This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
File:                     2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft (raw, json)
Hash identifier:          ZLCrTX/H7YQKvuvAhfFbtRHypOGwnBbe0rsh0S+6a/0=
Subject key identifier:   DE:A1:3B:96:F8:13:78:73:C7:4D:94:FA:A1:8D:08:DA:9C:13:9B:4D
Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Certificate issuer:       /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
Manifest number:          66
Signing time:             Sun 25 Jan 2026 06:11:04 +0000
Manifest this update:     Sun 25 Jan 2026 06:11:03 +0000
Manifest next update:     Sun 01 Feb 2026 06:11:03 +0000
Files and hashes:         1: 2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl (hash: FklEy5gEB+Ru+SITysl7dIbclmry2gqX2xXJaZXadQ4=)
                          2: 312F0E7E6E1C11F0AB99F682C4F9AE02.roa (hash: TPTw4itouUrT3zWp67Qh/kFVGTIQgN0gjeYV7fEtXi8=)
                          3: 9DA6D1866E1C11F0B7ED1D84C4F9AE02.roa (hash: Ab7z11j/JWV2srLlnZVUsiX2l5YoRDQg2qGXrcUnimg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
                          rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
        Validity
            Not Before: Jan 25 06:11:03 2026 GMT
            Not After : Feb  1 06:11:03 2026 GMT
        Subject: CN=6975b3f8-3a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:f5:71:4d:b3:25:c1:ba:eb:6f:f8:99:c9:
                    84:22:d6:7e:09:e3:50:4e:c5:7c:6d:dd:70:71:28:
                    e7:e8:2d:10:ec:af:50:04:02:e1:9b:20:0e:a8:31:
                    28:f7:1c:65:31:04:55:49:85:f6:88:d9:06:4f:2a:
                    72:ab:43:d2:6e:5e:f8:cd:59:dc:7f:38:7c:f8:4f:
                    aa:b9:fe:d2:ad:70:b5:6d:d4:f4:45:f2:e3:c2:92:
                    b9:1f:bd:1b:25:c1:62:20:9b:19:17:7e:23:d1:76:
                    28:1d:6e:75:d2:30:e5:ce:93:59:cd:ac:ac:11:72:
                    66:19:b9:ab:bc:4b:14:10:81:5a:72:b4:16:ca:d6:
                    47:5a:f6:3c:bb:76:e1:75:df:1f:c8:cf:6c:6d:51:
                    eb:85:5b:a9:cb:bb:2d:be:c8:78:b7:3a:33:01:11:
                    96:f0:d8:18:5b:3c:9e:b2:05:c5:83:e6:ec:5a:97:
                    4d:d8:f4:a9:b2:c5:e4:1f:0c:eb:d4:78:da:2c:e1:
                    91:cb:1d:14:1f:c4:51:53:bc:a9:50:f3:d1:d3:81:
                    af:4d:9d:ac:25:53:ac:55:6b:fa:f9:4e:59:98:98:
                    05:1e:f3:c9:a6:70:a8:8c:49:bb:6e:c4:ef:ef:83:
                    59:25:96:e2:0c:48:ad:02:8f:94:2e:b9:bc:72:97:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:3B:96:F8:13:78:73:C7:4D:94:FA:A1:8D:08:DA:9C:13:9B:4D
            X509v3 Authority Key Identifier:
                keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7f:23:7f:73:2c:95:89:44:55:be:53:f1:61:89:aa:ff:30:
         f4:03:07:bb:50:47:6c:12:8a:28:c3:59:db:da:05:03:ee:a6:
         01:63:1a:a2:0e:74:4b:e3:2e:d9:f4:5e:bd:3a:2e:79:39:42:
         89:1a:6d:3e:8d:8f:56:95:5f:40:81:4b:b7:94:b0:b2:74:1d:
         64:e6:84:12:0b:e8:33:c9:59:ca:41:2a:b5:8a:f8:fb:92:8c:
         de:09:3e:d2:0b:dd:5a:3a:11:cc:a7:a7:f7:eb:f9:83:51:fe:
         b6:ba:a5:2d:e0:b7:07:c2:00:4f:16:e6:2e:75:02:4d:21:4b:
         14:ea:3b:19:c9:71:08:f1:fa:59:b1:8e:b0:71:b8:0c:8b:fd:
         c3:17:a7:04:2b:06:78:9d:f3:63:48:03:6b:dd:67:db:cb:f9:
         dc:dc:fd:4c:c3:2d:54:c7:9e:fa:ac:f2:b6:ce:1c:86:cc:b3:
         e6:5d:0d:22:c0:17:d8:62:1f:42:0c:ad:e3:de:91:37:ce:f8:
         c8:b8:24:b0:cb:71:20:db:8f:b7:dc:99:cb:ba:cd:19:98:4e:
         89:3a:7f:bb:7e:91:bf:eb:43:ac:c3:4d:ce:4d:91:e1:79:55:
         70:ce:2d:b0:2b:d7:d5:96:a3:ec:e2:79:47:24:33:05:a9:2a:
         fd:3d:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:20 2026 by rpki-client