This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
File:                     e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json)
Hash identifier:          wMHaYbGzSz//IX5UubrRTwW2CClRizpxT81CQC/WG5I=
Subject key identifier:   DC:7A:0B:82:74:1B:57:DA:7E:0B:95:41:46:60:C6:31:28:DE:F8:D9
Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8
Certificate issuer:       /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
Certificate serial:       3508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
Manifest number:          3507
Signing time:             Sat 24 Jan 2026 14:19:13 +0000
Manifest this update:     Sat 24 Jan 2026 14:19:13 +0000
Manifest next update:     Sat 31 Jan 2026 14:19:13 +0000
Files and hashes:         1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: fwsvGwz7KTwM0sYqHnw+KaLMite6mZgieuk8LYfQZSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl
                          rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13576 (0x3508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA5AD, serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8
        Validity
            Not Before: Jan 24 14:19:13 2026 GMT
            Not After : Jan 31 14:19:13 2026 GMT
        Subject: CN=6974d4e1-7685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:98:85:11:89:e5:ad:d2:98:26:d6:d8:cb:
                    d1:b4:96:80:0b:6b:a4:72:32:30:b4:fb:0a:67:de:
                    a7:60:19:c7:98:3a:b0:ce:03:ed:58:52:10:e5:ea:
                    b1:5e:da:9d:2b:52:36:c1:0c:a8:73:71:60:53:5a:
                    95:1e:05:34:4c:f6:ac:c3:8f:be:55:1f:b9:ea:cb:
                    00:3e:7a:fa:ff:37:0e:75:e5:01:70:f8:7f:b7:fd:
                    74:90:e9:30:2c:65:f6:ee:3c:9a:62:03:f6:fc:af:
                    06:89:e9:9b:44:e2:88:c7:fd:2d:49:15:21:01:b0:
                    12:10:21:56:9f:45:9e:75:ea:c7:f6:bb:71:76:d6:
                    89:06:93:87:17:f9:7b:06:43:44:e1:13:3e:36:10:
                    3e:13:49:1e:dc:f6:c4:72:1a:8b:5b:ab:74:5b:28:
                    43:a9:49:99:e7:90:7e:6a:2d:e6:d6:94:44:b2:9d:
                    eb:1d:e4:1b:52:8a:69:80:ed:6d:92:e8:c8:76:71:
                    b6:c3:19:91:8f:f3:20:e8:03:94:eb:dd:8c:3f:2b:
                    c0:98:6f:33:6d:f8:11:df:99:3d:4b:5c:2b:7b:4f:
                    02:c1:f3:e3:74:5c:0a:f4:b0:84:ea:60:75:7b:a5:
                    74:22:a3:e4:34:39:e2:28:2b:e9:f5:98:5b:76:14:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7A:0B:82:74:1B:57:DA:7E:0B:95:41:46:60:C6:31:28:DE:F8:D9
            X509v3 Authority Key Identifier:
                keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:a6:f2:7e:7e:05:2f:c9:37:e7:d2:ce:d6:6a:82:ec:7d:
         1f:86:7e:c1:5c:64:81:e5:c0:35:a8:5e:ad:a9:22:9c:0b:61:
         56:64:b0:ff:e2:e4:fa:0d:7e:48:60:04:3c:af:76:91:a5:7c:
         95:b9:1b:1e:ed:54:4c:74:68:4b:1f:9a:03:0c:46:d4:9c:ef:
         b7:d1:14:28:8a:51:3f:05:d1:c8:8d:42:87:fb:02:eb:99:81:
         92:3f:42:44:1f:84:e1:91:b1:11:e5:a3:04:db:2b:9f:b6:4b:
         f9:15:48:70:11:64:7f:de:b2:ba:1f:89:48:b5:d0:9d:5b:0d:
         5f:5c:f8:c0:f1:ae:30:1c:d2:46:55:4c:06:7f:36:8e:21:f4:
         56:ab:62:a2:ae:b0:c7:d5:cc:56:09:bc:a0:cb:2f:69:55:5f:
         4c:df:3b:0f:b8:71:e3:bd:7a:3f:2f:f5:24:fc:4a:77:c8:c6:
         c5:da:0b:f5:b1:d1:c9:fc:64:f4:ad:a5:91:46:d0:3b:83:6d:
         43:c2:a6:de:0a:4a:54:89:09:bf:74:9a:60:70:d6:9b:c9:e3:
         52:be:be:2b:78:27:48:81:8f:42:65:a2:8e:84:20:8d:ce:52:
         e6:02:4f:8a:f1:a3:d7:3b:ca:de:dc:11:01:d1:e9:52:cf:ba:
         c7:5a:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:14 2026 by rpki-client