This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
File:                     erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json)
Hash identifier:          1QFrY2FruypeGH0j5/22vSABNmTamaqHl/cm2b4mHlA=
Subject key identifier:   D8:41:49:C8:4A:0E:4D:5F:58:AF:13:15:E9:65:CB:06:25:20:1C:10
Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
Certificate issuer:       /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Certificate serial:       0CDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
Manifest number:          0CCC
Signing time:             Sat 24 Jan 2026 17:51:15 +0000
Manifest this update:     Sat 24 Jan 2026 17:51:15 +0000
Manifest next update:     Sat 31 Jan 2026 17:51:15 +0000
Files and hashes:         1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: S54k1gYd0fQCxh2mlrMEqpFOpZFJHpkhT7cAODC/mSs=)
                          2: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=)
                          3: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
        Validity
            Not Before: Jan 24 17:51:15 2026 GMT
            Not After : Jan 31 17:51:15 2026 GMT
        Subject: CN=69750693-b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:30:6e:bf:d9:12:d7:bf:e0:de:39:2b:3b:
                    6e:8e:7e:6e:27:5c:38:48:90:5e:44:bd:fa:56:8e:
                    5e:e1:08:08:04:d7:00:e2:9d:5d:f2:d3:90:15:58:
                    b7:df:73:54:93:e7:be:50:98:04:db:41:ed:04:a9:
                    11:97:bc:d8:a6:f6:78:46:ef:14:75:8f:36:6e:e7:
                    1d:eb:77:0e:e9:bb:59:89:b4:46:ca:3b:5f:1c:bc:
                    e1:12:21:00:eb:25:83:65:b2:d2:68:e8:7d:f8:73:
                    51:e1:7c:4c:45:bb:fb:f4:bc:84:5e:3c:f7:f1:4c:
                    7e:9e:11:ec:16:9f:92:61:fa:60:be:87:4f:3a:d3:
                    1a:d4:0b:d0:4b:d3:cd:bf:a1:6b:cc:a2:3f:de:27:
                    eb:a3:9f:d4:a4:42:28:2c:fb:3d:6f:7d:62:88:ed:
                    d2:29:56:51:cd:eb:c6:c3:9e:95:ca:b7:c4:87:f5:
                    ba:3f:0f:29:fa:5d:02:0e:da:4d:a7:b8:e6:69:cb:
                    b7:45:04:9c:cd:3b:35:fd:60:26:f8:60:9b:9e:74:
                    e4:d4:4b:02:2b:4e:b4:18:aa:26:fc:4f:34:8a:ae:
                    e8:2a:c0:4e:d2:9c:02:84:ee:23:bf:aa:eb:91:59:
                    46:b8:cc:b8:99:1a:5b:76:dc:a8:c7:ac:ae:21:4b:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:41:49:C8:4A:0E:4D:5F:58:AF:13:15:E9:65:CB:06:25:20:1C:10
            X509v3 Authority Key Identifier:
                keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f3:98:0a:f1:9e:7b:90:24:97:80:99:a3:4c:eb:80:4b:b0:
         70:c5:68:fd:2c:ad:7b:c2:6c:00:c3:51:f0:9e:2b:fe:3c:96:
         d1:2b:c2:13:c2:56:66:6a:57:b9:8f:c7:ed:80:9c:b1:50:1e:
         ce:1b:07:00:cb:ea:10:5a:98:f8:0d:d7:b7:c0:24:fb:bc:27:
         cf:06:fb:0f:1b:de:9e:ee:84:a1:68:e3:86:e9:3e:1a:01:17:
         f9:66:b1:0b:71:e2:2e:f2:cb:53:5d:d0:17:37:70:0b:b9:30:
         95:82:d9:10:f2:c1:3d:4f:a7:36:f4:b5:ec:39:20:bb:6b:d2:
         52:17:72:3b:ba:76:bb:25:71:6b:01:9e:22:e7:6e:d9:72:cb:
         67:52:44:37:b5:1f:12:dc:bf:de:6d:93:7f:40:9a:f1:35:13:
         6e:80:d4:84:c2:af:0d:40:ff:b7:57:6c:37:0d:24:3e:49:3d:
         3f:78:1a:8a:68:2f:8a:79:75:97:56:e8:d1:c9:a8:3d:9a:7a:
         de:dd:c1:3b:67:12:a7:c3:08:aa:b0:aa:60:4a:85:fd:27:b1:
         9d:b0:c1:bb:7b:58:7a:99:a6:6c:7c:24:20:04:16:39:88:2c:
         77:90:4a:bf:c3:0e:d9:b6:8e:c1:c5:cc:b9:08:9a:a6:20:a8:
         ff:d2:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:12 2026 by rpki-client