This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File:                     MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier:          8BF0fQcV53nBGaLt8NrrndWGHPlpqYkBqNojSXhUV00=
Subject key identifier:   22:FA:E2:43:AF:4E:93:FA:19:A9:85:20:E0:C4:E6:9D:C0:F0:1A:C4
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer:       /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial:       14C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number:          14B7
Signing time:             Sat 24 Jan 2026 16:36:30 +0000
Manifest this update:     Sat 24 Jan 2026 16:36:30 +0000
Manifest next update:     Sat 31 Jan 2026 16:36:30 +0000
Files and hashes:         1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: S52gEm2LUvfAFq/5Frk2upuvGr+bsvdJ8VDOxlqJqrY=)
                          2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: +fYcXUUOxqjne/yMdR0BaLunZ8SANdMDHI2Ya9W1pUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5314 (0x14c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
        Validity
            Not Before: Jan 24 16:36:30 2026 GMT
            Not After : Jan 31 16:36:30 2026 GMT
        Subject: CN=6974f50e-80df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:61:03:ea:61:c4:13:c6:20:c3:1d:44:c3:
                    73:0a:8b:2d:4c:e5:db:c2:22:7f:76:7a:bb:e3:47:
                    c4:76:e9:c6:6c:4f:79:52:95:c7:ad:1f:92:7b:6d:
                    83:ee:38:19:ae:b8:aa:9b:62:5b:49:d4:27:31:ba:
                    83:cc:34:f3:c5:48:57:36:0e:c5:b3:5c:10:1c:ab:
                    94:9b:c1:15:f8:1d:43:0b:2e:0a:c3:1e:28:60:7e:
                    a9:cc:4f:b6:c7:b9:7f:a6:65:23:c3:4c:50:e7:23:
                    db:cd:e9:f1:ab:21:84:78:7c:bb:f0:01:54:5c:80:
                    75:da:03:6b:77:0b:ce:f5:e5:d4:eb:04:04:c1:9a:
                    8d:fc:ab:2e:78:78:e1:2b:f6:a2:bb:f8:a2:be:23:
                    ae:a2:8f:4a:95:ce:24:fc:b0:35:b7:92:67:0c:28:
                    b8:56:10:2e:49:96:4c:45:c2:6c:6a:55:dc:4b:ea:
                    62:de:3c:11:c5:8a:b1:1b:f6:6f:23:3e:5c:eb:ff:
                    2a:c7:ce:0b:d4:21:b6:98:d4:b7:e6:b9:2e:cf:2e:
                    e5:6c:87:63:35:48:47:43:fb:43:43:b9:b3:45:6a:
                    b6:a2:a4:47:3b:8b:da:0e:59:85:14:ed:07:c3:48:
                    27:43:3f:23:a9:7f:81:c9:30:df:74:07:d0:b9:45:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:E2:43:AF:4E:93:FA:19:A9:85:20:E0:C4:E6:9D:C0:F0:1A:C4
            X509v3 Authority Key Identifier:
                keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:67:a5:9d:1c:7a:6d:d9:e3:1f:d2:6e:52:c8:43:cc:c9:72:
         d3:e8:00:9a:2f:b8:84:5b:a7:2d:42:70:fb:52:3f:3f:98:54:
         a3:57:41:ac:9a:70:f8:64:9f:af:5f:f3:b4:9b:36:87:c8:43:
         7e:bd:6a:8f:b9:63:97:50:1c:43:b6:1c:62:dc:68:67:99:72:
         72:7f:1e:8d:b5:68:16:b2:42:5d:4e:e8:d5:5a:79:a8:0a:e7:
         c3:96:7f:e6:56:52:6e:1b:91:49:0d:f3:2d:9a:1b:c7:d3:33:
         c5:3e:e9:92:9f:e4:b7:89:b8:06:2a:19:1b:01:2b:87:0b:49:
         19:30:56:3d:60:c5:29:cc:d5:c6:e3:66:81:8e:6a:8e:3f:5a:
         27:7c:0c:37:30:7b:57:f0:5b:3d:4e:25:57:30:65:c3:67:f1:
         69:42:07:07:2a:ec:93:51:3d:c5:d1:8b:21:8c:a5:a7:e1:0b:
         cf:b8:d4:ae:d1:ca:ef:d5:db:2e:0e:b1:5c:7f:54:fa:f0:2f:
         77:8a:3f:28:bb:bb:f7:06:59:45:1e:95:24:c6:42:f7:2d:cd:
         fc:0b:7a:98:28:5a:c8:ee:77:19:8f:a2:fc:99:3d:46:f7:1b:
         2d:bd:a5:61:65:26:06:e6:41:41:ad:ba:4f:a0:e7:d0:74:00:
         65:19:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:14 2026 by rpki-client