This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
File:                     eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft (raw, json)
Hash identifier:          eqKLyE2dLPR6bHKDDJRRQj/FeQvRCeFjLsYjORjil2I=
Subject key identifier:   69:B2:9C:B1:D9:E4:70:AB:38:20:74:F9:1F:6D:C9:96:BF:7F:76:BE
Authority key identifier: 78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38
Certificate issuer:       /CN=A91BCB09/serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
Manifest number:          04
Signing time:             Fri 23 Jan 2026 07:11:18 +0000
Manifest this update:     Fri 23 Jan 2026 07:11:17 +0000
Manifest next update:     Fri 30 Jan 2026 07:11:17 +0000
Files and hashes:         1: eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl (hash: KPwgwAbF7cXSLVYOscUOiPxzY9iZgWEAtFj05SjhWuU=)
                          2: 5BC28CFEF50011F09A5618CE516F56BC.roa (hash: VydEkHy+Iu6wxWCcn4Zqt0y1JcVKmeq1SfpwbmoWgj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB09, serialNumber=78BE8259B5088F31B4010B83DE76BA54CE97AE38
        Validity
            Not Before: Jan 23 07:11:17 2026 GMT
            Not After : Jan 30 07:11:17 2026 GMT
        Subject: CN=69731f15-98ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:68:47:c6:07:df:95:3c:f0:65:c2:53:92:
                    6a:d6:60:a9:09:76:a2:32:fc:69:3f:42:a3:92:b4:
                    9e:f2:0c:bd:8a:0f:14:d3:60:1d:ee:3a:1f:10:a1:
                    d3:cb:f0:5d:da:96:b4:6b:86:36:26:52:49:b5:02:
                    59:40:f6:da:4d:84:ee:9b:bc:d3:bf:9b:4a:18:ce:
                    6b:c1:cd:09:d5:6e:2b:82:3f:60:cd:a5:fa:ca:e6:
                    c3:45:d6:bf:2c:ba:04:39:1c:10:36:84:d3:a9:45:
                    75:98:2a:fb:b0:0e:0f:f8:ed:e6:28:56:b5:6d:dc:
                    89:f2:72:69:02:8e:07:3c:07:24:14:61:08:c8:c8:
                    97:fe:00:63:f1:14:2c:87:5a:f0:0f:ac:bc:86:50:
                    d6:e7:b8:a8:36:de:0f:4c:f9:92:cf:e6:6d:2e:30:
                    6d:ff:ac:fb:b4:a9:7f:e8:a3:6d:a2:ee:ff:cc:87:
                    06:1a:ff:80:86:b6:85:c1:d8:3a:8e:c7:78:3d:d3:
                    1d:83:9c:4c:17:df:0e:27:e5:04:38:a7:00:cb:f1:
                    9f:2e:3a:d2:3b:fd:ea:9f:69:06:12:ef:53:3e:88:
                    48:c0:ba:a6:60:40:ae:89:05:12:61:ab:c5:34:c0:
                    96:e8:9b:24:54:15:8c:e5:23:14:95:a7:21:39:4b:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B2:9C:B1:D9:E4:70:AB:38:20:74:F9:1F:6D:C9:96:BF:7F:76:BE
            X509v3 Authority Key Identifier:
                keyid:78:BE:82:59:B5:08:8F:31:B4:01:0B:83:DE:76:BA:54:CE:97:AE:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL6CWbUIjzG0AQuD3na6VM6Xrjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/D890B51EF4FE11F0B489EF1F516F56BC/eL6CWbUIjzG0AQuD3na6VM6Xrjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:59:eb:74:25:3c:08:e6:4a:96:85:83:d1:f5:f3:ce:51:
         54:26:e5:5e:4e:13:5c:2d:b2:ac:a3:b4:8d:c0:58:d0:8d:a8:
         bb:6b:70:16:23:66:d7:87:b7:46:a6:51:98:c1:a5:30:f3:01:
         76:e5:7c:64:b4:30:19:d7:c8:88:e7:2d:93:4e:ac:69:b5:bc:
         17:2d:24:43:43:dc:41:90:f6:ea:ea:88:c7:9e:0d:aa:52:ba:
         0c:de:a7:5b:c1:0a:5a:05:24:bb:f5:14:7a:77:20:d8:31:0f:
         08:f9:58:e2:7a:07:cf:7f:23:7e:4e:53:b1:a9:fb:74:1f:39:
         2a:b0:07:6f:1d:bd:c3:48:eb:05:10:95:77:e5:c1:3d:16:bc:
         68:af:33:76:26:38:47:17:c0:3b:4e:96:a6:44:e4:e7:9e:16:
         eb:5b:c0:d6:b1:97:97:df:0a:01:b7:b7:7c:2a:e7:57:0d:b2:
         19:aa:9f:a6:88:80:56:97:9b:4b:5d:1c:b5:6b:39:69:12:49:
         13:b2:a3:ce:8f:6f:e5:0a:98:78:86:55:65:e0:7d:65:0a:a5:
         07:c1:df:8b:b5:0d:6e:d0:0c:bc:3e:35:34:97:a2:1f:c3:01:
         91:cc:0b:a5:aa:dc:c6:af:79:7c:59:25:19:f1:61:40:c5:e2:
         0d:2f:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:50:43 2026 by rpki-client