This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
File:                     U76BKLnP6HdJhH5kRfquGociydI.mft (raw, json)
Hash identifier:          X/XAAFc9YejMXFW7Z+brNSmkxwA44wCoLlFI89b9CZ8=
Subject key identifier:   DC:DD:CD:D7:CD:66:36:91:09:DE:19:C5:E1:8A:8C:5C:B3:B5:0B:71
Authority key identifier: 53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2
Certificate issuer:       /CN=A91BDC6D/serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
Manifest number:          41
Signing time:             Sun 25 Jan 2026 06:27:53 +0000
Manifest this update:     Sun 25 Jan 2026 06:27:53 +0000
Manifest next update:     Sun 01 Feb 2026 06:27:53 +0000
Files and hashes:         1: U76BKLnP6HdJhH5kRfquGociydI.crl (hash: KMxQG/EXKtajuvOyJvm4LrVZY5H4W5/FUwbG6CbKjpE=)
                          2: C6425B12981D11F093FE8643C4F9AE02.roa (hash: cHtHl0mfRr10cBG++S9xArUxnFAw0CPyJZEh1n1ePUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC6D, serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
        Validity
            Not Before: Jan 25 06:27:53 2026 GMT
            Not After : Feb  1 06:27:53 2026 GMT
        Subject: CN=6975b7e9-636e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:6c:0d:c0:8e:64:f6:a5:13:39:ad:40:91:
                    59:e5:89:cf:96:a8:49:05:29:30:65:d9:e9:20:cd:
                    ac:87:b6:6a:59:9d:c3:ce:5c:ef:9c:f0:8c:24:44:
                    23:e6:b7:12:95:b1:95:d2:34:06:c3:f0:ef:d3:38:
                    e6:25:16:cf:4a:29:e9:2c:f6:4c:da:39:a4:a7:7c:
                    8a:8f:f7:e6:71:9c:a3:ff:45:1f:02:53:31:c5:e2:
                    a5:ff:66:a1:a8:74:ec:5e:ba:30:f6:d8:91:fa:7a:
                    0f:20:a9:56:78:ca:20:cc:84:53:7c:c2:9f:b9:21:
                    c8:72:f9:32:ce:a3:38:76:0b:19:de:15:f8:57:a9:
                    43:3a:4b:5d:5b:c3:3c:77:14:e1:05:de:3b:4e:66:
                    fc:59:d0:ff:3c:95:86:44:0b:a2:f0:0d:57:4d:2c:
                    b1:b2:94:f2:a7:85:2b:62:a6:61:cb:85:a0:38:25:
                    eb:9b:9a:5c:e7:16:8d:df:db:c8:d2:6a:48:70:8f:
                    7b:a5:fa:6a:80:8e:b7:79:4c:2e:47:aa:48:71:27:
                    d9:f1:5f:a8:6b:a3:18:28:d2:02:c0:18:b5:bc:cb:
                    f8:91:0b:bb:4a:88:0c:69:40:f1:33:09:31:db:f5:
                    26:e7:78:8c:2a:31:08:af:6b:4e:53:ba:13:cf:21:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DD:CD:D7:CD:66:36:91:09:DE:19:C5:E1:8A:8C:5C:B3:B5:0B:71
            X509v3 Authority Key Identifier:
                keyid:53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3a:27:b4:95:d5:7b:d7:22:21:42:74:4a:1e:be:84:e1:aa:
         5c:d7:68:51:cd:e2:3f:dd:93:1a:b4:48:74:89:a2:09:db:7e:
         87:51:dc:8e:2f:9c:49:b6:61:ac:be:ff:36:96:32:43:a1:34:
         eb:e6:c8:db:84:83:e8:07:8f:5f:ee:d2:70:64:8a:93:91:ff:
         76:57:44:53:70:32:e6:b4:06:4f:a3:f3:d8:ba:2c:00:22:02:
         7d:04:25:a9:4d:cf:58:62:56:26:ae:40:c4:67:5e:91:8d:f3:
         91:3e:f4:c6:81:9d:e4:59:5b:4c:c1:70:3b:27:d7:9d:cf:1e:
         a0:3c:f0:96:15:a9:cb:ea:e3:07:60:21:71:c2:0f:cd:bd:b9:
         ca:07:1a:59:b8:d9:48:16:51:42:f8:45:46:30:83:33:67:11:
         4e:a8:8c:bd:82:24:bf:6f:0e:6a:1f:94:9d:64:9c:a9:c1:8f:
         db:a3:c2:64:73:80:52:d7:9e:6b:9a:6f:90:ff:19:d3:56:f2:
         9b:8b:03:1a:2a:01:5c:de:04:05:e1:07:33:f0:77:e6:14:50:
         bf:35:5f:dd:67:da:d3:7c:46:85:99:51:3d:c2:c0:27:84:c8:
         cc:bc:65:45:60:0b:bb:34:1b:7b:1b:06:44:37:73:08:f6:d1:
         c3:44:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:18 2026 by rpki-client