This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
File:                     Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json)
Hash identifier:          BFRE7/zNmUpzD4AaEOEarELwtgTNkQjUnMUeZL1qkzQ=
Subject key identifier:   85:CB:E7:D8:8A:65:F5:FD:C1:97:71:04:D1:41:51:A6:2E:AD:2C:61
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
Manifest number:          4C
Signing time:             Sat 17 Jan 2026 06:21:34 +0000
Manifest this update:     Sat 17 Jan 2026 06:21:34 +0000
Manifest next update:     Sat 24 Jan 2026 06:21:34 +0000
Files and hashes:         1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: 3DQ5G8AEBSJXDg3o02cVlWVFhT6JS4GygZYG+B6pdTE=)
                          2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: 3KtlQ3ZGWpo6lSVpXOhuBEhvmPgoGloVI0nW1v7TibU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Jan 17 06:21:34 2026 GMT
            Not After : Jan 24 06:21:34 2026 GMT
        Subject: CN=696b2a6e-de08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:bf:2f:d0:47:10:0b:dc:93:18:89:01:1a:
                    e4:c2:08:2e:cd:86:e1:5f:fb:5e:5d:e0:68:d8:29:
                    f6:17:d9:c5:d0:46:fd:ad:94:78:c0:c9:28:23:67:
                    d0:10:ce:36:78:53:d2:f1:48:10:e9:a5:9f:40:e1:
                    c6:2d:e0:f4:e3:d3:a0:28:27:ec:67:3b:df:73:12:
                    6e:24:33:e4:eb:16:34:61:90:c8:64:69:99:df:89:
                    7f:82:f8:f2:ae:59:7b:11:3e:4b:c6:d3:68:91:16:
                    1a:e0:fb:7b:76:55:09:36:ea:fc:b7:87:8b:cc:d5:
                    43:29:12:91:d1:2d:8c:7c:13:ac:35:11:2d:1f:fb:
                    26:83:a1:9a:fb:a1:8d:45:aa:32:5a:62:c3:f1:06:
                    95:c9:e5:89:85:4f:f3:32:b4:bb:4c:0d:65:b3:68:
                    e5:e3:af:23:4d:6d:1d:a8:7b:d6:af:0a:eb:4e:b6:
                    ae:dc:9f:22:2e:f9:1d:a6:05:bf:6e:52:69:06:ef:
                    89:fa:a9:f6:c1:bc:56:2f:d5:1d:b8:5e:81:25:cc:
                    d4:ce:14:77:c5:1c:e2:5c:d0:28:22:47:d5:fa:65:
                    28:9e:ac:bb:93:18:1d:be:0a:f1:1a:67:e0:1c:d3:
                    81:f3:71:5a:a6:34:57:bd:52:2d:1c:e4:ea:e7:e0:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:E7:D8:8A:65:F5:FD:C1:97:71:04:D1:41:51:A6:2E:AD:2C:61
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:45:ce:13:56:59:08:05:ef:6b:2c:d2:4a:b9:0e:81:2a:42:
         d5:6c:e8:f6:ba:76:d5:f6:2f:cd:d0:4d:40:e6:8a:f9:f4:87:
         64:89:52:b1:be:f4:a3:b9:84:5f:aa:b2:84:ec:b8:4c:6f:68:
         91:23:08:2d:63:e7:64:b3:94:cf:6c:e7:1c:72:90:af:f3:3c:
         45:ad:38:b6:a5:a6:3e:5b:37:05:d7:21:ad:ff:a4:2b:d4:d9:
         33:3a:ac:6f:00:b7:29:fd:9e:59:37:05:16:1f:db:f9:77:15:
         e4:69:eb:28:72:e4:97:12:a9:65:ca:04:cf:87:0e:5b:93:27:
         cc:48:17:ee:98:d9:f1:c5:d1:0b:8b:bd:b7:08:d3:ee:39:0e:
         bb:92:c4:bf:24:ba:bd:29:53:d2:f9:fb:01:b5:97:31:0a:81:
         31:0c:4e:ca:1d:88:79:a8:ed:0e:f4:39:22:1e:76:07:7f:b3:
         b6:64:d3:eb:e0:3f:f5:20:70:3d:63:0d:2c:e2:9f:71:d9:fc:
         f4:0c:86:82:5d:e8:c5:ad:32:5c:02:a7:f7:3e:40:f2:b6:8d:
         2b:9b:ab:f8:ad:d5:91:1e:dc:38:2d:b4:fb:2c:e2:f1:a8:bb:
         3f:d2:6c:0f:29:03:95:47:e1:a2:92:41:78:59:2b:35:54:fa:
         a1:4b:67:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy
MERCRUU5RTAeFw0yNjAxMTcwNjIxMzRaFw0yNjAxMjQwNjIxMzRaMBgxFjAUBgNV
BAMMDTY5NmIyYTZlLWRlMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLv78v0EcQC9yTGIkBGuTCCC7NhuFf+15d4GjYKfYX2cXQRv2tlHjAySgjZ9AQ
zjZ4U9LxSBDppZ9A4cYt4PTj06AoJ+xnO99zEm4kM+TrFjRhkMhkaZnfiX+C+PKu
WXsRPkvG02iRFhrg+3t2VQk26vy3h4vM1UMpEpHRLYx8E6w1ES0f+yaDoZr7oY1F
qjJaYsPxBpXJ5YmFT/MytLtMDWWzaOXjryNNbR2oe9avCutOtq7cnyIu+R2mBb9u
UmkG74n6qfbBvFYv1R24XoElzNTOFHfFHOJc0CgiR9X6ZSierLuTGB2+CvEaZ+Ac
04HzcVqmNFe9Ui0c5Orn4PjJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhcvn2Ipl
9f3Bl3EE0UFRpi6tLGEwHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky
RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw
QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5
WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBANJFzhNWWQgF72ss0kq5DoEqQtVs6Pa6dtX2L83QTUDmivn0h2SJUrG+
9KO5hF+qsoTsuExvaJEjCC1j52SzlM9s5xxykK/zPEWtOLalpj5bNwXXIa3/pCvU
2TM6rG8Atyn9nlk3BRYf2/l3FeRp6yhy5JcSqWXKBM+HDluTJ8xIF+6Y2fHF0QuL
vbcI0+45DruSxL8kur0pU9L5+wG1lzEKgTEMTsodiHmo7Q70OSIedgd/s7Zk0+vg
P/UgcD1jDSzin3HZ/PQMhoJd6MWtMlwCp/c+QPK2jSubq/it1ZEe3DgttPss4vGo
uz/SbA8pA5VH4aKSQXhZKzVU+qFLZwY=
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:58:00 2026 by rpki-client