This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
File:                     7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json)
Hash identifier:          Ne/hZdx3Wqu5KMc+vdkOPKAnAu4lEEnJGNqeTMhEln4=
Subject key identifier:   00:7B:A2:64:77:46:F1:FF:10:5B:65:31:97:85:0A:32:79:A6:92:CD
Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
Certificate issuer:       /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Certificate serial:       3542
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
Manifest number:          351C
Signing time:             Sat 24 Jan 2026 14:16:44 +0000
Manifest this update:     Sat 24 Jan 2026 14:16:43 +0000
Manifest next update:     Sat 31 Jan 2026 14:16:43 +0000
Files and hashes:         1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: +g2cxafSNyZhItxxC2U5Rot1OIyKwCmKS4oTZ7+Yc+c=)
                          2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=)
                          3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13634 (0x3542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
        Validity
            Not Before: Jan 24 14:16:43 2026 GMT
            Not After : Jan 31 14:16:43 2026 GMT
        Subject: CN=6974d44b-2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:70:93:fe:7e:f6:9c:f6:10:86:50:c8:e9:
                    b8:41:2d:36:c1:3e:cf:f8:47:a0:71:61:57:ed:9d:
                    64:48:98:39:65:63:cd:80:1a:29:a0:68:27:b5:be:
                    41:82:aa:dc:a0:17:c1:4b:b1:6e:42:14:e5:fb:e8:
                    a0:ad:29:fc:0c:84:ef:47:9b:5c:52:ef:e1:69:46:
                    6b:cb:f6:a6:cb:2c:1c:32:5a:47:db:e6:30:82:78:
                    b6:ba:c0:90:75:20:be:74:4b:fe:fc:65:a4:2f:2a:
                    43:00:8b:26:7a:be:27:0b:1b:34:ea:e0:b6:9f:0d:
                    da:b1:1e:58:75:e8:46:d1:f7:54:64:ba:d3:cd:b0:
                    29:28:db:2f:e9:a9:66:77:c9:be:9d:4a:e5:b9:6c:
                    1d:5f:c3:4a:f5:aa:1d:e2:11:99:5c:f7:81:78:38:
                    9d:6e:1a:77:12:cd:1f:65:5c:aa:88:7b:db:06:08:
                    9d:1d:5c:91:6f:dc:ce:ea:6c:e4:70:f8:26:2d:ad:
                    ff:65:82:6f:76:33:90:46:4e:50:c6:cf:91:95:34:
                    cc:cc:4f:bd:51:91:25:2c:b0:1a:62:25:ce:97:22:
                    4a:f2:6b:17:fd:28:fc:c6:ca:44:50:b9:be:e0:9d:
                    64:2d:f9:19:bb:ac:7e:3b:14:49:45:9f:87:45:51:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7B:A2:64:77:46:F1:FF:10:5B:65:31:97:85:0A:32:79:A6:92:CD
            X509v3 Authority Key Identifier:
                keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:f8:fd:f3:fa:d5:01:3d:c9:ea:a3:1e:82:77:ef:ca:44:
         45:3c:34:16:43:2f:50:b7:c5:97:3b:1d:1a:58:66:14:a3:4f:
         85:4a:ad:0d:08:8d:46:7a:3a:39:fd:11:e2:a6:a2:83:98:3a:
         b0:c5:a7:26:bb:1e:b1:7a:38:d2:a7:2b:ec:77:e7:2d:3e:fb:
         30:5d:c7:6e:56:d4:07:38:ae:75:d7:87:aa:12:91:15:7c:5d:
         d3:45:91:23:70:4c:43:cb:24:4e:3b:db:be:10:e1:ca:cb:01:
         34:41:8b:97:96:bd:dd:b9:64:96:53:ee:f7:1e:4c:e7:66:3f:
         e8:ba:21:3a:a9:7c:32:f0:a0:fc:33:f2:26:c5:23:f8:f1:ee:
         b1:8b:b6:ae:66:f3:0a:96:d2:01:2c:71:13:54:c3:4c:6f:49:
         81:08:94:48:f1:29:1d:77:41:89:a9:b5:35:d1:f0:e2:db:18:
         ad:37:8b:e7:a3:e2:7c:ab:13:cf:21:d2:05:fb:76:76:1b:48:
         ec:8c:7d:ac:03:70:8c:6b:41:61:5c:55:47:83:f5:fc:01:2a:
         d5:8d:9c:78:0b:93:63:34:ca:f9:67:5c:5f:3b:e7:00:fd:d8:
         df:aa:82:9d:4e:b0:51:33:91:24:0f:0e:48:21:03:fb:a8:bd:
         62:91:c0:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2
Qjk1MzYyQzAwHhcNMjYwMTI0MTQxNjQzWhcNMjYwMTMxMTQxNjQzWjAYMRYwFAYD
VQQDDA02OTc0ZDQ0Yi0yNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0cxwk/5+9pz2EIZQyOm4QS02wT7P+EegcWFX7Z1kSJg5ZWPNgBopoGgntb5B
gqrcoBfBS7FuQhTl++igrSn8DITvR5tcUu/haUZry/amyywcMlpH2+Ywgni2usCQ
dSC+dEv+/GWkLypDAIsmer4nCxs06uC2nw3asR5YdehG0fdUZLrTzbApKNsv6alm
d8m+nUrluWwdX8NK9aod4hGZXPeBeDidbhp3Es0fZVyqiHvbBgidHVyRb9zO6mzk
cPgmLa3/ZYJvdjOQRk5Qxs+RlTTMzE+9UZElLLAaYiXOlyJK8msX/Sj8xspEULm+
4J1kLfkZu6x+OxRJRZ+HRVHN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB7omR3
RvH/EFtlMZeFCjJ5ppLNMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE
NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1
Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCROvj98/rVAT3J6qMegnfvykRFPDQWQy9Qt8WXOx0aWGYUo0+FSq0N
CI1Gejo5/RHipqKDmDqwxacmux6xejjSpyvsd+ctPvswXcduVtQHOK5114eqEpEV
fF3TRZEjcExDyyROO9u+EOHKywE0QYuXlr3duWSWU+73HkznZj/ouiE6qXwy8KD8
M/ImxSP48e6xi7auZvMKltIBLHETVMNMb0mBCJRI8Skdd0GJqbU10fDi2xitN4vn
o+J8qxPPIdIF+3Z2G0jsjH2sA3CMa0FhXFVHg/X8ASrVjZx4C5NjNMr5Z1xfO+cA
/djfqoKdTrBRM5EkDw5IIQP7qL1ikcAd
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:40:59 2026 by rpki-client