This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File:                     cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier:          PdMUzrfXxBhsZlN9YS+Atl69GOdj/Ej9MMMR4lPERGg=
Subject key identifier:   B7:6E:FD:E2:1B:48:7D:F9:3D:B8:2A:CC:98:28:9B:35:B9:EF:C6:57
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer:       /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number:          018C
Signing time:             Sun 25 Jan 2026 02:58:12 +0000
Manifest this update:     Sun 25 Jan 2026 02:58:11 +0000
Manifest next update:     Sun 01 Feb 2026 02:58:11 +0000
Files and hashes:         1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: lR/3/qBjKtRLU9JImyb5zAdTsd3dXKrFsuukT2PppFg=)
                          2: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: 6V1ULB2afDlEq59NkQuqJB6JSmFq0Z+I0yfXV4LcD7w=)
                          3: 7251CC7C546211EF85988412C4F9AE02.roa (hash: KVS4ATYh4TS7yChddKe7JYCz2e2be+NQL5wWOUa+G3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
                          rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
        Validity
            Not Before: Jan 25 02:58:11 2026 GMT
            Not After : Feb  1 02:58:11 2026 GMT
        Subject: CN=697586c4-6281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:d0:9b:da:ab:42:a2:96:e8:d3:cf:6c:1e:
                    66:34:73:2b:39:01:2e:27:a5:c1:00:f7:4b:16:9e:
                    33:a5:c3:c8:25:62:90:ba:78:42:f9:e5:79:76:7c:
                    30:0a:64:e8:0b:b5:b2:eb:aa:39:df:be:fc:e2:73:
                    7c:cd:be:e1:91:25:26:1c:00:85:1d:ee:ce:60:16:
                    83:eb:82:9a:7e:2f:10:b3:6a:b0:fd:dd:85:64:8f:
                    d0:48:02:35:38:50:f2:f2:0b:89:61:0a:ec:8f:0a:
                    fb:3a:0c:0e:f1:d6:d9:5e:61:2e:c0:24:88:c9:6d:
                    a9:b1:d4:70:92:04:28:5b:e6:0d:b0:41:d2:17:bb:
                    5c:31:c5:b1:44:00:ce:00:20:2d:84:c4:86:8e:a3:
                    af:c5:27:e4:15:3e:8e:94:12:44:44:34:b6:41:99:
                    90:89:f1:5a:4e:10:6e:98:6c:0c:b3:b1:35:ae:45:
                    18:93:51:55:d2:c8:0b:7e:75:80:71:1a:ad:08:c5:
                    23:75:0e:8c:04:d2:57:ca:04:9e:c8:86:78:7d:ee:
                    ad:59:c3:bc:b3:b6:09:d4:78:ad:39:df:05:8f:00:
                    13:44:43:7e:bf:78:95:e9:e1:90:0e:11:ad:10:e2:
                    c4:0f:d5:c3:39:37:59:93:37:28:fd:6f:2f:07:f9:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:FD:E2:1B:48:7D:F9:3D:B8:2A:CC:98:28:9B:35:B9:EF:C6:57
            X509v3 Authority Key Identifier:
                keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:31:d7:2e:3c:03:fb:e2:47:bc:43:80:0c:33:7b:5c:b1:73:
         38:eb:a6:6b:8f:4d:1f:75:89:b4:02:ea:78:40:0f:31:26:fc:
         6b:46:88:8a:0c:a5:41:fa:5d:bb:8d:21:b5:1d:9f:ed:7b:0d:
         27:a0:fa:55:37:ed:39:5a:8c:dc:04:78:a2:ad:36:06:2a:8a:
         dd:8c:e8:94:79:15:62:1a:9e:bd:7f:fb:60:63:0f:cf:40:32:
         68:f8:c8:2c:43:05:2a:06:22:bc:8f:01:59:82:ab:db:07:2f:
         7f:34:0f:6a:d8:05:d8:95:02:7e:ec:d3:52:3a:f4:f5:61:1a:
         8b:fd:f7:db:f9:4f:39:20:2e:a2:83:46:d2:8a:ed:77:9a:d0:
         51:68:56:a5:e1:f1:5e:99:bd:4c:ca:c2:b5:38:23:95:21:bf:
         85:41:97:e3:47:63:b4:bf:a5:dd:a3:c7:79:c9:76:2b:0f:83:
         ed:b2:b9:9a:63:0b:ba:76:11:75:92:d8:b6:64:0b:6d:dc:48:
         ae:5a:b7:14:71:b2:37:8b:6c:c9:b4:c6:c5:d4:33:fb:94:ae:
         39:cb:8d:f2:9f:fa:df:15:9d:11:58:64:c3:a9:1c:e6:95:8b:
         d6:25:d0:3a:69:04:e0:30:e1:d5:6f:01:4f:e5:31:7e:dc:2e:
         e5:7c:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:42:41 2026 by rpki-client