92:03:6a:d3:8f:0a:20:60:5a:
         5b:73:96:7b:b4:f0:e8:03:7a:97:35:ea:b8:bf:85:46:12:30:
         22:88:e9:3f:4a:88:1e:c6:69:fa:2e:1d:25:ce:01:24:b2:a5:
         ba:0d:b8:99:42:2c:ed:cf:d3:17:f6:bb:73:ba:a1:3f:01:84:
         91:6f:c0:14:7b:47:d1:5c:cc:2c:1f:6b:5e:69:1b:fb:46:7b:
         04:0e:1e:22:71:d5:6c:75:2a:16:fc:71:31:e9:b2:39:30:04:
         fc:8c:62:94:a3:49:b5:28:59:d5:1e:a4:59:e4:02:9d:94:d9:
         d8:a7:16:76:cc:50:11:35:ab:6a:94:43:35:38:f2:92:23:5c:
         0a:f9:15:4b:c6:a1:55:3b:8c:5e:b5:fb:e8:8c:c4:7c:9d:d8:
         2e:8e:73:70:c9:69:c0:36:80:9f:a0:96:0c:57:3a:88:e8:15:
         52:8a:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:58:03 2026 by rpki-client