This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
File:                     x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json)
Hash identifier:          RdnB8AJPUxk8hUmrAJ5kifrc4e1TnFmob1tEIbfpKUU=
Subject key identifier:   0A:FA:27:EA:2B:55:2E:35:49:6B:92:65:58:70:E5:42:17:FB:5F:07
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Certificate issuer:       /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial:       0734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
Manifest number:          1447
Signing time:             Sat 24 Jan 2026 18:03:14 +0000
Manifest this update:     Sat 24 Jan 2026 18:03:13 +0000
Manifest next update:     Sat 31 Jan 2026 18:03:13 +0000
Files and hashes:         1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: eFnAJS7Lv9IZQQy/3RF4D0ppk8BQSeT7g85G90+q0MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
        Validity
            Not Before: Jan 24 18:03:13 2026 GMT
            Not After : Jan 31 18:03:13 2026 GMT
        Subject: CN=69750961-e37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:d7:25:2c:c2:0b:90:cc:0c:6d:c9:b2:28:
                    99:96:30:3d:4a:9b:2e:2a:0e:73:0d:d6:41:e4:9d:
                    b0:97:1e:c5:49:c1:bd:da:a4:d3:0a:c5:b6:f8:70:
                    23:d3:9d:66:01:da:e4:7c:5c:7d:90:4b:b2:4b:8d:
                    8c:24:8b:5c:81:7b:f0:e9:ee:fe:73:f8:77:a6:2b:
                    1f:87:be:1b:ac:89:76:7a:87:3c:61:92:92:90:9b:
                    01:c3:c1:70:2b:ba:07:83:9f:65:a1:1d:07:4b:f8:
                    f9:b9:dd:19:9f:70:2b:b9:37:47:28:5a:85:8d:40:
                    35:6b:8d:73:db:a7:62:1b:42:70:d1:42:7f:80:26:
                    d2:6b:d4:69:24:10:74:a6:8e:a4:97:47:e8:cf:e4:
                    54:d4:cd:a4:d1:52:79:c9:57:26:d3:68:89:77:92:
                    87:a9:ce:79:b0:38:1e:42:81:a5:c3:ea:43:69:c3:
                    ca:a9:ad:c4:84:24:34:02:27:c1:83:d4:79:9a:51:
                    03:44:b6:15:eb:ce:2b:b5:53:a0:0b:9e:70:8d:f9:
                    ab:8f:3e:a0:21:10:bd:a2:10:07:54:ec:5f:fb:cd:
                    78:5f:e0:31:bd:42:92:44:52:cd:dc:9e:71:83:26:
                    e8:18:58:7f:cd:62:fe:df:c4:06:79:28:b9:ee:b1:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:27:EA:2B:55:2E:35:49:6B:92:65:58:70:E5:42:17:FB:5F:07
            X509v3 Authority Key Identifier:
                keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:79:03:aa:f6:ea:9c:31:a6:74:21:c1:e1:79:87:c9:63:7e:
         09:0f:21:b9:45:fb:e9:e6:be:1b:12:3d:eb:ac:77:de:6b:0c:
         70:df:f8:95:3d:2a:fe:8a:e4:a5:1e:09:8f:bf:fd:7f:23:ee:
         49:9d:82:ba:ed:df:27:a1:c3:7f:b0:f9:9a:c8:34:cb:0c:fd:
         b0:0d:a0:13:1b:aa:9b:38:94:8e:92:00:c9:15:7f:70:9d:33:
         a7:61:68:e6:35:6a:86:c8:36:a1:15:d4:74:b2:f3:ed:e3:5f:
         b2:3c:da:5a:e6:47:c2:63:1a:9e:5b:8b:79:12:89:de:e9:20:
         22:27:76:68:7b:fa:76:60:84:af:26:ce:f5:cd:13:38:eb:9a:
         c9:60:a7:df:87:1b:fc:ae:6d:db:ab:07:f0:19:83:06:03:24:
         cb:19:22:69:e3:31:4d:33:84:fe:27:70:2c:d8:bd:0c:d1:71:
         8c:23:7f:98:65:46:4b:ed:df:55:80:2d:05:08:59:d0:96:85:
         3b:8b:90:86:77:27:c6:73:fc:a2:a0:2c:60:67:f8:b3:de:ae:
         f3:4a:74:6c:8a:28:3f:ec:fe:21:71:a4:54:64:7d:f8:5b:ce:
         f5:aa:1d:7d:5b:e8:41:dc:6a:c7:68:21:ea:22:3d:a6:1a:63:
         18:5f:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:31 2026 by rpki-client