This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File:                     FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier:          ER15YG2u6UaezBS3AJnctW3TO64WKe+XAqnnqSkDW3A=
Subject key identifier:   3A:F9:FD:85:78:84:F8:8D:A9:2A:02:CF:AE:F9:C6:7E:15:F7:A5:71
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer:       /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial:       0417
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number:          040B
Signing time:             Sat 24 Jan 2026 23:38:17 +0000
Manifest this update:     Sat 24 Jan 2026 23:38:17 +0000
Manifest next update:     Sat 31 Jan 2026 23:38:17 +0000
Files and hashes:         1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: bNBLvXuJ38Tatoq7lRxPRzlw9zgvBu8OD+N27PbbTL4=)
                          2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=)
                          3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: PFuingXxJbCOLfO1PJLeoU0/1sSC/bFas5mcjNMMakg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
                          rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
        Validity
            Not Before: Jan 24 23:38:17 2026 GMT
            Not After : Jan 31 23:38:17 2026 GMT
        Subject: CN=697557e9-0a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:a1:9b:8d:fc:53:70:7b:7a:91:db:8d:5b:
                    42:22:24:7d:2b:20:44:fa:ad:88:38:4a:1e:de:db:
                    21:f8:db:04:e2:e1:cb:8c:03:8d:e3:ea:a9:0f:71:
                    8f:c1:84:cd:7e:a8:fc:35:67:4b:5d:e5:7c:1c:87:
                    cf:e9:8c:54:6c:ab:b9:0c:81:11:24:d3:1d:0b:78:
                    f0:8c:ca:2f:d7:81:a7:1b:fc:b8:f2:23:c0:67:bf:
                    35:b8:a4:5d:99:86:8e:8b:27:af:6a:0a:d8:f6:bb:
                    cc:b7:db:1f:c5:cc:5f:24:bf:f5:a1:3d:aa:98:c7:
                    4f:70:61:c8:04:be:9e:f0:76:37:8e:00:24:3c:d1:
                    6a:8a:4b:48:68:b1:69:10:2e:ec:ca:4b:06:05:85:
                    ac:11:e2:60:89:92:79:ba:bb:a2:2a:04:54:96:29:
                    02:2b:19:15:49:7a:89:86:cd:06:fd:bf:6a:67:c0:
                    6f:03:9f:65:50:96:a4:7b:1b:2e:cb:fc:4b:53:26:
                    a1:c3:03:75:b5:78:dd:f2:78:02:be:4c:77:19:4f:
                    1b:94:c1:85:c4:26:eb:30:70:9a:37:e1:50:80:2a:
                    b9:77:e9:42:09:e8:8c:35:28:50:8c:cf:fb:46:ba:
                    55:fc:71:e3:bf:fe:14:24:a7:57:b2:7d:cd:81:d5:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F9:FD:85:78:84:F8:8D:A9:2A:02:CF:AE:F9:C6:7E:15:F7:A5:71
            X509v3 Authority Key Identifier:
                keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:eb:ff:9a:99:fc:d4:55:9a:3a:b6:dd:4c:4d:24:eb:92:38:
         77:82:2b:e5:7a:6f:30:a6:5c:5b:75:54:d4:ab:36:9b:59:08:
         9a:21:c5:ba:4a:23:cd:e4:5c:8a:70:e7:1f:eb:b2:e2:33:86:
         9e:a5:87:45:af:b1:aa:d4:17:48:89:f2:b6:ce:9a:cf:ae:ea:
         48:0f:5f:62:ab:9d:b9:7b:59:b7:25:85:9c:be:f1:72:14:71:
         38:e1:44:b8:b6:76:24:0c:57:62:f9:6e:5f:a7:da:23:06:75:
         a2:43:25:0f:76:e3:9f:c9:af:2b:be:bd:5f:77:65:97:ae:92:
         9f:e6:49:b5:2e:e8:40:7f:4a:05:52:45:f7:e9:c7:09:43:da:
         ee:c1:2c:e2:84:aa:33:59:74:97:bc:9f:b1:76:39:d5:53:d7:
         34:34:3f:23:96:91:aa:44:f7:8a:7e:33:d8:45:f7:5d:b1:aa:
         0e:b6:59:bb:7e:82:65:f6:de:cc:09:cb:e2:36:7d:8f:06:8e:
         ea:f3:e5:b5:2c:41:77:1e:fc:db:ef:33:a7:bb:c7:fb:8f:36:
         3c:b8:9d:f9:e8:fe:e0:b2:9a:a1:30:dd:0f:cf:5c:99:ad:74:
         44:9a:ef:60:67:a1:6a:2c:64:fe:6f:4d:81:de:f9:40:9a:99:
         58:92:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:21:57 2026 by rpki-client