This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
File:                     _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json)
Hash identifier:          JXUCn+T9LmLnGg5DWV3tRddgrjPNvBuXsMtq51P/69Q=
Subject key identifier:   65:3F:3D:72:E9:42:4F:4E:4F:6F:0A:2B:8C:1C:E0:8D:E7:85:6F:50
Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55
Certificate issuer:       /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955
Certificate serial:       07F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
Manifest number:          07F7
Signing time:             Sun 04 Jan 2026 20:22:25 +0000
Manifest this update:     Sun 04 Jan 2026 20:22:25 +0000
Manifest next update:     Sun 11 Jan 2026 20:22:25 +0000
Files and hashes:         1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: YaKxC5apkyEJ9LJmzSG+42CUzPgKoVAsZqmpf4aqM2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl
                          rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Jan 2026 20:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040 (0x7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955
        Validity
            Not Before: Jan  4 20:22:25 2026 GMT
            Not After : Jan 11 20:22:25 2026 GMT
        Subject: CN=695acc01-b9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:c0:a8:f7:51:6c:96:1e:33:ec:25:0d:85:
                    af:fd:59:c5:ff:e1:e3:20:a7:c0:89:c4:4c:01:51:
                    bb:53:c2:85:cf:97:dc:46:4b:c6:4f:ca:a9:ad:74:
                    16:2e:c4:b7:c8:da:64:c3:ba:f6:b2:17:5c:44:69:
                    d8:8a:52:1a:4b:61:ce:a0:d8:07:93:7b:35:ac:d5:
                    27:f7:bc:80:70:b1:ae:2e:a1:26:80:cf:31:ba:bc:
                    bf:f4:ad:11:2f:85:e2:a8:cb:a6:36:ed:b6:88:27:
                    22:7b:c7:9d:c1:77:e7:4a:ed:6a:d0:1f:6b:c3:f3:
                    58:d9:20:0d:21:1c:5d:45:de:2a:e8:a0:0a:df:97:
                    d7:2b:fa:b0:16:b2:34:5c:9e:26:f4:f1:d2:21:d8:
                    61:a5:cc:11:de:d5:1e:28:c9:08:63:c2:9d:07:30:
                    5f:44:37:77:be:9e:16:4f:b5:d6:b5:79:61:c7:b7:
                    ec:58:6b:0b:34:eb:14:ff:b9:70:68:a3:da:1c:ed:
                    3c:4d:76:6c:dd:a2:71:5b:6c:fa:fc:4d:0d:fa:b2:
                    e6:2d:a2:b1:38:07:f9:49:57:bc:8a:b7:3d:cd:3f:
                    58:ea:8e:05:9b:e5:df:66:84:75:81:5b:9a:d6:79:
                    cc:36:53:7c:17:03:0d:6e:45:c5:e8:9c:56:19:36:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:3D:72:E9:42:4F:4E:4F:6F:0A:2B:8C:1C:E0:8D:E7:85:6F:50
            X509v3 Authority Key Identifier:
                keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:37:ce:1b:f6:42:f1:e8:02:92:30:bb:cb:4a:83:1e:2b:c7:
         54:49:12:aa:62:f5:00:7d:7e:07:2f:1a:ef:86:46:5f:67:86:
         93:2c:c1:e4:36:e2:74:73:1e:61:c5:ea:08:46:cd:ff:d7:08:
         80:66:19:3c:25:81:aa:c3:a8:fd:d4:75:a2:06:bb:86:26:e5:
         dd:b1:60:96:6e:73:a8:02:01:e5:01:0b:3e:a5:10:1f:80:e8:
         88:15:94:c7:b0:59:3a:0c:87:9f:97:67:8f:4d:74:f5:19:3d:
         54:65:cd:4c:22:a9:98:9d:0c:de:82:1e:d0:6c:29:58:f1:49:
         87:c4:b9:13:4f:42:37:d1:0b:21:08:d0:33:10:9a:80:79:af:
         da:be:d0:d5:fa:a5:f0:5f:1e:46:e3:bc:50:36:ba:09:70:14:
         f2:c9:00:d3:c1:65:6d:b4:f3:ec:55:4a:73:89:e0:c4:f7:e1:
         a2:d3:a5:22:db:d4:40:38:35:0e:e3:42:73:1d:d5:cf:99:3f:
         1c:76:d6:94:db:a8:5b:8d:ca:6a:1d:44:2a:70:cd:98:4c:4a:
         29:63:90:b9:f2:b5:b3:11:4c:c1:59:7c:0a:8e:1e:11:fa:af:
         3d:87:12:11:1d:d2:2a:f3:40:f7:7e:22:6b:d2:02:c9:4f:b4:
         2f:c9:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 03:35:59 2026 by rpki-client