This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File:                     fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier:          o0Ymzs8+taNfQ03KyscVvlli3sJW9Ll3xHeefbyVuz0=
Subject key identifier:   45:D2:23:C1:9F:D3:83:AC:DE:39:B5:C3:BB:40:B6:48:DF:F4:13:FE
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer:       /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial:       0986
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number:          1FC1
Signing time:             Fri 02 Jan 2026 16:30:31 +0000
Manifest this update:     Fri 02 Jan 2026 16:30:30 +0000
Manifest next update:     Fri 09 Jan 2026 16:30:30 +0000
Files and hashes:         1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: 7aYqbAAOVJachyFgjRAE2tEJDATRw766SO6Ya7QzZgY=)
                          2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 16:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
        Validity
            Not Before: Jan  2 16:30:30 2026 GMT
            Not After : Jan  9 16:30:30 2026 GMT
        Subject: CN=6957f2a6-1e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:a0:dd:33:6d:2b:cd:89:80:d9:a2:6e:c6:
                    41:7c:ce:cd:67:96:6c:87:9d:64:d6:9f:be:85:29:
                    b2:4b:ff:ee:bc:ec:56:19:90:41:36:33:a8:8f:b8:
                    79:ed:76:e4:c1:6b:c1:ab:cc:d0:a5:e6:60:a0:a7:
                    e0:2c:e8:bb:9b:98:f7:e2:17:c6:34:9a:ea:7a:93:
                    87:8a:78:05:32:29:4e:1f:16:69:16:3c:d1:b4:7c:
                    0e:48:06:e0:d3:47:0b:10:1b:7a:f0:43:f1:ce:a2:
                    cb:78:51:b0:1b:a6:b3:10:d9:e2:41:52:ac:ba:5b:
                    36:a8:a0:16:02:a9:27:0b:6a:5f:5d:1d:51:58:94:
                    4b:b5:8e:f2:d7:10:9c:d2:5e:fc:50:03:d0:be:18:
                    bd:f2:60:56:6b:d4:4e:88:6f:85:d3:37:ed:49:95:
                    ec:6b:70:77:97:72:15:db:8b:2a:78:9d:9d:b0:69:
                    0d:f3:06:a3:af:92:d1:55:5f:a3:84:48:95:25:a6:
                    e4:dc:d3:a1:e9:31:11:01:ee:63:73:aa:67:42:83:
                    a3:80:f3:e8:6c:db:da:f5:b5:67:08:7a:9f:ad:a4:
                    61:c9:be:cd:6b:cd:45:04:6c:5b:7d:32:45:6b:15:
                    41:ab:98:5a:1c:87:9b:1e:df:af:48:18:96:4a:83:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:23:C1:9F:D3:83:AC:DE:39:B5:C3:BB:40:B6:48:DF:F4:13:FE
            X509v3 Authority Key Identifier:
                keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:d4:6f:cc:47:12:39:a8:79:8b:05:dc:35:53:30:7d:74:
         71:82:77:bb:e7:4a:40:34:1e:69:1d:59:2d:c1:da:22:bb:3f:
         11:56:83:39:f4:bf:8b:b1:1a:24:19:a9:12:00:e1:bb:53:f0:
         ee:1e:dc:0c:c5:b7:7f:97:29:e4:66:42:8e:f7:b4:af:ca:c8:
         ba:49:95:e1:04:d2:fe:ea:9a:95:03:dc:ac:a1:1e:a3:a1:3d:
         06:c9:ce:46:fe:06:62:e2:12:ed:d8:ba:23:f2:d9:5c:2d:70:
         93:44:56:cd:a7:8f:d1:8a:fe:f8:f8:0d:06:ee:48:70:ed:de:
         ef:1e:4d:36:73:4e:f9:04:7d:85:a1:f6:77:38:28:cb:24:19:
         cf:ee:50:35:28:21:01:fb:4b:36:8a:26:51:bf:ea:f0:a8:81:
         64:f7:53:ca:1c:c9:cf:62:e7:44:ee:16:5f:ba:a8:8c:75:5e:
         2f:12:f7:08:3c:13:bf:e0:1c:da:f4:63:af:cc:f2:86:a7:50:
         46:52:10:11:93:6f:4f:65:f7:ef:51:7f:98:f5:98:e1:46:fb:
         a5:f6:18:fa:54:cb:81:ba:1d:dc:6a:02:be:a7:34:4b:b6:ba:
         c1:13:bc:b8:e9:2b:fa:31:3f:87:4f:c3:64:29:c9:a6:c3:3f:
         4a:6c:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:21:08 2026 by rpki-client