This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File:                     4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier:          JCN5KSgFD96zTc8BvwHqSrHROPgJoPRg4biEh34W3Yk=
Subject key identifier:   77:04:F2:19:09:DE:8F:CD:CF:EC:65:98:86:6D:C3:93:7A:81:4A:DB
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer:       /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial:       081C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number:          080C
Signing time:             Fri 16 Jan 2026 20:27:50 +0000
Manifest this update:     Fri 16 Jan 2026 20:27:49 +0000
Manifest next update:     Fri 23 Jan 2026 20:27:49 +0000
Files and hashes:         1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: uc0De+VvMk+ZP/JELrCyW2ZvYPFCE+2FD668i9fBNYM=)
                          2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: jJ0R9nlsxr/hD0yE5HWBzoK4P8dusyIdKYfDRYhWQyU=)
                          3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 8jSRLsCTFalWuMWmzctOoaeQi0LA+9F2nrcfuS55eGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 20:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
        Validity
            Not Before: Jan 16 20:27:49 2026 GMT
            Not After : Jan 23 20:27:49 2026 GMT
        Subject: CN=696a9f45-082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:05:eb:e6:9e:fd:51:76:21:dc:92:aa:71:
                    c1:a5:c0:e5:53:ee:5c:28:5d:01:51:d5:03:d0:16:
                    f9:71:74:39:19:04:cc:8f:5a:17:84:18:fb:e8:27:
                    a7:2d:5b:8d:27:c6:18:1a:bf:8d:65:13:a8:3c:35:
                    34:d8:7a:ee:d4:96:c4:41:73:80:1d:5b:c6:60:c0:
                    a3:a4:e8:6f:d1:51:4d:de:e1:7c:e0:42:52:66:4a:
                    90:bf:27:22:99:1b:63:ff:0f:a6:84:0c:15:8d:1b:
                    ec:2a:7e:ef:f2:ab:01:6a:a5:a6:90:f1:14:20:4d:
                    70:e1:e2:7e:8d:6a:26:4c:9f:9b:d3:62:43:b6:03:
                    6f:b2:21:12:3c:d7:01:9f:26:f1:8f:7c:3b:5d:d4:
                    d5:62:3a:8d:fe:52:03:da:79:de:e4:23:2f:3d:ac:
                    2c:c4:ef:1c:79:0b:44:5e:fe:cd:90:94:6c:0c:5b:
                    59:c8:be:a2:05:c0:57:29:fd:7b:d3:dc:25:28:47:
                    20:fa:6e:1d:b5:70:69:f1:86:93:25:cd:eb:6e:d9:
                    2f:32:ff:83:79:e1:03:47:b0:f5:94:68:03:fb:6c:
                    63:96:8b:d9:ef:8c:2a:4b:bf:98:a6:f8:f5:5d:e0:
                    ad:ba:10:39:09:f2:94:92:6a:42:1f:7f:5d:0b:b5:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:F2:19:09:DE:8F:CD:CF:EC:65:98:86:6D:C3:93:7A:81:4A:DB
            X509v3 Authority Key Identifier:
                keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:74:ba:ef:b7:f5:00:78:35:9f:e4:f2:dd:5b:dc:3b:e3:
         ab:1f:48:d6:f4:77:6e:cf:b8:00:0a:9a:76:a8:c8:d6:3b:e5:
         ae:49:09:54:f3:54:57:d5:67:72:ca:a2:a8:95:85:d2:ab:17:
         6d:93:38:9d:ea:f5:91:9f:d1:63:f9:68:76:14:18:ab:a8:38:
         b8:7b:e0:fb:ed:0c:d4:c3:e5:d0:2d:91:eb:05:0d:06:71:f3:
         3a:d4:79:06:43:5d:88:bd:aa:6e:1a:ea:ba:01:25:71:bd:be:
         36:0b:92:66:20:d4:f1:d5:60:f5:d2:21:c9:90:ee:ce:17:2b:
         c2:82:bb:01:99:2f:f9:75:1a:a2:f9:f2:4f:80:a2:56:f4:ac:
         4e:7e:c1:14:dd:9e:96:c8:aa:85:34:fe:82:0b:f2:91:a7:dd:
         11:c7:a3:d5:06:43:06:79:ea:b8:da:36:15:f7:45:bb:99:f4:
         e5:32:60:3f:5e:ab:cc:28:57:61:f3:ff:fc:94:3c:ac:81:96:
         df:3a:c8:e9:50:6d:12:c0:6b:27:5a:be:d7:7f:2f:e6:87:d1:
         96:82:37:b9:65:aa:6c:d1:08:ae:eb:ff:9f:5c:8e:6a:e5:d1:
         ea:7a:38:8b:b2:4f:fc:91:ad:2a:42:28:a6:9c:52:32:d9:ba:
         90:0d:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:27 2026 by rpki-client