This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
File:                     7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft (raw, json)
Hash identifier:          MqUtZC2XantTudvmEyiu2RjddV8tT9/izmKspyeHMYI=
Subject key identifier:   5E:06:02:80:C8:53:79:48:F1:9D:F4:BE:C8:F9:83:91:80:5A:89:D7
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Certificate issuer:       /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
Manifest number:          16
Signing time:             Sun 25 Jan 2026 07:03:18 +0000
Manifest this update:     Sun 25 Jan 2026 07:03:18 +0000
Manifest next update:     Sun 01 Feb 2026 07:03:18 +0000
Files and hashes:         1: 7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl (hash: Z9O70hg80Blx9ao3vxS4Q7lLfRLNSeolL166ogaRZko=)
                          2: 2C4F5466E47A11F08671F3E23F6F56BC.roa (hash: TuO9+5pXcuLpHMKBYcmaCFTYvye6Er5hRqXH0bP/+Jo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
                          rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
        Validity
            Not Before: Jan 25 07:03:18 2026 GMT
            Not After : Feb  1 07:03:18 2026 GMT
        Subject: CN=6975c036-aca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:db:e5:a4:c8:0a:54:3a:4f:2d:7e:ef:b1:
                    e3:34:51:b1:60:2c:69:be:4a:73:ee:f1:f4:9a:a3:
                    8f:19:26:fd:a2:57:4f:c3:04:72:20:d7:ef:25:49:
                    86:c6:af:af:29:d0:1e:f2:a1:2f:3b:e3:bb:cf:0d:
                    6d:64:1a:63:7f:e7:eb:1e:37:4d:86:41:b3:f5:01:
                    d4:90:31:11:8e:aa:a8:0b:38:44:8a:3c:1e:03:4c:
                    d3:8f:31:10:a8:46:f7:7c:cd:d7:e7:7a:18:2f:a8:
                    ec:5e:07:37:0e:e3:8c:8e:1c:ab:b7:f4:c5:af:a6:
                    b7:9e:3f:38:84:af:7a:22:36:dd:b1:21:bf:bc:4f:
                    1c:5a:2d:26:b9:e7:f8:1e:3d:52:f6:78:36:b7:e0:
                    7f:e2:21:43:2a:11:18:c3:3a:d0:83:09:79:5a:11:
                    00:b2:06:47:48:ba:a1:61:47:1a:50:a6:9c:c8:32:
                    8e:25:fc:74:d2:39:3e:e5:93:92:10:c5:0f:94:35:
                    db:95:bd:2f:e7:0b:0b:9a:59:fe:7e:7c:9e:41:40:
                    89:71:ee:9f:0e:0c:02:a4:1b:56:0d:8a:8f:89:09:
                    db:07:cd:54:4d:9f:11:4c:54:07:2d:a0:9f:e9:72:
                    c3:1d:57:33:49:a2:a9:07:ea:00:52:83:64:d0:c1:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:06:02:80:C8:53:79:48:F1:9D:F4:BE:C8:F9:83:91:80:5A:89:D7
            X509v3 Authority Key Identifier:
                keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:ee:34:f5:d8:d4:f6:78:84:1a:e0:fb:a4:b4:c1:ac:ca:
         6f:95:00:5b:cb:78:79:9d:5c:21:98:3a:b4:d4:5b:3e:0a:49:
         ef:0b:46:88:1e:07:9f:b3:9c:b9:fb:ae:06:b9:df:28:89:af:
         a8:40:9e:99:c4:7b:56:d2:2f:e4:c0:46:96:08:64:8d:16:95:
         a0:98:af:5e:08:bf:73:d1:66:82:5a:43:0a:d2:db:65:2a:51:
         22:ec:32:a8:94:12:de:04:04:a9:49:b2:d7:c9:30:1e:7a:c3:
         30:f5:ec:02:66:41:74:16:11:d4:33:f8:48:e5:54:bd:26:74:
         f0:32:46:37:29:23:9c:30:5d:1b:73:55:09:a9:05:77:8b:fc:
         31:b3:00:0e:90:00:64:4c:75:99:58:8f:0e:58:24:d1:8e:a8:
         a4:95:4b:7f:6b:3a:bb:28:7a:2b:57:cf:06:a4:6a:55:aa:fb:
         38:48:67:f8:e8:5e:fa:7f:90:64:c4:f8:4e:17:5b:45:30:5e:
         25:ea:8f:78:de:53:6c:4e:7c:55:99:cd:09:e2:f5:65:b5:db:
         9c:0e:f2:1e:5e:26:aa:d1:3b:fe:f4:d2:08:49:eb:e8:4f:1b:
         e5:28:51:77:c7:08:e3:32:49:7b:9b:7e:b1:32:93:d1:6b:37:
         7a:46:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:20 2026 by rpki-client