This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          1XirswJ86V/XeDDMfJyzqSbZSt2yWDZf8xB8+U8WWkI=
Subject key identifier:   BC:17:FB:03:A8:96:D0:F0:75:46:08:48:AB:76:BE:08:97:38:02:9F
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          AD
Signing time:             Sun 25 Jan 2026 05:21:15 +0000
Manifest this update:     Sun 25 Jan 2026 05:21:15 +0000
Manifest next update:     Sun 01 Feb 2026 05:21:15 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: C7rONucDGiZqdNcV9K6CenoyL0Az+kNvt0Dr6HcAkkA=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Jan 25 05:21:15 2026 GMT
            Not After : Feb  1 05:21:15 2026 GMT
        Subject: CN=6975a84b-e8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:de:e3:e8:d0:80:21:37:7c:8a:f2:58:cc:
                    11:2c:2e:f7:3e:ae:bc:2a:53:8b:c4:37:c0:63:a8:
                    4f:55:aa:38:20:f5:b1:f6:4c:77:e3:5f:89:e5:f0:
                    3d:cb:d6:4c:fc:fa:ed:c2:68:59:21:c7:86:94:1b:
                    74:9b:6b:c8:98:31:57:75:59:3a:e1:f9:4f:14:78:
                    7b:1a:e2:1d:75:28:19:1a:5c:29:17:52:ea:60:fb:
                    d7:af:80:f1:ca:a7:2c:1b:ad:e6:fe:ae:61:d7:c5:
                    a3:12:8c:1b:b8:4f:87:99:d5:10:24:81:f8:17:6c:
                    cc:68:6a:09:de:8f:85:ac:2e:1b:ed:db:6d:e4:cb:
                    12:6d:3a:05:57:21:87:29:20:54:0b:91:78:34:d4:
                    11:38:90:29:4d:d2:38:c6:33:82:1e:39:08:ac:5a:
                    9a:7a:e0:6c:08:a2:3b:f8:96:f5:d5:fd:ec:9f:b5:
                    04:c3:ff:8e:a8:39:43:78:0f:1e:53:75:ea:f7:bb:
                    13:e5:99:bc:60:18:23:81:7a:bc:f4:32:08:a3:dd:
                    26:8a:fb:d8:5f:d0:1d:1d:f8:4e:10:f2:c2:7b:a1:
                    24:0d:f5:e4:3a:9e:2d:c9:62:44:8a:27:ca:78:9d:
                    24:49:6c:f0:b1:54:a2:06:32:46:e5:18:a4:b1:a2:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:FB:03:A8:96:D0:F0:75:46:08:48:AB:76:BE:08:97:38:02:9F
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:f6:44:12:1a:c3:de:e9:7f:8f:9b:f3:f5:8d:45:23:f9:
         83:98:3b:f2:33:57:8c:66:59:ec:0d:e6:bb:c9:77:a4:9e:26:
         3f:01:f6:4a:69:bd:b9:3b:e0:50:3b:bb:6b:a8:5f:b9:f2:95:
         da:78:1a:b2:9c:67:a0:fb:3b:48:7e:02:5b:26:d1:de:69:49:
         33:fa:da:aa:27:16:16:8c:c5:c1:56:87:66:ae:cb:34:4b:58:
         a9:a2:8b:89:43:3c:af:93:73:e8:06:84:50:9d:4e:aa:e4:a8:
         dd:ae:ac:ec:a8:88:51:6c:94:ec:b7:fc:5a:0e:ed:79:4e:13:
         af:b7:ce:6d:65:ce:76:ed:e9:2c:20:54:e0:b0:4f:04:fb:40:
         b4:20:fc:be:f2:8c:39:58:e6:ff:8e:eb:60:04:84:a7:3c:c0:
         6a:45:91:ee:80:65:eb:c4:15:aa:04:31:30:c7:ef:f9:2c:9b:
         06:be:7a:0d:08:4a:1c:aa:1e:93:29:ee:ae:8e:c9:51:d7:3c:
         09:d3:bb:13:7b:cb:46:75:3e:0a:62:c1:2d:d7:f2:a3:e6:ed:
         6e:34:98:1d:0f:8e:ab:00:4f:e1:37:d0:fc:4a:6f:13:a3:6f:
         4f:3c:8a:7a:19:81:ef:e8:f3:19:03:71:b5:71:33:ed:51:a9:
         c2:c4:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:06 2026 by rpki-client