This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File:                     -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier:          vPVhhBJ1qbHwTFvQaL0NBTxuoa2RN+Rtv8pYfRKU+ic=
Subject key identifier:   4C:DF:DA:A9:30:31:4F:07:DE:32:03:CA:5B:57:6E:DF:0F:47:EF:ED
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       01EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number:          01E3
Signing time:             Tue 03 Feb 2026 02:30:25 +0000
Manifest this update:     Tue 03 Feb 2026 02:30:25 +0000
Manifest next update:     Tue 10 Feb 2026 02:30:25 +0000
Files and hashes:         1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: fnxncrxDaWFLutxcOm9kWW5X/2a3nGC4VWBA023SxWA=)
                          2: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs=)
                          3: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4=)
                          4: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: JgtSSjMUVF5aYkq/I11EUTsQN2v/Rr6UwtvaYKzNVvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 02:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Feb  3 02:30:25 2026 GMT
            Not After : Feb 10 02:30:25 2026 GMT
        Subject: CN=69815dc1-04d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:16:f8:94:18:4c:73:3b:22:2b:1a:ff:67:
                    d3:e7:fe:e0:b2:e6:11:f2:fc:45:0a:6b:2b:01:a7:
                    98:81:cb:8b:5a:0c:c2:bc:b5:e3:d6:f7:0e:17:ca:
                    dc:ff:2b:df:c3:57:70:84:13:1a:0d:2d:06:e8:3e:
                    f4:b7:3b:29:de:df:ff:ea:b1:b1:e1:1b:c7:35:4f:
                    a3:d3:25:d8:20:66:59:60:43:30:f0:e8:58:36:af:
                    5b:07:0f:2e:14:14:d8:99:cd:c2:50:70:6f:56:24:
                    87:e8:84:15:e8:94:5f:1e:f0:d2:30:82:f3:99:fe:
                    6b:00:cd:4f:39:19:f1:89:5e:25:2c:39:cc:57:81:
                    04:2a:92:89:41:5a:42:96:2f:9c:ea:08:17:25:1f:
                    a2:65:13:2f:94:c7:d6:f4:a6:a1:8f:b6:63:ae:67:
                    a1:4d:44:a0:d1:45:8c:9d:d9:2d:bb:ea:31:16:73:
                    f7:93:71:f4:ac:89:3e:e9:c2:11:0c:51:37:fe:48:
                    e4:8a:9f:e7:c3:e1:35:59:21:3d:84:cb:2c:7e:ab:
                    f0:5e:27:d0:45:31:8d:7e:12:29:a2:11:5e:6a:89:
                    2d:e8:38:ac:97:75:3d:60:a5:37:0e:d5:51:67:93:
                    88:e3:ee:ed:3d:b8:42:21:1a:ed:1f:49:a6:7f:65:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DF:DA:A9:30:31:4F:07:DE:32:03:CA:5B:57:6E:DF:0F:47:EF:ED
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:35:20:c4:83:a4:b5:1a:cb:a2:2c:b8:94:3d:05:cc:a6:64:
         75:39:81:ac:43:f1:63:db:4f:be:e2:0a:a3:bc:b5:36:f5:90:
         26:c1:e4:af:0e:d9:0b:fe:13:94:8a:a0:26:48:d5:d2:3e:9d:
         de:62:f1:f8:3a:0e:87:fe:21:2b:a9:91:fb:e3:f9:be:6f:c2:
         c3:4f:31:5f:a9:a2:ff:d2:e1:64:9e:71:15:a6:3b:8e:c5:66:
         46:aa:3d:d2:52:6b:47:74:58:f5:6c:8a:13:49:c4:a0:57:ed:
         fa:05:e2:76:63:16:a9:dc:0b:75:80:9c:12:ff:f1:11:e6:bd:
         a0:9e:ee:74:ba:e2:79:98:5d:16:0d:79:cb:87:8e:35:5d:fe:
         cd:3a:a5:a3:0f:f0:00:43:58:69:88:1f:33:8c:37:47:eb:b3:
         d7:75:43:a4:40:1b:7a:75:4e:81:96:d0:3d:fc:d4:21:b3:a0:
         0d:36:d2:95:0b:4d:ff:0a:45:00:bc:ef:99:6d:4d:e1:28:fc:
         b7:f1:4a:83:2d:ac:bf:d3:88:36:b3:25:76:4d:28:25:49:33:
         96:ed:ff:3d:d1:44:b0:d3:ed:97:81:90:ae:77:47:c5:51:42:
         c9:19:cc:c8:e9:33:40:04:c0:48:ca:1e:b2:5e:bf:c4:bf:89:
         3c:3b:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 14:47:08 2026 by rpki-client