This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          6CdG43xgOrp6LtjIjWHE7t7cfFaUk5Biw8f+J5qr2W8=
Subject key identifier:   F8:E2:36:49:33:F1:2C:0F:2C:0B:2C:64:48:B7:0F:B6:30:F2:70:69
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       0400
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          03FD
Signing time:             Sat 24 Jan 2026 23:40:45 +0000
Manifest this update:     Sat 24 Jan 2026 23:40:45 +0000
Manifest next update:     Sat 31 Jan 2026 23:40:45 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: C37kr+Do1XTSiKOHIZN6ZydN5LdVU7cXUNuHQ9RQ6Jw=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Jan 24 23:40:45 2026 GMT
            Not After : Jan 31 23:40:45 2026 GMT
        Subject: CN=6975587d-2703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:36:3f:59:00:28:3d:7b:d1:1a:10:22:ca:
                    0a:a4:7a:9f:92:08:a0:22:fa:e8:d7:61:d9:6c:ec:
                    b6:0e:82:34:2f:21:26:62:8d:cc:90:f9:18:3f:94:
                    ee:1e:b6:e4:af:53:63:68:16:34:94:c1:22:8c:9d:
                    6e:56:37:be:8d:b7:a2:ec:00:9b:c8:c0:2c:6f:ae:
                    4e:37:23:ff:b6:67:fb:a1:20:51:60:2c:df:90:71:
                    e0:d9:3b:4c:83:be:d2:57:ce:17:d5:4d:cd:1a:e4:
                    f6:51:4a:6c:34:b8:f2:94:9f:34:b3:13:b5:37:dd:
                    42:21:17:f3:be:9d:39:58:e9:96:8a:e5:b8:80:ce:
                    af:89:c9:70:c0:6d:26:2d:8b:0c:a1:fc:bf:27:a7:
                    2e:04:da:86:72:13:4f:b2:25:84:fd:84:18:8f:ef:
                    56:6c:a6:ae:8f:36:2d:ee:eb:cf:2a:96:81:21:c7:
                    15:af:8f:0c:1b:52:4e:54:69:52:d6:0a:80:c2:45:
                    66:9b:02:e0:3e:11:22:7a:4b:ef:7b:cc:00:b8:6b:
                    c9:e8:b0:dc:c6:23:fa:df:f8:31:65:d7:7b:64:c5:
                    ef:36:c7:12:d3:93:ee:7b:93:38:5a:32:08:a2:fa:
                    88:eb:ff:8b:65:0c:df:f2:65:52:0a:d2:6e:ab:04:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:36:49:33:F1:2C:0F:2C:0B:2C:64:48:B7:0F:B6:30:F2:70:69
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:38:f0:11:38:1c:00:6e:0d:8a:c5:4e:78:12:d3:ef:07:
         a4:56:68:4f:e1:ee:78:3a:09:57:d0:23:c9:66:d5:fc:11:07:
         ec:e0:58:77:87:c3:3f:36:3d:8f:8b:a6:e1:a5:b2:7d:e4:4a:
         63:0a:05:ef:88:ee:6c:a1:a2:dc:3c:27:c6:ec:98:9d:8b:7a:
         ef:8b:8c:df:61:97:55:23:d3:c6:f7:0b:56:39:6c:02:32:41:
         7f:60:53:db:5b:9b:66:6b:16:77:1b:57:7d:c5:80:b4:f2:10:
         fb:80:e4:74:a9:3b:7c:37:ff:c1:fe:4f:83:3b:67:89:07:19:
         59:2d:e2:6e:7a:24:ba:a7:8a:3d:57:7e:03:75:7d:42:60:cd:
         46:74:79:79:86:d1:42:7e:6f:df:70:2d:2f:63:a8:86:36:b8:
         55:4a:7a:6d:aa:89:45:20:cc:12:ee:0c:9e:c4:3a:8b:2a:35:
         33:02:05:31:b3:12:f7:eb:17:5a:5b:c5:89:87:52:60:07:1f:
         01:35:e7:f2:55:96:a1:d6:22:4e:0e:0f:ff:a8:2c:32:32:2e:
         3e:4c:d8:8a:9e:96:32:a3:35:1d:28:b9:19:d5:ca:2d:c8:4f:
         5e:bc:dc:00:59:19:2c:91:31:4f:eb:a0:5c:1e:6b:de:22:1a:
         04:8f:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:07:23 2026 by rpki-client