This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
File:                     mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json)
Hash identifier:          7SvDodj/SRU6HuKSMETktN4m3aYNLUjVNEAHlF4I/+U=
Subject key identifier:   B5:6B:BE:74:45:32:5F:8D:CD:1A:FD:6C:4C:C9:1E:4C:3F:1E:93:5F
Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA
Certificate issuer:       /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
Certificate serial:       0B3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
Manifest number:          0B2F
Signing time:             Sat 10 Jan 2026 18:47:07 +0000
Manifest this update:     Sat 10 Jan 2026 18:47:06 +0000
Manifest next update:     Sat 17 Jan 2026 18:47:06 +0000
Files and hashes:         1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: STugrtnFFd2O19Z71UhfHL2mV/J6qIcx/WBa7qAZGoM=)
                          2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: wVjOHBRTAFBzywxmlgqw2C8A1H3crVXb96hs+TBB5RU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl
                          rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2874 (0xb3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
        Validity
            Not Before: Jan 10 18:47:06 2026 GMT
            Not After : Jan 17 18:47:06 2026 GMT
        Subject: CN=69629eaa-eec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:8a:17:90:c6:28:d2:e1:8b:55:7a:05:20:
                    fc:ec:b9:ef:0d:b2:0f:47:df:ca:1a:d3:8d:6c:e0:
                    2d:4d:ed:18:94:9a:87:c0:7b:80:ec:80:7b:4a:d1:
                    6b:40:e9:1b:e3:60:da:1c:12:1f:2b:28:f2:fe:1b:
                    1c:8f:8e:f5:b7:14:4e:29:bf:92:f5:52:80:b1:50:
                    b5:67:97:ee:cc:fd:39:86:a1:fa:b2:da:a3:f3:bc:
                    95:b9:32:da:10:14:58:7e:7d:65:a1:b6:1d:71:6e:
                    3b:17:91:bf:fb:dc:cf:b5:f0:aa:1d:35:33:fd:97:
                    a0:13:26:c9:55:62:2e:62:03:19:75:96:e0:5a:62:
                    bd:a5:d9:27:ea:cd:4a:af:55:ec:2d:ee:cf:14:0f:
                    79:01:49:a5:b7:e2:2e:fc:01:65:47:ea:22:61:f5:
                    65:47:c5:bf:17:07:13:21:e0:a5:22:84:5e:bd:4b:
                    8a:11:40:ba:ee:48:25:d6:61:d1:f6:9f:09:22:c0:
                    1d:1a:3a:d0:eb:23:5f:f2:78:3e:9e:77:8c:59:d3:
                    d4:20:f8:61:a5:b7:41:8e:f8:97:10:09:c2:84:9d:
                    04:b9:b3:2f:17:06:7c:98:a7:ef:7f:0b:c0:a7:20:
                    4a:b7:24:bb:b1:9c:32:ee:5f:95:0e:70:d1:17:5c:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:BE:74:45:32:5F:8D:CD:1A:FD:6C:4C:C9:1E:4C:3F:1E:93:5F
            X509v3 Authority Key Identifier:
                keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:13:9d:44:dd:c3:f5:b0:0b:e9:c1:a6:c3:ed:f7:60:7e:
         6a:88:f3:4e:48:95:75:0f:52:28:fe:2a:1a:1a:73:42:fc:18:
         2a:a4:10:f1:b1:69:03:db:8b:75:cd:23:43:fa:96:01:bf:23:
         c5:ee:16:cd:b6:a9:7f:0f:87:f0:37:c7:bf:b8:2c:a7:6d:28:
         3f:8d:13:40:1e:72:69:7a:89:60:89:e1:ef:0f:f8:f0:2a:9e:
         46:71:5e:30:2b:c8:23:c1:98:62:4c:8f:23:6e:63:9c:14:7f:
         46:0d:a3:62:c4:b9:4d:60:bf:2d:27:aa:41:1a:04:75:5e:65:
         e8:05:2f:73:25:dd:2d:b3:a0:b6:37:80:45:d4:1b:1f:9d:18:
         9a:fd:6a:a0:bc:46:be:49:43:3b:b5:49:03:5f:85:00:70:51:
         9d:3a:28:f1:5a:84:e8:92:68:b0:86:98:02:5e:9e:7d:6d:dc:
         65:20:e1:36:00:14:f9:91:db:7b:70:c1:cf:39:ef:12:93:e8:
         e8:36:b2:e0:3d:92:d0:26:1e:d7:7f:d2:2a:45:97:78:88:93:
         da:0e:a9:ce:05:c3:6e:7b:1f:ef:42:8f:41:58:6a:c5:1b:62:
         df:af:8e:4e:dd:cd:d7:bc:f2:47:f8:84:a9:f4:f9:70:29:3a:
         3d:24:7e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:45:03 2026 by rpki-client