This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File:                     MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier:          VRUPGIIF2ITKGfRzO+VPANl5MxlO+E3ynNGsYO9Sh4c=
Subject key identifier:   8B:05:46:4B:79:4F:87:70:CF:43:81:26:8C:45:03:35:36:2B:AC:D5
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number:          01D8
Signing time:             Fri 23 Jan 2026 02:06:58 +0000
Manifest this update:     Fri 23 Jan 2026 02:06:57 +0000
Manifest next update:     Fri 30 Jan 2026 02:06:57 +0000
Files and hashes:         1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: +PpTpcOgoqVp09tmAJwdoPNYD08jDdzxcXrDCoZA7Gg=)
                          2: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=)
                          3: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: AVbE1i7Oy7wljsn75aLM04CYS65KFNSXwAhksX6zM28=)
                          4: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=)
                          5: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=)
                          6: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=)
                          7: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=)
                          8: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=)
                          9: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=)
                          10: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=)
                          11: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=)
                          12: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: XA94zE/GSTC30ijakEZif+bTFdWzgCRzrcitaE/Y5Hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jan 23 02:06:57 2026 GMT
            Not After : Jan 30 02:06:57 2026 GMT
        Subject: CN=6972d7c2-30e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:42:41:c7:d5:ff:04:73:0e:c3:1b:8c:c2:
                    e9:3a:6d:d0:4e:c4:31:77:a6:24:37:2d:7a:41:fb:
                    d9:b4:00:86:04:1e:08:36:26:58:ce:63:20:63:8a:
                    8c:c2:56:18:ec:db:b1:7b:b5:a6:cc:61:c7:37:a3:
                    65:d0:9e:78:bc:88:2d:d2:f6:c1:ea:cd:97:c8:a3:
                    f2:e2:32:bb:12:6f:b7:95:37:be:96:51:f8:f0:97:
                    dc:2d:e2:c2:bd:8c:d0:04:8c:7c:7b:c5:85:63:13:
                    fa:cf:88:ef:07:12:76:90:96:d6:2e:a7:a2:b7:32:
                    c3:f0:a6:ae:02:00:5a:25:9a:9a:f3:5b:8a:e1:fd:
                    f3:0b:de:8a:14:da:49:10:6b:9b:02:47:b0:4e:c2:
                    5a:74:35:67:6f:60:07:58:01:58:f5:00:13:d0:e4:
                    4d:eb:fb:08:82:23:5f:ae:20:05:5f:f3:1a:b2:95:
                    c8:95:ff:a5:0a:9b:ed:97:77:6b:2c:5b:65:8f:72:
                    b7:52:1c:9d:06:1d:0f:8d:48:5a:34:2e:2e:b9:22:
                    3d:18:86:4e:1a:0e:ab:82:f7:71:50:7a:69:99:80:
                    0b:05:6a:7b:e2:53:ec:91:48:5a:e6:83:f4:bb:5d:
                    13:87:0a:79:63:d5:ab:53:11:a8:19:fd:f6:6f:6b:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:05:46:4B:79:4F:87:70:CF:43:81:26:8C:45:03:35:36:2B:AC:D5
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fb:6a:51:d3:20:1f:47:0f:5a:16:07:0d:16:b3:bd:dd:9f:
         12:e5:13:21:db:5a:11:bc:7d:db:c1:37:9c:eb:c0:49:98:47:
         ac:e6:75:8b:ed:ea:7c:3d:30:3d:5b:8e:65:a3:8a:6d:18:59:
         82:89:4c:dc:25:e7:5a:c3:9a:95:e5:49:90:53:d1:dc:03:90:
         53:34:c8:6b:24:12:5f:38:b4:99:03:64:27:9b:82:6a:cb:55:
         05:3c:e3:eb:5f:0e:df:2d:8f:cf:a8:2f:9a:28:27:d8:ab:3f:
         9f:7f:2b:7e:35:3a:28:d8:f8:2a:93:2f:a1:8e:17:03:67:b7:
         52:f6:87:31:46:1e:24:d6:e5:f1:89:b8:fb:fe:ff:e5:41:fe:
         85:41:41:63:3f:e3:89:61:64:fd:42:a5:22:6e:3d:7d:e5:f9:
         8a:ec:a4:a4:14:9c:85:ef:a0:52:65:5e:0b:34:76:f8:8a:60:
         f6:ab:45:e7:c7:a9:dc:9e:df:aa:b5:fd:a8:07:c8:07:bb:52:
         15:f1:7a:ce:a1:fe:5a:fc:ff:88:da:99:1c:8b:be:42:0d:53:
         44:a9:be:42:86:7f:00:1f:34:ed:c1:73:f5:8f:0b:b8:fc:f9:
         f8:ea:89:60:fc:18:d0:81:83:4f:c5:4b:88:34:ff:5d:bb:5a:
         eb:71:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:08 2026 by rpki-client