This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
File:                     PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json)
Hash identifier:          0bMKfXkeVdAzU4Q86UHSM2tWRjoU83aADfMRb1b/W6c=
Subject key identifier:   E1:BC:66:0F:5D:AE:E7:22:7A:EB:8A:4A:B5:47:F8:CF:1C:7B:81:EE
Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3
Certificate issuer:       /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
Certificate serial:       08C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
Manifest number:          08BB
Signing time:             Sat 10 Jan 2026 19:51:56 +0000
Manifest this update:     Sat 10 Jan 2026 19:51:56 +0000
Manifest next update:     Sat 17 Jan 2026 19:51:56 +0000
Files and hashes:         1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: sn5kl6YO9+TYP4g5v5uHxaKCBs27ucTAo1dp03yBuKk=)
                          2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: YDlJJK3r3QY2jge7AOb3CYnCW+wC8nrMDrmyeODCDi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl
                          rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 19:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3
        Validity
            Not Before: Jan 10 19:51:56 2026 GMT
            Not After : Jan 17 19:51:56 2026 GMT
        Subject: CN=6962addc-8419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a8:d3:f4:a8:1a:6c:88:58:61:6d:16:a1:d0:
                    d4:8c:fc:25:03:78:bf:2f:53:f0:9f:e1:b8:6b:c2:
                    26:ce:e6:b9:63:87:fd:ca:31:47:14:c6:d3:ad:2f:
                    ee:c2:03:cd:18:a3:9f:65:e8:12:62:19:96:39:5a:
                    6f:89:d1:c9:a5:98:17:ab:30:8c:8a:b4:a5:99:b4:
                    a9:b3:9b:1a:97:24:66:2d:a3:86:2f:48:83:99:3b:
                    51:8f:94:67:81:81:d9:c2:c6:8e:70:20:c9:56:32:
                    b2:d8:af:c6:34:9a:05:a6:da:18:1a:36:13:24:47:
                    8b:e6:87:26:c9:d8:f5:a7:ee:b9:06:2a:64:ab:eb:
                    e5:8e:c5:fd:f5:f1:3e:b7:19:de:42:ae:af:a6:89:
                    04:28:d6:07:d2:57:e6:86:94:7f:94:df:3a:47:41:
                    36:3f:59:57:a5:83:9a:1d:9e:2c:de:ca:ce:60:6d:
                    e0:1f:0c:f0:f6:1f:5b:9d:db:cb:c4:d2:3d:70:4b:
                    86:d9:79:16:a7:26:99:24:0a:eb:c9:2d:e8:b9:8a:
                    e1:af:ad:77:8e:bd:7f:bf:ca:f0:e7:2e:43:3b:43:
                    c1:fa:3f:41:02:7a:5f:51:21:d5:e4:71:9a:40:78:
                    0b:c3:fb:c4:fc:22:4d:64:bd:8e:c9:bd:d7:02:48:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BC:66:0F:5D:AE:E7:22:7A:EB:8A:4A:B5:47:F8:CF:1C:7B:81:EE
            X509v3 Authority Key Identifier:
                keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:3a:49:2e:ff:a0:51:77:3f:a7:56:b1:22:93:7a:4b:7f:
         ef:47:f9:d3:91:ba:a9:b2:0a:1b:e9:bc:4b:f4:d4:d5:56:c2:
         44:92:b3:c8:05:a0:d0:05:92:69:a6:7b:be:3d:79:37:ae:5e:
         71:90:96:78:dc:2d:37:27:7b:d1:18:96:31:8c:f9:4a:24:a2:
         3a:a1:7e:a8:54:62:cf:59:e3:48:19:0d:0a:3a:1d:57:d4:15:
         84:8b:9e:83:66:af:a5:ad:95:3c:ca:d6:e8:d0:89:42:70:41:
         ce:ab:75:7e:23:5a:25:6a:e6:66:44:44:42:58:b5:48:ea:8c:
         eb:f1:5d:d0:fb:0a:f4:50:a9:69:ac:7a:1f:9c:39:0f:b7:93:
         28:86:5a:45:6c:4c:93:29:46:f2:7f:36:d1:6d:4a:b9:d3:4f:
         bf:83:d6:52:8d:76:da:3b:28:15:b4:d3:46:23:23:17:90:1e:
         79:8d:24:00:88:95:e8:31:4c:d2:5e:9a:9e:0c:7e:27:45:47:
         50:c4:7e:90:74:88:af:6b:42:c5:7f:37:c9:f5:31:7e:41:44:
         21:76:cd:46:31:e0:dd:d0:0d:a1:ca:a7:4d:3b:3c:9f:81:ba:
         ba:f4:df:7c:56:88:ec:49:60:49:97:be:bd:d1:df:c3:34:c1:
         c1:e3:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:48:49 2026 by rpki-client