This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
File:                     e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json)
Hash identifier:          kGxrwCB5x0STz9s/XHkCL/iJDzlh6rvEdMOMWWPPM3U=
Subject key identifier:   88:97:C8:51:18:CC:3C:91:78:BE:06:BA:54:DA:6E:A9:60:D9:3F:4A
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Certificate issuer:       /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
Manifest number:          81
Signing time:             Fri 23 Jan 2026 05:51:47 +0000
Manifest this update:     Fri 23 Jan 2026 05:51:47 +0000
Manifest next update:     Fri 30 Jan 2026 05:51:47 +0000
Files and hashes:         1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: 1O140SGqSOkUfyu7Mik8KPUSplCnMoKAjZhDxML9e4g=)
                          2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: RmPJ00Uips89e1P+AW2N3rLdF8Pmzlx8rWyUZVnX0RI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
        Validity
            Not Before: Jan 23 05:51:47 2026 GMT
            Not After : Jan 30 05:51:47 2026 GMT
        Subject: CN=69730c73-7e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:ac:59:b6:6b:da:f7:bd:21:b4:25:59:b3:
                    bc:4b:70:fb:05:65:d5:0b:cc:af:60:a3:9d:b8:e6:
                    6a:f5:b5:28:36:0d:c1:2f:74:21:e2:77:79:0b:e3:
                    df:4e:91:37:b4:7d:10:ed:5d:5f:43:e1:4b:11:86:
                    20:b1:fb:9d:56:d1:01:01:d8:e9:59:0e:fe:6f:1e:
                    a8:19:d8:8f:e9:83:90:ae:cf:d1:bf:0c:8b:53:dc:
                    ba:72:f5:b4:84:49:db:71:36:75:0c:0a:72:a6:d5:
                    01:dd:fe:8a:3e:a2:09:df:75:dc:57:29:c0:58:28:
                    02:27:6d:eb:8a:f7:5b:f0:15:a6:4c:5e:d4:83:86:
                    20:30:0d:22:a0:b8:4b:3b:18:dd:0f:dd:71:37:2b:
                    2a:f1:05:96:2e:31:25:bc:88:24:95:00:bf:79:1f:
                    17:b9:5e:84:07:e9:44:18:8a:0c:61:2b:84:29:28:
                    82:cc:5e:b0:3b:90:47:14:6d:24:b0:d5:db:24:34:
                    16:c6:24:ae:cc:6e:bd:fe:7e:7f:0f:ef:82:c3:05:
                    79:ec:f1:f6:08:6d:aa:47:a9:64:9b:d4:32:6d:52:
                    e1:93:78:e5:43:56:db:e5:74:08:b4:5e:e6:7d:fe:
                    01:9f:2c:6c:58:4f:23:f5:8c:58:8a:7c:69:85:0a:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:97:C8:51:18:CC:3C:91:78:BE:06:BA:54:DA:6E:A9:60:D9:3F:4A
            X509v3 Authority Key Identifier:
                keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a0:0d:0d:ae:f8:c3:9e:db:0e:f9:a8:07:4f:ab:a2:40:87:
         4c:f5:64:a3:68:bb:31:1e:3e:4f:c8:b0:83:11:f2:5c:77:2a:
         a2:6e:89:d0:48:03:28:ad:c0:50:47:28:36:14:a2:80:0b:b0:
         f4:e8:e1:2c:e7:dc:b8:90:7c:4f:5d:81:06:d5:55:72:01:a0:
         5f:99:5f:b0:79:5b:58:59:2e:d3:aa:d8:0b:9e:79:3a:13:f3:
         81:29:6d:c3:ce:c8:e0:a6:b2:77:8c:83:2d:90:43:45:e8:a5:
         4a:74:53:7e:cc:4b:54:05:d6:d0:86:7d:3d:df:da:2f:72:59:
         9f:44:d1:26:e8:19:f6:90:f7:6c:6a:61:00:1f:3b:df:d7:10:
         4c:83:1c:2e:56:f6:82:c1:6e:3c:1d:b8:79:66:05:b4:a6:76:
         20:48:72:f1:7a:bc:95:b9:2e:3d:e6:fb:86:18:91:9a:23:2e:
         2a:f6:ed:7e:10:b9:17:95:46:db:cc:71:5e:27:95:0e:6c:3e:
         c4:e5:62:ef:5d:a7:97:23:dc:d8:6d:1c:24:a4:db:1d:9a:c1:
         06:34:87:a5:7f:28:9a:5a:09:b2:2a:a0:15:be:97:ab:25:be:
         3f:50:66:f3:5d:c1:4e:3c:22:29:e1:f5:e0:ee:6b:5c:36:52:
         b4:da:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:49 2026 by rpki-client