This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File:                     7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier:          awFJ4EW1jEJjpH4Qppe8+4Md48K0VoM9Kd8qAlEzOik=
Subject key identifier:   84:F0:F9:90:BE:4A:CF:0A:FB:B6:B8:6A:D5:C3:A3:24:C4:EF:2B:AC
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number:          0CBE
Signing time:             Sat 24 Jan 2026 17:56:07 +0000
Manifest this update:     Sat 24 Jan 2026 17:56:06 +0000
Manifest next update:     Sat 31 Jan 2026 17:56:06 +0000
Files and hashes:         1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: CMCDQRpwkF2B03124w5If6wEYZ0PSC0rzhyllvGcYiU=)
                          2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
                          rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
        Validity
            Not Before: Jan 24 17:56:06 2026 GMT
            Not After : Jan 31 17:56:06 2026 GMT
        Subject: CN=697507b7-1a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:8f:09:05:29:e6:40:14:2c:96:5c:cc:e2:
                    76:87:ac:0b:b0:ac:b8:cd:d4:36:85:07:c5:4d:3d:
                    23:e6:ab:4c:db:69:6c:dd:9c:75:3c:4d:6a:b9:47:
                    2b:65:49:92:0a:8c:c3:67:45:c3:de:11:9c:7f:6f:
                    4b:ab:73:c2:f2:23:46:68:1a:87:db:35:87:e2:3b:
                    4b:56:0a:43:e5:14:da:72:6b:de:67:22:6b:3c:76:
                    4d:63:1f:76:c1:ab:e4:43:61:16:7b:81:bc:81:49:
                    8d:c7:7e:66:a5:91:e9:6e:e6:82:8a:60:dd:78:b1:
                    9c:3e:c8:39:54:d1:30:a5:10:bd:a4:9a:e3:1f:a5:
                    d3:c4:21:02:31:72:5a:d9:15:4e:45:e4:12:ab:2e:
                    37:3b:56:74:d5:11:4e:13:c3:fc:3d:7b:8c:47:35:
                    fb:06:a3:19:cb:4b:9d:35:3a:b8:c2:68:43:86:5e:
                    f9:e3:e0:1b:12:96:5a:24:58:e5:17:a9:1f:ca:1f:
                    38:0c:08:ae:f4:73:ec:6a:e2:f1:2c:b9:5f:bb:f1:
                    ac:1f:5a:83:b2:be:f8:8d:39:ad:00:7b:b6:b0:15:
                    bf:3e:69:48:48:0c:a8:87:41:da:0c:8a:7d:bf:12:
                    aa:d5:9b:7a:fe:f5:45:a1:50:ee:72:54:c6:8a:cc:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:F9:90:BE:4A:CF:0A:FB:B6:B8:6A:D5:C3:A3:24:C4:EF:2B:AC
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:58:2c:df:0e:d5:81:cc:9a:a4:1f:f9:e5:0e:4f:3f:23:
         72:cc:2c:89:64:51:86:ff:b7:4f:3c:ab:8e:a2:09:94:66:78:
         a4:a9:83:fb:4e:da:72:dc:a3:74:5f:a3:a0:e0:c3:62:83:8c:
         be:76:fa:3a:93:f3:ae:7c:b5:c5:8c:f6:63:b4:08:79:4b:d7:
         c5:dd:95:ef:10:e3:63:62:33:40:d8:01:b0:d1:67:79:62:42:
         95:43:70:b0:58:15:b6:78:8e:27:c7:11:b6:53:65:5d:8d:07:
         6c:69:5e:c8:67:b9:ae:d5:34:97:b7:70:73:c1:99:6f:b9:17:
         9d:c0:f6:c2:02:2e:25:ad:fe:35:c6:57:6d:2b:e0:22:9c:a4:
         f2:25:dd:6b:70:6f:60:31:28:f0:76:a3:5d:dd:53:06:b7:6b:
         69:e5:a0:9d:0e:9b:5e:c6:ad:8e:a8:fd:77:4d:df:b0:3f:78:
         72:bc:b1:2d:20:34:e4:52:2f:71:0e:4d:c3:19:30:3c:c2:a7:
         22:e5:bb:88:b8:e6:d8:4f:9b:f0:02:82:aa:ac:94:87:9c:6e:
         13:42:48:3f:e6:22:5a:c2:46:fd:4d:5f:ce:e0:8c:b8:a1:91:
         7b:37:9e:fe:0d:f1:3b:73:06:ef:9e:91:2b:33:be:04:e4:95:
         e4:a7:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:24 2026 by rpki-client