This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
File:                     6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json)
Hash identifier:          IQa3+e9WHFoOfCgTXyUdDx3+3p0FWlzXP7LkxNHQA3g=
Subject key identifier:   85:0B:D1:87:DB:BE:E3:9A:9E:19:A3:99:5C:A8:0F:56:77:75:AD:6B
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Certificate issuer:       /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial:       154E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
Manifest number:          1543
Signing time:             Sat 24 Jan 2026 16:32:38 +0000
Manifest this update:     Sat 24 Jan 2026 16:32:38 +0000
Manifest next update:     Sat 31 Jan 2026 16:32:38 +0000
Files and hashes:         1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: NH3Zdb4p473tE6agcvNr7JNPXG+MxQ5g8N6+yDhJSK0=)
                          2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
                          rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5454 (0x154e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
        Validity
            Not Before: Jan 24 16:32:38 2026 GMT
            Not After : Jan 31 16:32:38 2026 GMT
        Subject: CN=6974f426-c6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:df:5a:23:cb:ae:f0:90:b3:a9:7f:24:9c:
                    ee:2e:a2:66:21:f9:c7:e2:f4:9b:b6:dc:8a:fc:d7:
                    2b:a5:bf:71:d2:75:6e:87:ce:41:7a:29:89:bf:13:
                    93:4c:67:1c:f3:ff:6b:e8:a0:fa:0e:0f:a4:a0:c8:
                    09:fb:b9:0a:b6:7a:df:ca:01:2e:08:51:e8:4e:3f:
                    55:a4:f0:39:4c:46:36:36:51:14:e7:ac:8e:09:6d:
                    d7:9d:88:6e:44:77:b2:fd:0f:5b:55:ce:4f:13:e8:
                    ed:f9:1f:f7:66:82:a6:27:75:34:38:62:27:7a:a0:
                    28:fd:28:67:65:61:3b:50:2e:6c:e8:b3:7e:da:29:
                    40:27:60:6b:e1:bf:a8:0f:87:30:b6:e4:a6:b9:cf:
                    a3:78:a1:13:6a:0c:68:14:93:b0:6c:0f:19:24:c5:
                    f0:2d:02:8c:e1:46:74:cb:84:3b:84:28:5a:fb:95:
                    4f:a0:ba:8a:2b:73:51:26:11:c3:9e:33:44:29:6b:
                    95:0d:27:8d:07:eb:d8:01:f8:00:36:a7:42:ba:f5:
                    be:26:2b:40:41:80:ff:e6:ce:58:09:95:2c:73:3e:
                    63:22:7f:2c:c7:3c:e7:37:f0:da:20:ba:a5:9e:17:
                    dc:0c:7e:6a:bf:41:8a:cd:76:4d:e0:d8:25:eb:4f:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:D1:87:DB:BE:E3:9A:9E:19:A3:99:5C:A8:0F:56:77:75:AD:6B
            X509v3 Authority Key Identifier:
                keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:c3:1b:d4:26:04:7d:5e:e6:86:a0:88:7c:47:a8:5b:00:
         4e:93:83:70:62:cb:15:5a:6a:1c:0c:b3:bf:2b:ce:b2:4c:2a:
         85:68:4e:3b:0e:ae:04:78:8e:f2:73:97:40:9b:3c:12:44:79:
         d7:7a:d9:30:4c:79:bb:9b:43:c6:78:3c:1f:a2:29:35:3e:d0:
         e5:47:1a:60:eb:28:ab:95:92:5b:62:64:0a:a4:a6:a3:e6:b7:
         f1:46:ce:93:d3:cf:20:dc:07:23:46:1a:67:64:63:74:2d:b0:
         eb:72:86:1b:c5:f9:bf:91:65:fb:1a:88:97:b1:29:20:af:ed:
         b6:5e:83:b1:5a:08:af:66:d7:96:05:cb:60:ff:2f:77:e6:21:
         c8:84:e5:e3:22:17:7d:39:65:32:70:8e:cf:69:5f:10:57:1a:
         ff:07:84:f0:a3:5c:be:b6:b5:59:8f:be:62:6f:47:a7:1c:56:
         b3:d5:e1:c9:8e:d6:4c:ed:cf:14:4b:d7:7f:13:5c:77:de:9e:
         a0:b4:33:24:c4:40:ef:05:81:a7:e9:6d:fe:56:50:30:33:48:
         17:9f:13:fe:25:e0:22:82:37:66:18:b7:4e:b2:42:48:c5:aa:
         fd:4a:df:71:11:5d:71:b0:24:98:41:f6:af:2d:2f:92:98:95:
         0c:d6:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:46 2026 by rpki-client