This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File:                     F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier:          G/rphcd2IQ4bYFMEokcNzMKePAB+pWwo2rqrAZmcaIU=
Subject key identifier:   CE:EF:C7:B0:F7:F4:90:38:43:3E:8A:B4:5C:F3:A7:91:A9:B0:91:49
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer:       /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial:       0803
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number:          07FD
Signing time:             Sat 10 Jan 2026 20:27:27 +0000
Manifest this update:     Sat 10 Jan 2026 20:27:26 +0000
Manifest next update:     Sat 17 Jan 2026 20:27:26 +0000
Files and hashes:         1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: owSN6+Rg69v54+coLysiCSBuIvCzBr0MNEbcWvoaKLE=)
                          2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
                          rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
        Validity
            Not Before: Jan 10 20:27:26 2026 GMT
            Not After : Jan 17 20:27:26 2026 GMT
        Subject: CN=6962b62f-aa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:7d:22:a9:81:a3:a9:e4:0b:22:75:09:0d:
                    b6:5b:df:8f:a0:d4:ca:4b:70:2d:03:4d:10:8a:dd:
                    9d:33:11:06:88:da:e0:de:33:7b:29:a6:10:3b:78:
                    33:8b:de:11:83:a8:ae:ea:af:66:53:28:c7:f5:c4:
                    03:d6:51:da:ff:95:0f:f6:3c:d0:51:58:d6:18:79:
                    de:fb:d0:4c:3a:17:28:1d:ce:84:6f:ec:a9:f1:1f:
                    e4:74:b6:3c:1f:11:69:3a:e2:51:c8:0a:ff:16:3c:
                    29:f5:55:15:01:0f:95:c5:64:0b:a3:c8:af:fc:00:
                    65:2a:7d:4a:c7:6b:9c:a8:09:61:0d:51:99:10:68:
                    5f:6e:80:da:31:a1:49:ca:ea:1d:b6:59:9a:34:4e:
                    f3:ea:36:58:c1:bb:e2:2d:de:f6:3f:91:3e:5d:67:
                    f5:15:3a:65:8f:1b:cf:b1:b2:4f:1a:17:3c:33:70:
                    ab:12:63:b3:30:8f:1f:c0:e7:84:5b:29:f7:84:3a:
                    2b:df:3a:3c:50:3c:a0:25:55:ef:14:96:72:b0:56:
                    0c:1c:1b:02:47:d7:b6:37:41:a6:e9:a1:1e:d7:83:
                    63:45:d3:12:3e:75:38:08:68:d6:b4:78:2a:bc:c8:
                    21:b7:21:eb:d6:be:a3:a8:ca:bc:31:3a:d5:40:d9:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EF:C7:B0:F7:F4:90:38:43:3E:8A:B4:5C:F3:A7:91:A9:B0:91:49
            X509v3 Authority Key Identifier:
                keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:28:d0:0b:22:77:2e:9b:a3:cd:31:59:57:11:ee:a5:d4:
         88:04:03:5c:a0:32:df:9d:79:35:4d:34:64:b3:9b:88:c1:e6:
         60:ad:c3:f9:58:4f:a7:e6:7e:ed:4e:fe:08:f1:e3:87:aa:42:
         35:f8:17:54:e5:85:f7:fb:46:72:e9:16:50:46:19:67:f2:53:
         3a:2d:bb:41:b6:c0:eb:ba:4a:cd:50:a6:c0:fc:e3:fc:86:3b:
         ac:47:32:0a:cc:20:60:60:48:16:80:a4:33:62:3d:5f:59:6a:
         0f:4d:46:ba:02:51:a6:d3:5f:69:af:b7:b5:a5:7c:27:ae:13:
         bd:a6:78:cd:1c:bf:62:0b:08:ba:26:62:d9:38:3a:03:a4:1e:
         9e:43:3a:3a:93:81:da:93:bd:3f:b5:33:e2:41:fe:6b:c4:94:
         d9:eb:9f:80:d6:67:8d:97:4d:f9:fe:67:40:2d:35:8d:52:a0:
         b9:f0:b7:31:94:6a:18:81:5b:16:18:af:03:d8:21:e6:92:86:
         43:89:36:29:98:02:52:3f:9e:ed:1b:0a:4a:41:29:60:20:28:
         b9:1f:96:c9:f6:37:c9:66:02:8e:ea:ae:7a:81:d5:85:32:2f:
         ec:1a:e2:cb:61:ea:04:93:14:f6:aa:10:ff:0c:63:7d:3c:e2:
         40:e6:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:08:09 2026 by rpki-client