This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          yw1ZICDFo6Gnn7j654QLgE72Wg8wjSd9/junf+EMsnk=
Subject key identifier:   E4:5D:FB:38:E9:9F:32:7A:30:60:3F:39:8B:89:76:1C:14:56:38:71
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0BCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0BBC
Signing time:             Fri 02 Jan 2026 18:31:47 +0000
Manifest this update:     Fri 02 Jan 2026 18:31:46 +0000
Manifest next update:     Fri 09 Jan 2026 18:31:46 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: Gauyr7Tp+eMO6djj4pxiG8eUnuIQKRH361xeSp3uo60=)
                          2: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=)
                          3: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 18:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Jan  2 18:31:46 2026 GMT
            Not After : Jan  9 18:31:46 2026 GMT
        Subject: CN=69580f13-4794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:db:82:38:7b:10:3e:01:31:ec:86:e0:e6:
                    6e:c2:21:d4:94:f7:cb:e3:c3:55:0c:2d:21:db:70:
                    2a:60:e9:c6:a4:ef:50:3b:0d:c8:f6:bd:8e:be:ed:
                    c0:d7:11:61:6e:b7:f1:f4:72:bd:50:25:5c:f8:dc:
                    07:f5:13:2f:34:88:01:95:4b:72:76:b2:39:2d:ec:
                    87:4b:8d:33:47:1d:f1:f4:4b:52:14:7f:64:ae:8f:
                    c4:60:68:e1:99:69:9f:d8:b1:4c:f1:9d:1e:21:0f:
                    4a:5d:47:a1:b1:95:c5:2f:c6:0d:c7:46:b6:46:07:
                    9e:f3:2e:3d:88:c2:7a:ed:9c:fd:2c:49:33:e7:a9:
                    37:c0:ae:50:bd:b3:25:4d:f6:bf:fc:37:1b:04:49:
                    9f:07:48:e0:67:cf:14:0e:30:58:db:e7:72:94:a9:
                    c1:6a:8e:50:4b:72:84:c6:11:5f:9f:c2:e5:28:f8:
                    29:d7:ef:b1:3c:f4:38:60:4c:d4:0d:2e:28:5f:f9:
                    26:71:b5:c3:43:4f:52:52:f8:fb:19:06:ca:10:d7:
                    91:89:cc:e3:79:9b:3d:64:11:46:a9:2a:72:7b:97:
                    4f:d0:eb:0d:7c:bc:07:03:6b:d6:50:a7:5c:90:00:
                    43:a9:06:8f:61:28:e0:31:09:75:3f:9f:b5:43:a8:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:FB:38:E9:9F:32:7A:30:60:3F:39:8B:89:76:1C:14:56:38:71
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:91:0f:6c:ec:d9:bf:5b:d0:97:7c:22:9d:19:01:0f:af:7b:
         23:a2:e3:b4:ff:ff:03:97:67:47:0f:bb:21:84:3c:4f:a4:be:
         64:8b:de:18:96:4d:c7:9e:50:1d:56:c5:f6:84:c3:6f:a1:3d:
         8a:59:66:62:6e:78:b2:70:3e:8e:41:e9:fb:78:d5:de:be:11:
         15:b7:f6:2a:f4:be:2f:a9:e5:0c:0c:bb:4b:9b:da:8f:e6:aa:
         34:00:e3:91:37:df:5e:5b:95:65:3b:71:6a:7d:aa:71:da:2a:
         3f:96:be:51:f3:ba:5f:76:64:e6:a1:9f:b7:5a:13:f3:aa:4e:
         35:cf:1d:48:f0:cf:2a:3b:72:e7:77:3b:e0:39:55:b8:a2:e2:
         b0:19:45:af:d0:d0:01:8b:79:05:07:7f:fe:60:ec:dd:b8:69:
         56:a8:11:4f:dc:36:98:d0:ae:be:97:76:0c:66:61:fc:25:4a:
         75:a0:25:c1:0d:46:65:0b:9f:8f:c4:48:6a:44:1c:78:d0:99:
         e1:69:70:9c:6a:31:52:24:3f:66:2d:ee:45:7e:ce:84:8e:85:
         7d:89:17:cb:91:ba:7e:46:d5:60:c1:4d:14:61:85:21:51:f4:
         c1:b2:36:33:be:a7:b3:7e:7d:41:31:93:61:99:4a:c7:8b:7d:
         4d:f6:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:35:32 2026 by rpki-client