This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File:                     7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier:          mbLFKVgxgOO/xe4wylsXEhmaU42L3c5awSF9lmuGOS8=
Subject key identifier:   B0:93:30:E0:A1:8C:A8:52:C8:C1:70:2B:97:F2:E5:21:4A:D8:93:A6
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer:       /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number:          024D
Signing time:             Sun 25 Jan 2026 01:07:58 +0000
Manifest this update:     Sun 25 Jan 2026 01:07:57 +0000
Manifest next update:     Sun 01 Feb 2026 01:07:57 +0000
Files and hashes:         1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: 5Xko8wejE2sXi+FiaMdilYAJ9ztIptmpNsl8BUmjg5U=)
                          2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
        Validity
            Not Before: Jan 25 01:07:57 2026 GMT
            Not After : Feb  1 01:07:57 2026 GMT
        Subject: CN=69756cee-174f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:0f:7b:8e:05:1d:eb:fd:6b:28:ee:3e:09:
                    14:5a:bd:bf:aa:8d:f5:c6:8d:20:c4:17:28:4f:25:
                    38:00:c3:a8:95:80:27:1b:ca:ee:18:41:13:29:4b:
                    b3:bf:2d:a5:fa:be:69:eb:f9:2d:2b:7a:93:4b:a9:
                    a9:00:28:44:b7:9c:c6:fb:fa:c5:25:80:61:92:5c:
                    48:57:18:9c:f5:fc:bf:9d:89:c6:44:54:17:7f:67:
                    5f:45:31:f6:ea:91:f0:65:79:36:6c:df:8b:a9:b3:
                    62:86:02:05:8b:aa:3f:bb:9b:25:66:2c:f9:5f:78:
                    ab:ba:42:76:d8:a6:61:b3:f3:a7:48:b4:80:5d:18:
                    db:c2:57:47:6a:f5:9e:bb:36:ea:57:13:cb:22:39:
                    a7:0e:1a:6d:ff:37:67:05:3f:59:62:ad:b7:42:8b:
                    5e:e4:fe:f3:5f:97:0b:f7:40:e0:5c:76:a8:06:9f:
                    22:70:b2:1f:26:4c:06:de:72:d5:3e:52:1e:4f:e9:
                    7a:64:d3:a4:ff:70:e3:46:c1:30:99:3d:52:69:c3:
                    e9:88:f8:e1:bb:d6:20:1f:95:7f:20:07:c3:9f:b5:
                    86:cb:dd:1a:3b:9a:fc:f3:58:d7:10:c4:6f:cd:da:
                    b0:05:c7:05:a0:ec:84:77:d2:5a:9c:bd:9b:9a:2a:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:93:30:E0:A1:8C:A8:52:C8:C1:70:2B:97:F2:E5:21:4A:D8:93:A6
            X509v3 Authority Key Identifier:
                keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:bc:eb:56:ca:a1:ae:bf:e8:93:d4:06:e6:24:fd:bd:a1:5d:
         0d:62:8a:33:2f:65:72:a8:fd:6a:28:29:e4:3d:82:25:1c:35:
         33:58:8c:cc:05:67:06:c6:74:81:f8:2d:14:6b:97:19:b8:df:
         9d:ff:64:54:13:cc:50:23:1d:3c:59:6f:58:97:2f:4c:b9:11:
         5e:ad:7d:40:bf:fb:a6:f8:61:35:07:90:8e:4c:4b:b9:de:52:
         a2:ad:c4:78:b1:c4:05:d2:79:9b:b7:b3:ab:73:e1:d0:61:06:
         d0:c4:29:93:30:91:4d:ed:5b:c5:ae:18:7e:35:f9:f6:e0:54:
         9e:db:7a:91:e8:bd:fe:74:f6:e1:39:2b:c1:36:21:61:20:62:
         bf:1b:7d:db:6a:9d:16:e0:e0:c4:96:68:fb:16:9c:b6:ac:9f:
         12:ba:7b:32:1b:bd:3e:64:9b:e6:77:84:c5:0d:57:51:62:cc:
         f6:cb:ac:80:e2:97:c2:5a:13:6a:42:ad:26:b5:f3:87:d8:b1:
         c0:f3:b3:a4:96:f4:33:d5:ae:d1:3e:1c:41:ab:06:95:3b:ee:
         65:1c:bc:ac:61:4e:b7:41:7f:54:35:90:bf:5e:17:82:ca:24:
         f8:12:12:e5:60:95:a3:fa:b2:8c:e1:6d:eb:1f:8a:21:62:12:
         e1:c8:e4:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG
RkZEMDgxNDAwHhcNMjYwMTI1MDEwNzU3WhcNMjYwMjAxMDEwNzU3WjAYMRYwFAYD
VQQDDA02OTc1NmNlZS0xNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFYPe44FHev9ayjuPgkUWr2/qo31xo0gxBcoTyU4AMOolYAnG8ruGEETKUuz
vy2l+r5p6/ktK3qTS6mpAChEt5zG+/rFJYBhklxIVxic9fy/nYnGRFQXf2dfRTH2
6pHwZXk2bN+LqbNihgIFi6o/u5slZiz5X3irukJ22KZhs/OnSLSAXRjbwldHavWe
uzbqVxPLIjmnDhpt/zdnBT9ZYq23Qote5P7zX5cL90DgXHaoBp8icLIfJkwG3nLV
PlIeT+l6ZNOk/3DjRsEwmT1SacPpiPjhu9YgH5V/IAfDn7WGy90aO5r881jXEMRv
zdqwBccFoOyEd9JanL2bmip8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCTMOCh
jKhSyMFwK5fy5SFK2JOmMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE
NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV
Snp0RjRia1lFN19fX1FnVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMvOtWyqGuv+iT1AbmJP29oV0NYoozL2VyqP1qKCnkPYIlHDUzWIzM
BWcGxnSB+C0Ua5cZuN+d/2RUE8xQIx08WW9Yly9MuRFerX1Av/um+GE1B5COTEu5
3lKircR4scQF0nmbt7Orc+HQYQbQxCmTMJFN7VvFrhh+Nfn24FSe23qR6L3+dPbh
OSvBNiFhIGK/G33bap0W4ODElmj7Fpy2rJ8SunsyG70+ZJvmd4TFDVdRYsz2y6yA
4pfCWhNqQq0mtfOH2LHA87OklvQz1a7RPhxBqwaVO+5lHLysYU63QX9UNZC/XheC
yiT4EhLlYJWj+rKM4W3rH4ohYhLhyOTc
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:59:02 2026 by rpki-client