This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File:                     7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier:          VxyxznD57SDiHc1GnzrSERoOWiA5JFEdtoL0Gyh2U6s=
Subject key identifier:   4D:42:F8:DA:99:05:91:87:CC:A8:EF:5B:6E:5F:8F:C6:E8:49:AE:F7
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer:       /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number:          51
Signing time:             Fri 23 Jan 2026 06:16:30 +0000
Manifest this update:     Fri 23 Jan 2026 06:16:29 +0000
Manifest next update:     Fri 30 Jan 2026 06:16:29 +0000
Files and hashes:         1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: 6jXehFmQPdpmxa3R6va2lfzQkT4zAc1mjQ4Xgm5tNbc=)
                          2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
        Validity
            Not Before: Jan 23 06:16:29 2026 GMT
            Not After : Jan 30 06:16:29 2026 GMT
        Subject: CN=6973123d-ed9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:11:72:62:46:f9:92:44:30:a2:f5:91:89:
                    e2:d5:9f:7c:56:5b:6c:28:8d:97:81:f7:42:d9:80:
                    cb:6e:80:6c:ff:8c:27:a9:a0:97:e0:e3:ba:0f:79:
                    ca:a4:88:70:c9:c9:bf:53:79:62:b6:5e:ea:92:29:
                    e2:7b:30:5a:cb:49:b8:ee:02:63:9a:d2:49:9d:9a:
                    43:2c:bc:ec:56:9a:da:4d:af:80:0a:d1:fa:bb:19:
                    46:64:fc:0d:d6:f0:2b:0a:ee:ab:b9:8f:08:f8:87:
                    e5:08:01:f6:53:da:26:d5:00:56:6d:0d:99:79:2e:
                    56:43:65:a8:4b:43:ac:3b:57:2c:4f:4b:ea:7a:79:
                    4c:74:ed:96:d3:14:3a:3c:8e:cc:6b:68:42:4b:99:
                    b2:46:8a:04:68:6f:0f:78:b6:03:10:ed:bd:a9:e1:
                    b7:2c:57:b0:07:28:e5:24:7f:2b:a0:94:22:a8:7b:
                    6d:ea:37:c9:c0:9f:13:34:db:5d:90:2e:ab:a4:96:
                    b7:ea:af:d0:16:61:e1:98:8b:c6:e4:fa:63:84:f6:
                    6b:b3:a3:f8:75:93:0d:4c:41:3c:ff:15:02:d5:1e:
                    17:db:7d:8a:46:0c:5d:cf:f9:c6:3c:8f:a6:b9:08:
                    c1:8b:c4:0a:62:dc:2d:af:49:72:8b:12:8b:79:d7:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:42:F8:DA:99:05:91:87:CC:A8:EF:5B:6E:5F:8F:C6:E8:49:AE:F7
            X509v3 Authority Key Identifier:
                keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:04:f0:39:4b:cc:66:c9:56:02:0a:d4:f6:13:af:29:a9:08:
         db:43:9b:b3:7c:ad:6b:3f:79:67:b2:e3:17:8a:1d:1b:4a:1f:
         4e:5c:72:84:64:c1:93:87:59:e2:e8:22:02:12:af:33:35:13:
         56:39:fd:a7:5f:fc:bd:eb:50:05:a2:db:b0:f2:0c:33:d8:28:
         65:cd:9a:60:05:66:59:a4:6a:35:34:a3:17:eb:75:aa:f2:c8:
         6b:1b:f3:2d:11:05:83:ef:36:b3:88:3d:0f:66:a5:aa:d1:fc:
         44:37:c1:8c:e1:64:17:8a:b3:eb:3b:0c:71:11:ba:0c:34:0e:
         26:60:52:32:19:dd:c4:08:f4:a3:4b:e7:1b:b0:0e:c4:de:43:
         77:b3:bb:bd:b1:69:70:3b:8c:d5:82:5d:e5:02:42:12:4a:e4:
         d3:32:86:8c:0e:df:94:a9:16:fc:3f:b7:c2:76:e8:22:2f:70:
         9c:52:c9:0c:ef:9a:03:08:14:f2:7c:ec:18:8e:42:e4:40:90:
         67:4e:85:9a:40:81:36:36:a8:09:a4:4b:d8:59:99:76:80:1a:
         13:1b:5b:e3:85:14:18:8a:d5:11:32:24:b5:7e:7a:60:51:f7:
         57:bb:8f:d6:77:44:2d:4d:b0:cd:28:3d:12:aa:c8:df:29:25:
         f2:8d:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:23 2026 by rpki-client