This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
File:                     -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json)
Hash identifier:          JZoXW2cEF7K2vTiM4cQMHu0YLQCjcP8GmOQlBNqB8HI=
Subject key identifier:   E0:CE:AA:F0:CC:3D:1F:43:5A:B0:6A:D4:16:2C:C4:92:0D:7C:10:B3
Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20
Certificate issuer:       /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
Manifest number:          01A3
Signing time:             Sun 25 Jan 2026 02:39:14 +0000
Manifest this update:     Sun 25 Jan 2026 02:39:13 +0000
Manifest next update:     Sun 01 Feb 2026 02:39:13 +0000
Files and hashes:         1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: Z4KcIuJyP5X3Gv46TlHQy9DMApSmH6RKkpGVsHxFtWM=)
                          2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: E597Ub/8geXywFzvDFSLu6V1fvdFLZTNO5bMkAf850U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl
                          rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820
        Validity
            Not Before: Jan 25 02:39:13 2026 GMT
            Not After : Feb  1 02:39:13 2026 GMT
        Subject: CN=69758251-cd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:00:af:be:33:0f:08:a8:58:ab:c9:51:1f:
                    07:99:04:0c:bf:8b:aa:d6:07:28:28:89:5d:40:05:
                    3d:e6:68:bd:a3:d9:7e:34:38:c3:07:1d:50:16:94:
                    e4:c8:ef:91:a9:36:b4:93:db:d6:e2:ec:bb:8f:00:
                    d7:b1:5b:06:2f:25:be:53:0d:d0:56:86:32:0b:66:
                    e4:71:5d:54:67:3c:9b:a2:77:e0:04:51:1c:7f:a4:
                    34:aa:95:5b:96:51:6b:61:96:0f:e4:5f:fc:a8:9f:
                    07:bc:1d:b4:94:14:93:35:be:28:2c:c6:f6:88:97:
                    ee:68:2f:d6:7c:4f:5d:d5:ca:bb:05:75:b1:e9:77:
                    25:ab:fc:da:a8:a2:c7:36:28:a2:1f:40:30:74:be:
                    9c:52:e8:e7:ca:32:23:20:41:e5:10:f7:bc:d3:c3:
                    9d:bb:59:55:3d:83:e9:3c:64:55:cf:ea:f3:43:1d:
                    e9:99:ca:15:ff:3b:c8:d5:db:88:eb:c5:9c:05:78:
                    f9:ea:00:53:1a:91:13:2f:d8:78:f7:ae:19:65:31:
                    8e:7c:c7:0a:31:61:1e:f8:f6:8a:a6:06:93:19:2f:
                    86:43:c9:f3:e9:04:bd:68:79:9b:2e:b5:e4:eb:08:
                    1c:ec:b5:7d:b7:1f:ef:f5:0c:2e:64:86:c8:45:a5:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:AA:F0:CC:3D:1F:43:5A:B0:6A:D4:16:2C:C4:92:0D:7C:10:B3
            X509v3 Authority Key Identifier:
                keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:c3:7c:ec:50:aa:27:94:a4:ba:5e:19:c8:47:10:3b:a3:
         26:f6:cd:ed:e0:6a:8a:67:d2:56:25:2b:34:37:86:ca:aa:84:
         da:ad:8d:c3:0d:67:a2:e4:c7:72:1d:a4:c3:93:09:ca:74:6b:
         83:8a:dc:e2:8e:c9:38:2e:8a:a5:e1:fd:f9:fa:4d:be:65:ea:
         d9:c9:c3:2b:c1:8b:c3:18:f6:b5:53:6c:aa:fe:c5:d0:28:d2:
         75:18:f9:91:26:6b:56:5e:6f:27:51:4f:98:0e:ad:a3:d6:ae:
         72:2c:5a:e7:6b:dc:d7:2f:cd:24:3d:b7:cc:c3:42:37:e3:be:
         51:4c:df:2a:8f:da:5b:62:88:04:d7:af:84:35:b4:34:2f:ad:
         77:ff:8a:78:50:f8:51:1a:3d:e4:0e:ea:8d:79:4c:cc:20:98:
         2f:75:13:47:a0:91:a1:85:f3:e2:fb:57:a6:60:6b:98:b7:6b:
         a5:fd:1d:7a:01:4e:11:ef:6f:ef:30:af:37:25:f3:b1:dc:eb:
         74:e5:ee:21:bb:37:74:96:b5:f6:cb:9f:27:19:4f:a1:bf:0e:
         f6:6e:fe:3a:7f:07:39:97:1f:dc:44:85:6c:22:db:85:ca:17:
         8e:37:37:45:56:3e:b1:7b:8f:8a:2a:22:83:ae:00:02:90:48:
         cf:e6:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:33 2026 by rpki-client