This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          bCqMnw4Pw3wjjHYBdH81B0Vzgv8gycHylqCHPdJqhzc=
Subject key identifier:   B9:F5:B6:85:26:E2:BF:88:54:4C:1E:51:1E:56:69:F4:F4:53:4E:FB
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          9E
Signing time:             Thu 01 Jan 2026 05:52:58 +0000
Manifest this update:     Thu 01 Jan 2026 05:52:58 +0000
Manifest next update:     Thu 08 Jan 2026 05:52:58 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: PCiS+LZJ7layltcRvd8Rmp9AnDqT8DUx/CloocWbgkE=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: Jan  1 05:52:58 2026 GMT
            Not After : Jan  8 05:52:58 2026 GMT
        Subject: CN=69560bba-ddaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:a5:59:d1:98:51:71:18:c9:6c:a2:31:b9:
                    86:57:7b:df:e5:9b:1c:bd:43:72:23:02:7c:2f:4e:
                    0c:f0:f9:7b:0b:80:6a:a4:6d:59:57:24:e1:0e:01:
                    7c:2c:0a:b2:07:fe:fd:c0:72:b3:f3:f5:6d:c7:cc:
                    63:bd:c2:fc:5a:14:81:43:3b:99:b1:fa:c8:e2:7d:
                    b2:eb:88:b2:d2:62:2c:12:7d:13:75:a8:6f:48:c1:
                    f3:8a:d0:a2:e6:7e:ae:58:97:82:ed:fc:46:49:7a:
                    2e:15:24:4a:89:54:1b:5c:70:fd:7c:e2:1b:18:ba:
                    5a:05:72:fe:c2:7c:e6:97:64:13:a4:6a:c1:fc:15:
                    ab:1d:48:35:15:fe:81:d1:d0:df:15:c4:11:22:e1:
                    63:31:02:7d:04:b7:a3:00:14:a7:a7:4c:b6:38:12:
                    b7:64:89:79:0c:c2:24:f6:00:08:16:ac:44:53:b9:
                    19:31:f4:43:e5:d5:92:07:53:63:ce:b5:1d:06:f9:
                    f5:f0:83:9d:f0:90:a9:bb:bd:32:86:7e:e3:d0:21:
                    2e:f5:0c:d5:2f:58:e8:89:77:a8:9e:46:3e:e6:3e:
                    b5:4d:e7:79:ce:eb:69:05:2a:c2:23:ec:3c:cc:9a:
                    fc:a2:ba:32:5f:ef:1c:93:2b:78:ba:a7:6a:21:95:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:B6:85:26:E2:BF:88:54:4C:1E:51:1E:56:69:F4:F4:53:4E:FB
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:25:5a:02:54:77:70:90:2c:e0:62:e6:71:95:1d:55:6d:
         be:b0:2e:f0:e7:d1:65:7b:c6:3a:9e:bd:e0:f9:8b:6e:bd:97:
         f4:17:0d:bf:6b:da:6e:00:35:de:88:9e:59:51:8c:06:5e:9f:
         dd:c5:26:d9:b7:ca:7d:1a:04:4c:2c:5a:c8:97:5b:8b:0a:7e:
         b7:21:b7:17:aa:54:76:c3:57:b0:14:7e:2b:51:84:42:10:75:
         8e:73:d7:65:b5:70:40:bd:7c:ff:81:b3:fe:8d:74:bf:5a:a7:
         7a:e6:4c:0d:97:6a:20:ec:ea:8d:45:5d:44:15:f2:60:33:84:
         58:ce:98:87:8a:4d:8c:a1:e8:02:8f:f4:f5:8a:30:de:0b:73:
         27:b1:bd:bf:e6:81:7b:46:5d:2a:67:b3:4f:28:85:e6:71:ba:
         ba:1f:d6:0c:58:24:33:6b:bd:85:e0:32:63:cf:a8:7a:ea:df:
         46:f4:34:e1:ff:18:06:09:7a:ce:59:ae:23:48:45:19:34:4e:
         ee:34:e6:55:b1:90:e7:4e:db:9f:69:ab:3c:28:b3:f4:34:25:
         15:06:a9:13:13:de:1a:fd:b0:dd:3a:7f:19:87:64:ad:a1:99:
         ea:5f:6a:0e:51:1c:d6:53:3c:a0:96:94:eb:2e:ff:1a:a3:08:
         ea:18:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 03:29:26 2026 by rpki-client