This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          zbFvaA2wktIRujCRHo/eGb6b1K+s3UnZ9fEwQTidCsI=
Subject key identifier:   2A:15:7C:8D:CE:76:75:AB:01:06:1D:55:17:46:18:68:60:4A:5A:25
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          02
Signing time:             Sun 25 Jan 2026 00:00:09 +0000
Manifest this update:     Sun 25 Jan 2026 00:00:09 +0000
Manifest next update:     Sun 01 Feb 2026 00:00:09 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: acEgqUR/VCBAxYb5L6Tro2FtSf7SZMlkaA4Um33PS9o=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: ZTGtA06fuh1aoJm/LRS3HKlcwqDiIeLcJAf5XnVgngY=)
                          3: CD58C016F98011F0A50135134F6F56BC.roa (hash: WgbBegcXtuLajd68s6jhkFjYtGrfcRJvzcXwpj9KLWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Jan 25 00:00:09 2026 GMT
            Not After : Feb  1 00:00:09 2026 GMT
        Subject: CN=69755d09-65eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:00:d2:10:60:88:c0:a5:60:99:4b:9c:e1:
                    99:bf:f8:84:58:c6:73:6c:09:7d:ae:bb:88:af:9c:
                    d9:f7:49:3b:6d:f1:14:68:87:a1:7a:44:fd:8f:cd:
                    6b:f0:d8:8c:92:6f:f1:73:a4:e4:89:91:50:54:82:
                    6d:56:4d:c9:29:d7:5d:9b:da:ce:08:3e:6a:9d:cc:
                    c0:64:ff:15:63:d6:03:b4:d9:04:28:90:07:c8:6d:
                    eb:c3:05:40:9e:63:3d:48:a7:d0:8d:23:5b:9e:e4:
                    f3:e5:3f:fc:09:51:06:c0:9c:47:d3:dc:23:a5:1e:
                    e2:80:d9:5f:9e:48:d6:69:09:cb:9d:bb:40:a6:03:
                    10:4e:da:01:0c:fc:13:cc:d6:ee:3d:99:60:8d:f1:
                    df:63:e8:71:21:07:64:61:56:1e:22:f2:b1:3a:79:
                    5c:83:2f:58:72:34:0e:6e:be:14:e4:e6:2a:bc:a5:
                    c4:aa:04:36:9b:0c:e0:d2:32:c2:77:56:79:54:34:
                    a5:e2:59:bb:f8:eb:db:f8:18:b7:b0:fa:f5:72:3c:
                    cc:be:5f:7f:90:b6:cf:11:94:fe:51:af:18:b0:8c:
                    ac:c5:ce:c1:0a:59:0d:19:bf:92:50:f3:43:f7:6c:
                    1a:c2:d9:6d:2d:fc:1a:0b:4a:c4:82:b1:24:d3:c5:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:15:7C:8D:CE:76:75:AB:01:06:1D:55:17:46:18:68:60:4A:5A:25
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:ba:65:b4:c5:5f:bd:82:2e:23:19:88:a8:33:f7:a7:ca:
         04:b0:a7:3a:78:b2:70:5c:41:22:49:ef:60:69:cc:d2:d1:66:
         ed:6a:e6:ce:59:6c:bd:dd:3d:25:8a:de:5d:e9:c2:06:e6:19:
         10:5a:8e:1b:46:f2:c9:47:fc:8b:b3:dd:98:08:19:65:9d:f7:
         1c:fb:88:5d:81:ee:31:23:84:1e:6f:1d:e0:0f:41:39:00:1b:
         92:07:3d:51:da:57:d5:60:c7:e6:df:84:9d:aa:a9:5d:78:55:
         87:54:35:4b:d3:0e:2a:9e:5a:a8:e0:eb:bb:32:58:2e:a4:08:
         ec:eb:67:4a:c5:08:03:b1:29:7d:dd:a5:cb:bc:47:b5:56:c2:
         fa:14:a1:b9:9c:cf:cd:98:f1:99:fa:33:54:78:7e:8f:92:d7:
         19:0b:97:c5:4f:5b:e6:64:8d:a8:c3:53:fd:f4:e7:6f:da:39:
         8b:d6:81:f0:cb:0c:ae:a9:ee:a4:d1:b1:ff:36:24:e5:78:f1:
         b8:1e:83:48:a6:b0:31:9b:e9:4e:15:4b:80:c3:b0:53:f6:f6:
         e7:2a:0c:42:7f:c9:39:ba:a4:4e:01:e0:fa:dd:fc:9e:31:53:
         30:72:47:b4:1c:c2:a9:ac:96:ee:b5:c9:9d:99:df:a0:40:60:
         2d:b9:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:10 2026 by rpki-client