This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          zqD7zc1cgxD404zZGV9Bvzs/HK16LJmLDjyxsWvVn7w=
Subject key identifier:   85:A0:DE:C9:AA:66:82:CC:05:D1:53:CA:67:7E:55:E1:7B:DC:18:04
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       0A595A21E181B4990A7AE9C10EDCB61091D54C1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          041F
Signing time:             Sun 25 Jan 2026 17:21:59 +0000
Manifest this update:     Sun 25 Jan 2026 17:16:59 +0000
Manifest next update:     Mon 26 Jan 2026 18:31:59 +0000
Files and hashes:         1: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
                          2: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
                          3: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
                          4: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
                          5: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=)
                          6: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
                          7: 3130332e3233382e3133312e302f32342d3234203d3e20383334.roa (hash: fhVozekGxroP5onjbHWPJyGXl+sRiaN4KyOWlRJUoW8=)
                          8: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
                          9: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 4mLzNb4c9VZUyP6uYVnOVzcl1FowSKZVbuDerQBBD1I=)
                          10: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 18:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:59:5a:21:e1:81:b4:99:0a:7a:e9:c1:0e:dc:b6:10:91:d5:4c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jan 25 17:16:59 2026 GMT
            Not After : Jan 26 18:31:59 2026 GMT
        Subject: CN=85A0DEC9AA6682CC05D153CA677E55E17BDC1804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:12:5f:3f:25:83:b1:09:ea:5a:e0:f0:fc:
                    cc:bd:a9:1f:cf:18:78:71:82:48:94:14:54:d6:2d:
                    16:91:23:69:3f:f2:89:10:b7:b3:5a:54:24:19:aa:
                    3a:4a:f2:db:61:7c:27:c5:68:e7:21:75:04:f2:2f:
                    5a:60:36:4f:27:da:d0:cc:3b:13:62:83:81:cf:10:
                    9e:84:b3:0c:2a:b7:be:a2:2f:1f:ef:a1:79:a6:b2:
                    fc:93:65:fc:c2:75:7e:f9:96:c8:50:5a:40:af:d9:
                    62:97:1c:10:da:95:4c:de:66:ee:36:39:17:13:45:
                    60:42:2c:e6:0d:a0:c3:4e:36:fb:c2:2e:09:ad:51:
                    a9:d9:d3:3e:40:68:eb:04:56:60:af:20:b6:28:77:
                    fd:da:79:2a:36:49:f3:f0:16:6d:e0:b5:9c:8d:87:
                    6b:14:c8:f3:8c:c4:b1:db:01:ab:1c:39:64:b9:d7:
                    ce:68:be:c5:c4:74:99:6c:50:e7:2f:0a:5e:f6:d5:
                    b4:6c:a5:12:8e:fc:9e:60:11:19:6e:a9:37:51:d6:
                    dd:fe:4e:e6:19:9b:ad:37:9a:49:dd:85:90:21:1c:
                    18:e6:a7:c7:3e:ff:55:d4:6a:86:f8:55:92:c0:6f:
                    f8:b0:24:15:21:6f:75:b1:a1:19:79:ce:6a:2d:95:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A0:DE:C9:AA:66:82:CC:05:D1:53:CA:67:7E:55:E1:7B:DC:18:04
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:67:c2:72:d3:e0:79:bb:cc:28:b2:ac:18:d2:48:3c:50:f6:
         5b:b9:55:3c:13:d5:01:41:5f:f8:99:cc:4d:92:82:e7:88:fb:
         2a:00:f7:07:5f:46:b5:35:95:35:dc:76:f5:43:62:ac:a0:2d:
         f5:04:71:81:dd:68:15:c6:68:7e:fc:93:89:ec:07:44:a3:02:
         21:15:e4:ab:c5:8e:3a:9b:40:59:3f:41:01:da:5b:7c:0f:dc:
         54:ed:56:cc:03:c4:31:96:c1:42:7c:3a:70:ba:cb:e4:b9:cf:
         b8:0b:97:d4:88:40:b3:19:ce:10:96:9e:1c:ac:3e:bb:0b:5d:
         b0:1b:44:0b:b7:d2:04:22:b7:ca:ac:2b:69:30:9e:4b:e8:97:
         9a:c2:c6:39:3e:f0:77:05:1b:b1:39:70:d6:e7:b3:de:aa:b2:
         3a:3e:4a:c9:29:db:14:28:4a:28:1b:05:28:52:a6:a1:ba:f2:
         21:cb:95:7d:60:6e:65:56:a2:d2:b8:65:a7:8a:a8:a3:a0:9f:
         72:bf:dc:96:4f:e4:c8:60:34:ad:22:ae:f3:0b:78:0e:c1:8d:
         c0:3b:ac:cf:28:74:d2:3e:71:52:b5:b8:01:83:ae:03:12:f8:
         50:de:f7:bb:e8:5c:aa:72:2e:6f:ee:5d:4a:dc:da:8c:56:78:
         9f:e4:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:33:29 2026 by rpki-client