This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
File:                     -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json)
Hash identifier:          Upeigvb/wtKX2jBoaP0K3VgI4NX4Dt6aJ+WHZnAmWKg=
Subject key identifier:   E7:A8:18:38:C7:A9:AA:1D:C5:A9:77:79:C0:06:F1:5C:7C:E3:0D:DF
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Certificate issuer:       /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
Manifest number:          023D
Signing time:             Sun 25 Jan 2026 01:16:24 +0000
Manifest this update:     Sun 25 Jan 2026 01:16:23 +0000
Manifest next update:     Sun 01 Feb 2026 01:16:23 +0000
Files and hashes:         1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: 2QRaWefrRTj+tT7x2FGNrhgxWQY/eD0mPP9VsWdwYE0=)
                          2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: 7y9YgAD0AHPCtt4hZS/yoM7rZ13GFqXpcG+t7nx96Oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
                          rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
        Validity
            Not Before: Jan 25 01:16:23 2026 GMT
            Not After : Feb  1 01:16:23 2026 GMT
        Subject: CN=69756ee8-0270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:19:f4:72:fe:8e:e1:e8:80:a5:f8:e1:65:
                    94:f4:9c:34:46:95:40:7d:9d:12:c4:35:4e:8c:29:
                    b1:f1:92:a9:9a:8c:f4:50:62:b4:b5:27:96:67:90:
                    d7:89:af:2a:e7:5d:1a:e2:5a:9c:b1:d6:83:ba:41:
                    33:a7:ca:68:3e:cc:c7:0d:a0:4b:57:6d:bc:1d:33:
                    e2:89:65:3a:24:24:43:b2:57:74:62:99:5e:a3:97:
                    5f:52:37:8b:3c:52:51:11:1e:7e:17:b5:9b:b9:e9:
                    89:b8:54:6b:0f:7b:8b:29:bd:fb:c5:4e:57:99:59:
                    37:57:75:ec:21:90:a9:d7:84:57:f7:72:10:7c:c8:
                    e0:e9:24:27:03:dc:b8:86:50:0d:d2:88:fa:56:a1:
                    37:34:1a:c2:c1:71:00:ea:7b:75:76:14:0b:e8:bc:
                    31:f7:0c:ab:d5:9e:75:b3:50:38:56:b2:5a:70:ab:
                    b4:33:89:f2:52:4c:e7:7f:14:1b:93:c6:07:a2:9f:
                    72:5b:a2:f6:df:74:97:b0:eb:c3:2b:db:73:76:bd:
                    65:c7:86:64:b0:94:f4:6d:25:3b:78:ad:60:34:03:
                    67:d7:ee:12:44:91:2d:ca:8a:2d:41:52:e4:06:94:
                    68:cc:9d:7e:86:ec:f0:23:b1:6b:36:e0:b5:ea:f4:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:18:38:C7:A9:AA:1D:C5:A9:77:79:C0:06:F1:5C:7C:E3:0D:DF
            X509v3 Authority Key Identifier:
                keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:c3:22:e1:38:5f:c9:6a:d3:48:be:ff:ca:5e:d2:94:f2:
         db:38:a8:32:a1:c3:09:2d:08:e1:92:a1:e1:66:12:c9:df:6c:
         06:c5:0b:32:6c:e3:f0:58:7f:ab:30:84:ab:81:55:dd:2d:90:
         39:91:8a:cc:95:7c:a1:2c:ef:55:9c:37:a9:ca:6a:17:14:d4:
         bc:7f:82:5b:49:43:3b:a8:a0:f1:bf:3e:1b:9b:0f:dd:09:ee:
         c6:cb:fc:3d:db:d7:7f:c0:32:b9:57:cb:56:13:f9:76:3e:4e:
         2d:db:7b:cc:f8:be:9c:81:cd:94:b1:83:de:4e:dc:49:52:60:
         8a:dc:57:37:1f:85:ad:b0:94:34:17:d1:fb:88:f6:58:72:c8:
         3b:69:f1:59:e8:8c:6a:35:4a:1a:05:ca:c1:3c:c4:92:67:82:
         f5:4e:13:ba:cf:d4:50:7b:49:9d:59:bc:85:36:f7:98:e1:4a:
         ab:46:58:45:de:02:d4:f3:e8:ce:d5:9a:93:63:3b:e6:7e:2c:
         3f:69:5a:10:4b:c9:e7:40:b3:34:8e:2d:59:31:96:e7:7a:03:
         95:56:a1:0c:41:08:66:f1:0a:90:6e:06:b5:a9:bc:18:4f:51:
         40:81:6e:73:2f:99:63:e8:c9:a1:5a:e9:19:6b:df:29:b2:a9:
         33:9f:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:26:36 2026 by rpki-client