This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
File:                     8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json)
Hash identifier:          Qcwgu4jhCMxPELZAwni1PwAo12xfKjyR6ealm6j2ePQ=
Subject key identifier:   C4:4B:2F:CF:9E:61:D4:70:85:00:36:64:07:10:7D:F5:33:7A:B5:CF
Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
Certificate issuer:       /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
Manifest number:          B7
Signing time:             Sun 25 Jan 2026 05:12:36 +0000
Manifest this update:     Sun 25 Jan 2026 05:12:35 +0000
Manifest next update:     Sun 01 Feb 2026 05:12:35 +0000
Files and hashes:         1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: Eqil8eiN2I0UPch4BBCaxfjE0fYm73Y490c4cyhxtDM=)
                          2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A
        Validity
            Not Before: Jan 25 05:12:35 2026 GMT
            Not After : Feb  1 05:12:35 2026 GMT
        Subject: CN=6975a644-59e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:03:77:8f:6a:61:d7:19:a0:45:3b:bf:8b:
                    a3:e5:4d:1f:72:ec:cb:0f:25:3c:53:94:d0:11:d3:
                    e9:8a:0c:f9:21:33:a9:d8:f8:5c:73:50:c9:08:49:
                    44:0c:e8:51:cf:04:5f:70:c7:43:47:14:13:f4:a0:
                    15:24:2f:2b:a8:af:ee:21:e6:cc:88:04:06:ca:eb:
                    c9:e7:73:13:29:fa:f4:6b:5e:2e:f0:89:c5:c0:85:
                    9e:e9:07:89:c4:a4:33:ae:3f:66:73:19:5c:1a:ed:
                    5b:41:e0:fd:81:f7:23:f1:9f:41:3b:92:3d:70:7e:
                    14:58:0d:8c:aa:ca:94:00:fc:02:f5:44:10:28:4f:
                    a8:ae:b0:38:e4:2e:6a:1c:c6:34:ec:84:16:8f:28:
                    36:02:5b:af:7a:e7:31:7f:b4:25:41:78:5c:1a:bb:
                    de:81:41:14:8a:9c:4a:73:be:b4:ce:57:e8:71:fe:
                    f4:fe:65:f4:0b:75:c5:98:90:7f:7f:59:ae:0a:34:
                    e6:29:ff:92:e2:92:85:ec:77:10:06:5b:9b:58:11:
                    97:99:52:e5:a1:7c:87:44:d5:c5:4c:52:fe:bc:5a:
                    51:48:84:2d:71:79:f0:0e:64:a7:f1:ef:6b:63:67:
                    4a:83:bc:59:99:10:7e:e4:65:fd:7e:e9:4f:a2:2f:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:2F:CF:9E:61:D4:70:85:00:36:64:07:10:7D:F5:33:7A:B5:CF
            X509v3 Authority Key Identifier:
                keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:11:dd:0e:4a:0e:82:1a:e5:5e:1b:57:5f:3a:4e:59:13:
         a9:b8:89:32:a3:95:00:1c:cb:d1:2d:d8:2a:c1:e7:67:d6:15:
         a7:be:42:bc:d3:40:33:b6:4e:80:cb:64:ab:4a:d9:7d:f4:18:
         d2:66:37:5b:c9:e0:c2:8f:08:8f:f7:93:4b:43:64:dc:26:b6:
         13:86:ba:51:46:70:51:10:32:8d:85:30:07:d5:22:8e:0c:00:
         10:e3:29:9b:42:86:a9:79:7f:ea:98:83:4c:ce:b2:33:db:97:
         3c:e8:c0:60:e5:32:bd:75:22:23:1b:4a:b2:7f:b3:38:a8:8a:
         88:0d:a0:96:ca:53:eb:2c:97:ca:fb:da:90:41:cc:48:fb:49:
         ee:10:3b:75:94:b4:c1:41:61:30:9c:82:ac:ec:cc:d9:93:96:
         7e:00:bf:ee:53:2f:f8:b3:58:23:6f:9d:6d:7d:68:2e:78:ac:
         bf:86:54:1a:67:c6:92:58:d2:a3:a1:f4:97:81:42:6e:04:51:
         08:41:b6:5e:98:c2:63:8f:92:3b:6b:02:f8:b4:fe:0b:f9:fe:
         20:52:15:a6:5a:84:60:9d:b6:21:0f:0a:34:c4:4a:dd:37:c3:
         06:b4:9a:ce:b3:4f:1b:3d:dd:53:b2:06:17:8d:e4:2e:0c:6a:
         37:59:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:37 2026 by rpki-client