This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
File:                     exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json)
Hash identifier:          IwLKcUts/n1sxcRfUMfIC2JaneAlP7SJ0t/1ojTwLC0=
Subject key identifier:   93:B1:99:2A:18:40:4B:18:DF:1A:80:C9:5C:C4:A6:99:08:9B:D9:1F
Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF
Certificate issuer:       /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF
Certificate serial:       0FED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
Manifest number:          0FE6
Signing time:             Sat 24 Jan 2026 17:10:17 +0000
Manifest this update:     Sat 24 Jan 2026 17:10:16 +0000
Manifest next update:     Sat 31 Jan 2026 17:10:16 +0000
Files and hashes:         1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: 1P207ek/JfXRB+EevKYQxLnT8s0W1//SHlSYyeHS5pE=)
                          2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl
                          rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4077 (0xfed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF
        Validity
            Not Before: Jan 24 17:10:16 2026 GMT
            Not After : Jan 31 17:10:16 2026 GMT
        Subject: CN=6974fcf9-a8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:3b:db:85:23:f6:28:05:62:48:a5:3e:7d:
                    1f:9a:35:5a:48:45:d6:e6:2a:bf:89:87:8f:56:3a:
                    ca:68:39:45:ee:48:ec:f2:10:dc:f6:1a:c6:56:ef:
                    d2:6a:01:cb:f3:98:4c:c6:eb:80:47:bb:96:90:70:
                    69:1e:15:cb:53:db:51:63:61:ff:b4:27:52:ab:27:
                    84:4d:38:39:ed:29:5c:cf:8d:99:c7:16:8f:22:aa:
                    62:70:5b:91:83:d1:df:a5:b9:63:cb:ca:d0:dd:65:
                    5a:ca:e1:5c:4a:98:23:e1:87:2f:7f:76:65:24:04:
                    1e:e0:4b:b4:94:c0:e2:45:a6:0b:7c:5c:d7:c4:d1:
                    03:19:63:b8:fa:65:ed:98:e2:11:80:28:b2:a5:3e:
                    8c:8e:06:a4:6a:97:b6:d2:b7:51:3c:ac:34:e5:90:
                    86:61:52:49:36:fb:f1:30:d5:cc:55:44:b4:89:b6:
                    0d:1a:df:ec:04:3c:48:93:16:5c:f2:b7:f9:ec:f7:
                    0a:28:bf:92:1d:c9:91:cc:eb:61:5d:31:c7:f3:a9:
                    2a:c7:f5:7c:eb:10:81:0a:8a:a2:8e:d4:8b:7d:5a:
                    d0:e2:01:06:f8:32:95:bf:2e:d9:ca:7c:12:3b:6b:
                    ac:47:21:ca:a7:78:1c:fd:74:ce:a4:0a:6c:25:e2:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B1:99:2A:18:40:4B:18:DF:1A:80:C9:5C:C4:A6:99:08:9B:D9:1F
            X509v3 Authority Key Identifier:
                keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:ca:d0:4d:a0:76:5d:55:87:d2:e2:14:f7:43:76:5c:04:
         80:71:41:b3:0c:a1:39:95:df:c0:0a:66:38:d7:e1:44:16:06:
         cb:a1:1d:54:c6:ad:f5:36:53:aa:a6:c4:27:62:68:5c:c2:5a:
         75:79:63:2b:7e:4c:ea:93:20:e8:95:5e:13:68:86:08:89:f1:
         23:38:8a:2e:20:6d:9a:a3:1b:a9:22:fe:21:23:51:df:1d:32:
         68:1e:b7:98:4c:23:4f:ce:a1:2f:56:54:49:61:08:98:58:d4:
         50:21:7a:f0:b0:cf:0b:c6:4c:e0:bf:c9:a2:37:5b:5f:7c:18:
         1b:81:dd:be:f4:2d:fc:6b:44:c7:00:c5:a3:92:76:51:1b:da:
         7d:8a:df:1f:28:07:bb:07:8d:b3:0a:36:5c:9e:9b:60:40:fc:
         f8:93:a8:35:bb:c1:1c:9b:be:a6:55:bd:91:78:10:ae:f5:1c:
         b7:78:c0:dd:be:8d:33:f0:a2:94:8b:96:83:b0:da:f8:07:91:
         69:c9:32:cf:3e:75:fe:a3:b2:ac:8f:28:d2:9b:f3:32:a5:d7:
         5a:d2:94:bd:38:47:6c:53:6a:f3:2f:55:4f:c3:dd:4b:5e:86:
         2d:27:bd:da:e8:55:3a:65:cd:33:c6:94:3f:de:58:60:2d:ff:
         86:6f:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:58 2026 by rpki-client