This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File:                     7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier:          f+bV+dGuu0cqVTRYAbDm5QMIh9iQZ2CXAYQq8o7+zX8=
Subject key identifier:   A1:94:B7:2B:28:87:B8:02:88:B8:E7:2A:19:55:C7:7E:0E:1B:8B:3F
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer:       /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial:       0A76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number:          0A3B
Signing time:             Sat 24 Jan 2026 19:18:23 +0000
Manifest this update:     Sat 24 Jan 2026 19:18:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:18:22 +0000
Files and hashes:         1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 4MyOeGVHgE0QehsSwnf1AaLrMaWC2wKfe6s7mFzX3rg=)
                          2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=)
                          3: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=)
                          4: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
        Validity
            Not Before: Jan 24 19:18:22 2026 GMT
            Not After : Jan 31 19:18:22 2026 GMT
        Subject: CN=69751aff-d2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:f6:2a:e4:d2:90:94:6b:fc:b1:84:57:03:
                    e5:15:53:14:e1:72:a1:40:7d:90:2c:6a:0a:09:8a:
                    46:e8:d7:3e:9f:ec:44:4f:cf:d6:e1:2f:95:ac:d3:
                    24:0f:26:a0:b9:23:82:a3:c7:60:a9:3d:67:60:57:
                    1f:d6:52:4e:89:d9:a7:f5:fc:5e:a3:a0:43:2b:d1:
                    09:0e:80:b9:a6:a5:20:d8:37:f2:ad:17:8b:88:b4:
                    94:a9:89:1b:08:06:68:8b:1d:df:5b:92:a8:ec:99:
                    97:66:6a:cf:b9:f0:24:b8:8c:37:2b:7b:59:e2:06:
                    64:6e:39:05:75:47:d3:98:3b:11:d6:df:37:9f:74:
                    2b:12:b7:58:18:ec:f5:c4:60:de:62:77:22:e8:e1:
                    19:13:3e:f6:92:cb:37:1f:4e:37:c5:66:93:70:d5:
                    a1:40:1f:64:9c:81:f8:a0:3b:56:4c:af:82:6d:c2:
                    ba:a2:ea:b2:34:d4:48:f5:fd:49:d4:f9:a8:11:fa:
                    3d:f0:e2:27:3a:4b:51:b4:7e:db:4d:22:4f:d4:8f:
                    f3:39:74:72:49:70:ff:1d:a1:f3:1b:bc:be:04:a3:
                    3e:fb:f3:7e:65:92:85:81:bb:ec:28:78:c2:bd:0b:
                    f5:bc:5a:4d:67:ab:6a:6a:15:36:b5:ab:af:85:55:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:94:B7:2B:28:87:B8:02:88:B8:E7:2A:19:55:C7:7E:0E:1B:8B:3F
            X509v3 Authority Key Identifier:
                keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:32:b7:3d:59:b1:d2:f7:76:07:58:5f:ef:70:0b:53:52:
         03:2d:e2:1e:5f:51:c6:59:41:4e:25:b1:51:3f:06:91:61:c0:
         76:11:eb:3a:39:25:bb:13:4c:98:39:46:6f:43:25:0d:d7:e6:
         88:fe:18:60:dc:d5:fa:a4:ee:96:9b:df:00:ca:83:d5:fe:a1:
         80:b7:36:c1:cb:df:dc:4d:36:33:e5:23:b6:6e:db:da:b3:f4:
         2b:1e:e0:59:25:84:b3:e8:ff:bd:f8:4d:14:e0:b5:e7:42:82:
         75:3c:f6:ad:a6:f1:a9:8d:f9:a6:ed:55:76:14:87:44:62:e4:
         75:62:0a:2c:9f:6a:9d:f9:b1:ab:ac:ed:90:f9:65:5d:e8:09:
         ee:a1:b1:1c:71:81:d4:35:1d:cd:66:43:12:e3:1e:2c:c3:ce:
         a8:2a:05:d3:be:d0:98:ef:9d:cb:22:da:0b:54:a2:f8:bb:26:
         9b:00:e8:13:fd:68:19:ef:03:a2:53:4d:9d:7b:db:f9:e8:77:
         2e:72:84:6f:08:33:a0:58:7d:00:59:b2:9d:07:90:8d:bf:c6:
         a0:c6:da:5d:02:20:af:9a:40:69:af:8a:b0:0e:14:80:42:6a:
         d2:d7:d7:80:b5:ae:b1:a9:c3:65:5b:86:c6:1a:0c:e9:88:24:
         aa:d5:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:35 2026 by rpki-client