This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File:                     De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier:          b4YwW66ocCdxSW2X/FNBgWLJ+ct0LWuro0W21BcSb4E=
Subject key identifier:   DC:C2:C8:24:0E:56:C9:B9:67:56:D3:0B:5B:41:EA:38:26:98:46:33
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer:       /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial:       13B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number:          13A0
Signing time:             Sat 24 Jan 2026 16:42:51 +0000
Manifest this update:     Sat 24 Jan 2026 16:42:51 +0000
Manifest next update:     Sat 31 Jan 2026 16:42:51 +0000
Files and hashes:         1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: NINRuZqsMeuvOtxaqY+4TYXxTLA4rbgB1Fzpu89EYbA=)
                          2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=)
                          3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: R0AZPv6+24ga8tPLfZ8kNV1NXohs9+QG7hIHcrhg+8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5047 (0x13b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
        Validity
            Not Before: Jan 24 16:42:51 2026 GMT
            Not After : Jan 31 16:42:51 2026 GMT
        Subject: CN=6974f68b-608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:93:ff:bf:05:65:0d:be:08:60:fc:f4:72:
                    53:d8:7c:af:5d:eb:14:7d:87:b1:2b:64:75:ed:ef:
                    e9:e4:6a:72:e1:2d:25:75:99:17:fa:a2:e5:57:be:
                    8e:63:de:a2:69:a2:43:3a:9e:29:ec:ed:c3:50:36:
                    84:4b:8a:60:22:25:ca:ca:b8:53:91:b7:61:61:cf:
                    c1:51:19:f0:5a:93:b8:3d:f1:c8:a4:77:97:00:de:
                    43:a9:90:83:cb:7f:13:a1:f8:9b:71:57:23:2e:8b:
                    1a:e2:66:c7:a1:3e:07:6e:92:dc:0a:cc:6a:44:cb:
                    d4:76:87:92:ed:cd:59:fe:38:ae:da:67:45:9f:a4:
                    03:da:86:92:fd:22:8b:46:15:f5:88:2b:8e:2d:24:
                    41:72:c0:e9:ef:a3:ac:9b:7d:12:b8:0a:1b:62:70:
                    5e:cb:a9:97:0f:8d:76:3d:eb:55:d5:6e:0a:3c:bb:
                    6a:56:66:5f:3d:ef:96:bc:75:3e:09:8f:fe:07:7e:
                    a6:1e:5a:5a:c9:cd:34:ce:67:bc:8e:99:c7:ba:77:
                    f1:6a:e2:80:70:8b:14:fe:1f:e8:6b:f9:cc:7c:08:
                    7e:56:5a:9e:7c:b7:fc:ba:e2:58:9b:d1:97:a7:20:
                    33:1a:eb:bf:8e:28:60:d4:40:3f:f7:5b:26:90:e3:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:C8:24:0E:56:C9:B9:67:56:D3:0B:5B:41:EA:38:26:98:46:33
            X509v3 Authority Key Identifier:
                keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:c2:06:05:8e:33:8d:a9:05:24:09:38:15:fa:b8:b4:ba:
         47:ad:c4:49:d7:7c:dd:e4:97:c5:af:3c:dc:d0:97:bd:c5:fa:
         d0:a1:d0:9b:e9:e2:37:12:fe:e8:e1:dd:25:11:6f:14:87:fc:
         a9:b7:b1:e3:c8:2c:e7:d6:5e:2e:b6:7d:45:ce:6c:c1:40:76:
         5c:50:eb:0b:26:28:27:51:ab:5d:a2:db:0b:dc:68:e8:bf:ee:
         ce:79:94:92:52:b1:67:c2:15:dc:34:c3:70:76:f7:3f:a0:b5:
         5a:7d:44:f9:fd:c2:bb:f8:76:d7:11:30:11:1a:c8:e7:4e:d9:
         3a:1f:c2:9a:81:fe:34:41:aa:f0:dd:da:4e:c3:18:41:5b:ba:
         99:28:da:92:d2:ba:2e:63:d6:80:e5:bf:b8:7e:93:a5:09:f2:
         e0:3d:82:4e:9c:c9:5e:e5:fe:36:67:0b:07:46:ce:7f:f4:8f:
         6a:bd:77:f3:2f:09:49:4b:66:e5:d6:65:86:3f:03:9c:d1:e9:
         c8:46:8e:46:de:46:e6:10:3c:14:b9:28:07:5f:cf:a0:45:ca:
         8e:80:d6:22:25:63:f4:6c:c8:7b:d6:55:38:bb:ff:75:be:b7:
         05:0e:09:33:99:47:ef:a3:b9:fd:1f:c7:2b:23:ed:72:a0:9e:
         90:01:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:15 2026 by rpki-client