This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
File:                     MIoPBCNx10Tky2KrUekE9wys03o.mft (raw, json)
Hash identifier:          X+lOTXeD34qd3XuhoIuxG2sUCGffph6XqjGs0qSOTqs=
Subject key identifier:   E5:5B:8A:4C:A1:FF:81:75:65:9F:4A:24:05:43:87:0D:EF:2A:61:56
Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
Certificate issuer:       /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Certificate serial:       0848
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
Manifest number:          083D
Signing time:             Sat 10 Jan 2026 20:11:40 +0000
Manifest this update:     Sat 10 Jan 2026 20:11:39 +0000
Manifest next update:     Sat 17 Jan 2026 20:11:39 +0000
Files and hashes:         1: MIoPBCNx10Tky2KrUekE9wys03o.crl (hash: o1+h4394a9UJQbNn4tO5w+aMIFrFiGich6+zLy2LYN0=)
                          2: 727EECD2678811EF99602F53C4F9AE02.roa (hash: IPe594JnZ2N3gd3dB/i0h0vHj/VgJ8oN3r//4wdEFp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
                          rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
        Validity
            Not Before: Jan 10 20:11:39 2026 GMT
            Not After : Jan 17 20:11:39 2026 GMT
        Subject: CN=6962b27b-ca03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:3e:5b:a8:82:3e:09:c7:2b:e6:f3:d3:4c:
                    eb:4c:98:64:ed:71:91:ee:36:5f:f4:fb:0f:78:45:
                    b4:c8:5d:c9:0b:f9:44:6d:d7:0e:7a:e4:e5:5f:82:
                    83:e4:90:98:c6:eb:92:b1:18:69:91:f4:29:8d:72:
                    dc:88:07:a4:da:5d:65:8e:ec:9b:38:5b:e0:bf:f6:
                    35:10:7c:86:89:42:1d:6a:b9:78:d5:9a:19:a0:12:
                    68:7c:32:ed:67:ce:95:17:6c:74:68:3f:61:ea:52:
                    f7:77:17:33:ac:60:57:39:8e:cd:f7:68:34:dc:4e:
                    2f:6b:06:8d:71:96:91:c7:7f:a4:da:18:4a:df:da:
                    cc:fb:1f:b1:e6:11:c9:cb:5b:5f:a6:84:fe:01:26:
                    d3:4d:a3:90:fc:2b:b6:a2:91:90:36:5d:1c:3a:39:
                    9e:1f:00:9b:96:67:7e:2f:eb:b9:04:af:19:f4:13:
                    0d:6c:9c:2a:ab:72:7f:6e:04:b9:80:c5:d7:8b:ca:
                    2d:1c:01:af:1a:e6:24:5c:82:fd:e6:9c:cd:da:9c:
                    c8:cc:42:09:67:41:89:37:2b:e7:b6:dc:44:06:ba:
                    fd:5e:65:6f:70:49:d9:af:15:b9:d9:7f:d4:00:48:
                    f7:22:c6:34:14:2f:21:d3:a3:d4:b4:90:67:ec:1e:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5B:8A:4C:A1:FF:81:75:65:9F:4A:24:05:43:87:0D:EF:2A:61:56
            X509v3 Authority Key Identifier:
                keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:fd:29:5d:52:71:8f:08:cb:cd:70:c8:80:57:2e:1e:e6:
         05:ee:05:0c:47:07:f5:65:bb:34:b6:4c:7a:72:e7:d5:16:0c:
         73:33:2d:a1:90:c0:50:fc:bc:bf:01:1b:c9:37:3d:c2:77:09:
         6b:23:a8:7a:20:cb:f5:09:10:51:ea:61:56:c5:b3:16:0e:bb:
         9b:33:99:85:86:50:ba:11:fa:68:f7:df:ee:e7:43:70:e6:9f:
         34:15:3d:bd:fc:6b:0b:77:86:d6:69:e2:ee:e9:6c:f1:ce:2e:
         9c:f2:59:79:9c:b9:d9:1c:bf:99:57:5c:4a:91:bc:20:5b:2e:
         ff:98:f0:48:0b:c0:15:93:d5:ed:bc:fc:a2:7a:9d:15:9f:30:
         c8:7f:fa:19:7f:59:9f:30:6f:d5:45:55:4c:ff:56:a6:bd:96:
         0b:45:a0:23:25:21:28:7f:44:9b:3f:e7:24:af:34:74:76:a7:
         59:f3:bc:67:9d:de:68:85:69:d8:93:f5:63:46:6f:e0:78:55:
         62:9b:af:4f:9d:b5:8d:1e:9e:6a:e6:53:24:49:65:67:19:fb:
         21:c2:41:27:44:35:02:46:a5:eb:f4:7e:f8:dc:9e:89:99:c2:
         02:30:c8:ba:e0:9a:7d:ad:3f:b7:60:4e:48:46:50:fe:6c:86:
         f4:1f:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:03:51 2026 by rpki-client