This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
File:                     JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json)
Hash identifier:          LbWuaIteKqVBTtd8LrgWlctEGJCjenCmtiPos9T7C6k=
Subject key identifier:   4F:E7:39:88:63:4A:13:18:07:DC:2B:0F:F6:32:53:4B:C3:97:9C:36
Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69
Certificate issuer:       /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
Manifest number:          06F1
Signing time:             Sat 10 Jan 2026 21:15:58 +0000
Manifest this update:     Sat 10 Jan 2026 21:15:58 +0000
Manifest next update:     Sat 17 Jan 2026 21:15:58 +0000
Files and hashes:         1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: BInrz9sgKzbUGrFKk9f8jgBzRPWhKpnBeLDWzqn7000=)
                          2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl
                          rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 21:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069
        Validity
            Not Before: Jan 10 21:15:58 2026 GMT
            Not After : Jan 17 21:15:58 2026 GMT
        Subject: CN=6962c18e-81ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:b1:28:97:fe:2a:72:25:68:66:5b:12:ed:
                    9b:e3:97:89:15:82:c3:f6:fa:79:3f:db:62:88:fa:
                    8f:e1:03:dd:de:25:b0:83:fd:9b:d9:64:e8:e3:eb:
                    00:bc:28:e3:8c:dd:a9:5d:06:72:11:ef:31:cf:b7:
                    4f:58:c2:77:59:10:22:c2:50:98:97:1c:54:e3:3b:
                    4c:d6:f5:37:ac:3e:ee:59:49:e5:7e:68:3b:a8:5a:
                    77:c2:56:23:78:c5:b3:40:53:10:27:27:8d:86:38:
                    87:a3:c8:ec:a6:7a:4b:7c:93:28:67:a4:d0:dd:2e:
                    12:9b:d5:b0:ad:dc:84:1c:3f:2b:5b:f1:b9:32:47:
                    df:e6:84:ed:7c:8f:a9:96:26:05:39:fd:99:8f:dd:
                    c5:67:f6:c9:30:fd:a5:10:42:1c:40:0d:19:3d:d0:
                    d1:f8:0c:23:cd:4a:7f:6c:bd:19:8d:7f:b2:ca:83:
                    8a:92:82:0e:1e:39:e1:99:7d:f4:76:6c:ea:2e:5b:
                    f7:b9:e9:78:f6:8a:d6:38:ea:b4:cd:08:20:c3:cf:
                    ca:72:ea:45:b5:3b:82:02:22:e9:47:98:1d:a8:69:
                    b2:90:b7:b9:d4:f1:b9:ee:42:ed:ed:c0:35:75:16:
                    1c:1b:05:cf:f7:2c:4e:4a:ca:02:53:c0:ea:db:12:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:39:88:63:4A:13:18:07:DC:2B:0F:F6:32:53:4B:C3:97:9C:36
            X509v3 Authority Key Identifier:
                keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b0:2e:6f:1f:8f:54:7a:87:ec:7e:aa:8c:40:10:1a:32:e7:
         27:d4:bb:fb:3b:1e:79:ad:03:63:a5:5d:55:87:54:50:e3:99:
         bc:26:65:b7:d8:22:56:4e:e7:04:de:8b:5c:cb:d0:72:7c:94:
         c9:30:4a:c6:89:f1:27:74:49:15:b5:d0:c1:d9:ad:54:89:ef:
         e4:d5:b6:f8:7d:9a:b9:55:94:f8:2b:34:ac:2e:45:9e:b8:23:
         11:65:2a:69:8f:8b:f3:dc:8c:d8:76:b5:2e:7b:54:04:71:0d:
         8c:46:a1:50:82:c0:35:9d:66:6a:d0:c6:54:62:54:2b:b0:5a:
         97:cf:d1:ac:2e:f3:42:b4:02:52:6a:90:45:bd:1d:cd:21:3b:
         94:d3:87:96:5d:3d:62:e3:7b:c3:d0:0c:7e:26:63:68:64:31:
         d7:4f:ad:27:91:b3:ac:b2:65:e8:88:6a:3c:0f:55:b3:57:20:
         49:01:cc:ac:6f:f6:6b:9e:70:5a:60:2a:1b:b2:7e:f9:84:93:
         54:73:a9:6f:c7:0b:e7:8f:86:a2:01:e9:4c:5b:e1:b5:90:06:
         83:24:af:69:37:2e:16:2b:6b:72:c8:a4:52:27:3c:9a:16:90:
         20:cf:33:b1:c9:63:9c:b9:c8:89:16:38:53:e9:8e:cc:c8:d2:
         53:ce:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:42:01 2026 by rpki-client