This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File:                     reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier:          x99qM3T4S7YvZWnbx2EDuiyCvuCv1P8LCPHuImJ07jQ=
Subject key identifier:   C8:ED:32:FD:CD:AB:E5:9C:85:6D:89:C9:81:46:FE:E7:7B:4F:43:4E
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       1327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number:          1315
Signing time:             Sat 24 Jan 2026 16:45:08 +0000
Manifest this update:     Sat 24 Jan 2026 16:45:07 +0000
Manifest next update:     Sat 31 Jan 2026 16:45:07 +0000
Files and hashes:         1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: 4ZtNb5oxxHxHkF2d8mVcA8PTdiGlj7F0QRxeuxwbXN4=)
                          2: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: 19aOOHsZIBgvBeUs9wb25z5uEUWs4WLEIR4d7F8bWpc=)
                          3: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: u9nxVTI/r7lzehBnkG/r0mQCumereCzRN9vx0cIP9pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4903 (0x1327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Jan 24 16:45:07 2026 GMT
            Not After : Jan 31 16:45:07 2026 GMT
        Subject: CN=6974f714-ecf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:3f:ba:62:26:99:09:e1:92:8b:f6:7f:f6:
                    a8:41:5b:b5:07:b3:90:e9:13:6b:46:5d:2e:79:bd:
                    49:a9:eb:be:5b:88:13:3d:3d:9c:6d:72:a7:f5:25:
                    ee:95:bb:bf:9c:bb:70:0b:21:cd:36:82:d6:44:1b:
                    25:71:dd:eb:09:06:d9:55:23:05:f6:88:c1:cd:79:
                    be:a0:a9:8e:4c:8b:b1:0c:9c:92:73:2a:80:71:49:
                    2c:53:1f:62:60:3e:75:ac:d7:19:63:51:2d:0d:40:
                    d2:57:d8:bf:83:42:75:51:33:fd:e6:ae:f3:5b:8d:
                    e3:68:e0:9c:03:7e:53:da:24:a8:83:33:0c:8e:4f:
                    17:aa:47:7e:0c:63:9b:d4:98:0d:2f:cf:53:75:6c:
                    e1:68:35:11:31:d8:ef:a5:68:10:0b:6f:72:35:8a:
                    f0:f1:6f:c4:7b:f5:98:92:05:fa:7f:bc:d3:4f:f4:
                    96:bc:09:27:0f:0f:c4:ae:da:1e:14:69:25:a0:84:
                    c3:4f:b2:45:61:d0:f8:9b:c1:bc:94:3c:69:70:63:
                    62:09:ab:99:36:92:fd:c6:f3:ab:05:43:1e:12:76:
                    c6:29:f4:1a:64:06:aa:53:8a:54:a1:3c:31:65:ce:
                    ff:b2:67:78:9e:99:3d:b3:81:c0:96:c4:64:3d:25:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:ED:32:FD:CD:AB:E5:9C:85:6D:89:C9:81:46:FE:E7:7B:4F:43:4E
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:e0:7b:48:a9:fc:69:37:ed:8d:5c:c8:68:3b:ff:9f:b7:
         7a:41:ec:5e:b7:8c:cd:01:93:b7:7e:94:37:4f:3e:cd:07:a1:
         6e:5e:eb:e8:17:1b:dd:d4:b3:27:f5:8b:70:d1:bc:75:8b:22:
         c3:cf:4d:74:06:90:ea:2c:a0:e1:8e:21:2b:54:3a:a6:88:e0:
         8b:16:5d:14:06:be:d4:c4:bc:0a:eb:6a:ab:09:9b:01:5d:e9:
         ed:10:56:b7:2b:ce:bb:6c:89:c6:5e:92:44:ad:c1:a9:67:4b:
         07:33:b3:18:ae:3f:82:e7:ed:8b:81:90:a2:5b:39:6f:f4:da:
         91:a2:ed:1e:9a:3c:a8:aa:a9:98:0f:9f:d9:27:08:10:51:87:
         ba:eb:4f:11:55:53:8d:97:f4:38:c6:1a:43:68:d8:9d:a3:6e:
         e7:41:2e:c1:5b:31:a5:5b:e2:d3:67:78:e7:aa:24:c4:1b:13:
         b4:59:d0:a9:8b:b7:e3:47:61:96:32:66:f3:7c:f8:b9:d6:43:
         ee:a4:e4:f1:79:09:a5:bf:c2:0c:d7:2c:60:ef:6a:11:72:c8:
         21:de:31:ae:ec:a5:1e:65:75:63:67:90:02:5e:1c:27:20:b4:
         d6:15:dc:31:b5:cc:e8:72:01:6c:41:f0:de:f8:2f:22:9b:d2:
         ec:59:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:51 2026 by rpki-client