This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
File:                     7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json)
Hash identifier:          DAzqWx9yZSNQa6MiJeTv3xG97uV0fwxihShz8mCL0jI=
Subject key identifier:   44:A4:54:57:70:A0:7F:73:F8:31:EC:C2:33:04:BF:F2:D0:BA:F6:8E
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Certificate issuer:       /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial:       09E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
Manifest number:          09DF
Signing time:             Sat 24 Jan 2026 19:21:43 +0000
Manifest this update:     Sat 24 Jan 2026 19:21:42 +0000
Manifest next update:     Sat 31 Jan 2026 19:21:42 +0000
Files and hashes:         1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: fq2jwKVh5X29S3oIGDlNfDYYOr2/IZNkWpnmey8tSSk=)
                          2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
                          rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534 (0x9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
        Validity
            Not Before: Jan 24 19:21:42 2026 GMT
            Not After : Jan 31 19:21:42 2026 GMT
        Subject: CN=69751bc6-dbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:d4:41:4a:d2:6d:67:fb:07:32:f7:a2:9d:
                    f7:79:6c:b3:99:87:f5:74:6b:70:87:e4:c4:93:02:
                    27:2c:5e:d4:0c:4b:ce:9a:fc:81:e7:6a:02:f4:d9:
                    d0:f6:51:06:46:43:57:ed:ff:d1:2c:f6:64:6f:48:
                    aa:58:b9:cd:86:f3:59:57:49:7d:3a:2d:9a:e7:3c:
                    fc:13:16:71:3b:cc:45:8f:0a:c9:92:a0:89:95:01:
                    56:3a:83:f6:b9:00:73:4b:61:c6:7b:07:dc:3d:b9:
                    a5:70:45:8c:44:db:1a:8c:fd:21:5f:e5:16:91:3b:
                    d0:71:5d:f1:64:87:3b:9c:d4:fd:1f:7e:06:0c:d5:
                    b3:c8:97:7e:57:ab:8d:2c:6f:40:dc:0e:2b:60:31:
                    e3:9c:63:c3:60:3a:87:a3:e5:8b:32:0d:5c:bf:99:
                    9d:13:3c:38:f2:fa:9b:54:fb:e6:c3:e0:3f:b6:e4:
                    c6:f8:a9:8b:d4:8f:a0:d5:10:bf:48:86:4c:59:c4:
                    ed:d6:0e:6e:49:40:63:d8:72:3a:10:de:37:00:cb:
                    43:02:66:93:3e:fe:ca:c6:e9:20:d0:af:c9:43:ea:
                    e2:c2:f1:3a:b2:6c:41:26:e4:82:eb:14:2d:13:ce:
                    a0:af:35:a5:74:fb:c7:72:05:c5:17:f3:f6:4e:a3:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A4:54:57:70:A0:7F:73:F8:31:EC:C2:33:04:BF:F2:D0:BA:F6:8E
            X509v3 Authority Key Identifier:
                keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cf:c7:5f:25:fa:11:ab:66:84:ab:fd:64:d7:6b:fe:fc:5a:
         7c:64:f8:c9:ff:36:20:9f:bd:76:0b:29:a4:18:46:95:a4:35:
         89:e5:22:d8:4d:42:aa:a2:7e:03:21:56:1c:4a:f1:c8:56:ff:
         73:c3:77:d4:ef:a0:38:77:bf:58:be:5f:43:2a:7c:82:f7:93:
         fa:83:1f:b3:2b:52:18:29:1b:51:cf:94:1d:36:c8:73:ee:c7:
         dd:54:22:d4:a8:fb:6c:a2:5b:2b:89:cf:3e:11:38:36:ec:bf:
         4e:db:e4:e6:d2:d1:02:88:04:0e:ff:1e:52:6a:fe:d7:98:39:
         61:5f:37:4a:b4:4e:7b:33:1a:2b:52:02:7e:6e:da:6e:00:26:
         e9:19:e2:d4:44:ea:e6:66:27:2f:2c:34:93:72:23:75:ee:fc:
         6e:79:9a:08:1f:c5:00:cc:8b:59:8c:59:30:02:29:78:5a:e2:
         ad:75:a2:9d:44:6c:be:21:24:68:84:a8:63:bc:95:e2:b1:17:
         69:6d:d0:e5:30:19:ce:7e:39:21:4c:92:c2:6b:99:74:00:90:
         55:dc:39:19:c1:aa:70:f8:26:f8:eb:a4:8e:3c:0e:75:95:7b:
         66:02:e6:ea:ad:d2:ff:a7:44:d6:c7:d9:1c:98:2d:fa:e8:55:
         ad:8d:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:16 2026 by rpki-client