This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
File:                     r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json)
Hash identifier:          pg+zhL+9EpVdpt1O3Z8xvXxmnIeIFSUchlt4Vl5VCmo=
Subject key identifier:   36:89:83:B6:6C:69:49:8B:13:B5:0F:3C:C7:19:F5:4D:4A:6B:8B:AF
Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E
Certificate issuer:       /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
Manifest number:          01D6
Signing time:             Sun 25 Jan 2026 02:06:51 +0000
Manifest this update:     Sun 25 Jan 2026 02:06:51 +0000
Manifest next update:     Sun 01 Feb 2026 02:06:51 +0000
Files and hashes:         1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: oRxUguQqWAR9fHAn8tXBs2WVhw1KZMSkZMwQQUD5+Kc=)
                          2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: GyWEom6S3q07RtuEwFpriwJsgcHzGa54vXUp1K8wG2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl
                          rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
        Validity
            Not Before: Jan 25 02:06:51 2026 GMT
            Not After : Feb  1 02:06:51 2026 GMT
        Subject: CN=69757abb-e8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:67:06:c2:9f:19:b7:86:18:d7:de:ca:fe:
                    64:23:ea:64:c6:5f:30:58:c2:8c:eb:04:51:2f:46:
                    b4:55:4f:10:85:9c:33:37:7e:1b:f7:90:0b:cc:a8:
                    54:7f:c5:ae:51:eb:5c:e9:6b:59:6d:4b:c7:8c:b2:
                    7b:02:3d:a5:60:9c:cb:68:85:99:13:8f:4b:e5:99:
                    d0:d3:ee:80:3e:b4:62:39:10:1d:8b:5c:0a:17:3e:
                    21:49:95:73:ff:ee:8f:f0:ab:ea:46:8b:78:73:27:
                    df:dd:13:45:34:e2:cb:e3:30:94:7f:c2:1d:7e:ed:
                    8d:de:1a:c0:48:18:e4:ff:2d:37:53:31:48:74:00:
                    f4:72:25:1c:06:50:35:83:e5:c8:a0:d1:6d:6c:54:
                    67:73:78:d0:e5:93:93:b4:21:0a:44:72:55:9e:b5:
                    7a:4b:9f:a3:d7:31:12:ab:28:8b:5b:55:ed:cb:64:
                    6f:00:71:87:37:0f:f4:84:6d:b9:7b:03:4d:ff:96:
                    05:c5:3a:0a:cb:fb:74:86:94:fc:a6:c5:2b:39:ad:
                    44:85:93:ee:5f:da:7a:8c:5e:80:17:44:e4:3f:42:
                    38:85:d3:4f:8c:fa:08:37:3f:c5:19:05:b8:f8:b8:
                    d1:58:b0:ff:c7:3e:29:ec:aa:bb:22:d7:bb:0c:3e:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:89:83:B6:6C:69:49:8B:13:B5:0F:3C:C7:19:F5:4D:4A:6B:8B:AF
            X509v3 Authority Key Identifier:
                keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:a4:fa:6d:de:cd:43:ef:dc:e1:62:cd:56:84:26:27:a8:4b:
         e5:82:cc:3d:7b:8c:16:11:8e:21:4c:ae:b0:85:fa:4c:38:a9:
         80:ea:21:d0:3f:13:2f:e3:98:bf:46:17:7f:aa:f0:8a:0a:bf:
         b5:5c:a4:ef:09:4f:02:82:82:7d:38:c8:34:79:e6:0f:9d:c0:
         cf:28:71:29:95:93:f6:6e:50:d7:38:b0:71:b4:a2:ec:d7:23:
         bf:8a:85:c3:db:64:e0:38:bf:3b:ed:2a:e9:09:96:2e:97:74:
         7d:c9:06:5b:df:6a:e9:eb:c2:73:12:9a:b9:fd:b5:ac:2c:a1:
         f5:ca:f4:a8:ad:f4:38:c8:4c:c5:11:30:db:60:49:00:29:f2:
         13:03:5e:cc:cc:b9:d5:0d:a0:1d:50:d9:50:20:aa:02:f8:4a:
         41:a4:c0:58:0e:24:11:ec:73:6a:f1:c0:01:81:95:16:4f:c6:
         f0:40:6c:df:a2:ab:fd:d1:f8:6f:b2:66:58:80:45:7a:f4:bc:
         7b:e8:4a:e8:5b:84:ce:61:6d:92:86:ba:be:2c:31:22:37:2a:
         18:04:2d:0b:da:58:6f:d3:b9:8c:e7:a5:02:1c:da:3a:19:51:
         be:26:13:be:b0:bb:b4:48:6b:cf:3d:ca:c4:34:51:14:1d:bd:
         3f:b6:fc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:39 2026 by rpki-client