This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File:                     CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier:          d6skw78qtM7kvX3pguCVEM3I/WkrmSv8By0eVHb7GLE=
Subject key identifier:   B9:F8:6B:2C:23:59:DD:1B:47:DE:26:A4:5A:28:23:45:40:3D:24:64
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer:       /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number:          03FB
Signing time:             Sat 10 Jan 2026 23:42:53 +0000
Manifest this update:     Sat 10 Jan 2026 23:42:53 +0000
Manifest next update:     Sat 17 Jan 2026 23:42:53 +0000
Files and hashes:         1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: LLfx/lprpcCtG2XoXMwIs75Qx/TUMOBA5UrcC3tCLS0=)
                          2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
        Validity
            Not Before: Jan 10 23:42:53 2026 GMT
            Not After : Jan 17 23:42:53 2026 GMT
        Subject: CN=6962e3fd-789a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:b1:6b:d3:59:ba:8d:34:4b:da:35:e9:49:
                    10:d6:35:53:bb:b1:59:02:21:6e:53:cf:f1:e1:53:
                    cc:de:94:c0:39:2a:ae:0d:8f:61:82:f1:81:29:37:
                    b7:76:1b:e8:4d:22:f4:39:1a:c3:43:ca:b7:96:50:
                    b1:17:78:ad:3d:74:56:ce:bc:86:55:56:01:c2:06:
                    6e:54:66:39:e0:7b:5e:0d:ef:85:e7:e1:e8:41:07:
                    55:78:3d:48:2f:1d:89:c0:dc:02:8d:9f:7f:9d:04:
                    91:13:56:22:0e:f6:00:ea:e9:37:86:b5:ae:6a:f5:
                    7f:83:cc:0a:a6:e3:42:e0:ec:9e:82:63:49:86:3c:
                    c1:8d:87:c8:82:12:3d:d0:69:a4:99:ab:a9:53:05:
                    01:35:f1:80:17:fb:cf:93:4d:d8:94:04:0d:3e:62:
                    30:c7:9d:78:7a:b6:5d:a3:7c:e9:9b:91:35:42:c6:
                    7b:54:7b:0e:ed:4e:2c:59:5e:af:98:5b:94:a7:86:
                    8d:8a:b6:d2:5b:c2:76:75:69:29:32:ae:e1:b5:c6:
                    43:4b:b7:6e:96:ab:71:33:18:12:a5:87:51:db:34:
                    aa:82:1c:01:0e:dc:81:d8:78:1b:e9:97:65:1c:d0:
                    16:d9:81:b9:97:38:94:6f:9c:ff:5a:17:07:42:77:
                    5b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:6B:2C:23:59:DD:1B:47:DE:26:A4:5A:28:23:45:40:3D:24:64
            X509v3 Authority Key Identifier:
                keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:bd:e1:d6:1a:3e:c1:eb:6b:8f:f9:db:53:4e:f5:cb:7a:63:
         fb:a7:ac:a3:d2:39:b2:5c:06:36:96:26:68:c4:c3:e2:70:ef:
         11:6a:43:2c:6f:65:3b:20:1f:65:41:83:f8:41:5e:59:50:23:
         84:97:b3:09:9f:6b:f8:96:ed:9d:87:38:fe:e2:f4:ea:97:ff:
         1b:56:dc:ae:af:e2:1f:be:28:ea:61:7c:47:50:6d:b5:c4:ee:
         14:9b:56:3b:af:74:1b:05:16:68:eb:f6:fd:85:c1:a4:74:73:
         e2:e5:a8:77:0d:83:e7:7e:ce:07:9c:34:e3:ba:ff:32:b1:b6:
         12:dd:e3:90:44:bf:ff:31:5a:66:3c:13:d4:05:55:84:02:6a:
         d5:36:c6:0f:fc:b3:95:35:2c:e0:5e:60:a3:c9:eb:d3:79:23:
         a2:67:39:3f:2d:ad:c2:a1:7b:83:35:dd:d6:8b:f3:a0:22:52:
         69:12:f1:76:2d:fa:82:a7:2f:41:5a:d5:5e:5c:d6:08:ac:81:
         fe:6c:79:e2:6b:3e:8c:8a:37:52:25:f1:43:a0:29:4a:98:17:
         43:62:96:67:1b:58:7a:56:f9:bf:94:23:cc:be:20:b1:99:a8:
         cd:06:62:2a:6d:c9:f2:47:00:92:71:ff:1a:ee:0a:32:0c:83:
         19:b2:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:02:55 2026 by rpki-client