This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File:                     we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier:          W8gJg/RmLYEVktUY1g3txY2k6NebXZvsiaA50WrBM7Q=
Subject key identifier:   A1:17:8D:7C:88:B2:C4:C6:4E:9D:9C:42:51:50:36:33:A3:03:57:D9
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer:       /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number:          A7
Signing time:             Sun 25 Jan 2026 05:26:50 +0000
Manifest this update:     Sun 25 Jan 2026 05:26:49 +0000
Manifest next update:     Sun 01 Feb 2026 05:26:49 +0000
Files and hashes:         1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: knkgmqbn4C/GXbqx3GOAqvLkEqkLNJ5T4QL80gDn7Cc=)
                          2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: K/IvCMryqqcd164l2HeaqkRV83k4fzKQngkzaAFm7Q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
        Validity
            Not Before: Jan 25 05:26:49 2026 GMT
            Not After : Feb  1 05:26:49 2026 GMT
        Subject: CN=6975a99a-01bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:b2:60:1b:d1:e8:e1:b5:e5:d3:fc:3b:88:
                    9a:92:8b:53:e2:e3:a1:c2:ea:74:4a:e0:59:a1:86:
                    bb:53:79:61:e1:52:42:26:16:22:50:9d:7f:6a:b6:
                    7e:e1:6f:49:26:b8:e0:53:d6:73:c1:9b:50:57:c4:
                    92:1f:36:e1:1b:15:39:1c:98:b5:59:e3:d1:32:ac:
                    1f:96:ff:7a:b6:c3:8a:4f:9b:6c:42:b2:73:c9:e3:
                    df:9d:57:b6:37:81:bf:bc:33:ea:ed:03:e2:e8:63:
                    35:9f:77:1d:10:a1:26:42:1e:02:89:1b:f1:ca:b0:
                    66:ff:05:8c:da:1f:62:1c:4e:4d:80:d2:3f:63:bd:
                    94:f1:dc:b8:57:46:7e:80:a7:d7:fc:10:fb:23:68:
                    2c:77:b2:54:d8:35:3f:f9:69:90:65:b5:ae:e7:b4:
                    b5:af:a7:b7:6f:bf:a5:a4:b9:d6:4c:94:3a:42:54:
                    34:98:5f:c8:25:7b:b2:ff:03:13:ae:e7:8c:d1:20:
                    9d:00:e5:4c:e9:c5:64:ff:96:f8:26:75:7c:05:d3:
                    5a:c6:f9:cb:89:c0:34:1c:38:f0:b5:f3:54:08:e2:
                    97:94:43:70:51:f8:35:05:ae:f9:1f:51:7a:09:0e:
                    93:7b:dc:3e:60:ae:1a:90:cc:74:60:f4:88:9e:a6:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:17:8D:7C:88:B2:C4:C6:4E:9D:9C:42:51:50:36:33:A3:03:57:D9
            X509v3 Authority Key Identifier:
                keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:d2:32:6b:08:ee:55:9c:13:23:b3:81:83:7d:5d:d5:db:
         1f:39:52:46:5b:ba:6d:b9:b4:d8:45:12:a1:54:fb:9f:16:1a:
         1a:07:ef:46:e1:fb:e1:60:96:33:6e:56:4c:de:85:29:77:32:
         c7:42:04:07:da:af:8e:09:95:61:c1:d7:69:0c:bd:9b:c9:4c:
         1f:20:b5:2f:bb:bf:da:2b:85:85:1f:e3:93:fe:65:4f:ec:05:
         3f:58:3e:7c:a9:00:a8:35:25:37:9c:4d:7b:29:b5:55:58:18:
         8e:a4:3a:36:54:91:93:e6:10:f0:a7:42:f3:90:85:cb:63:01:
         83:a0:1e:0b:36:3d:3a:12:d9:76:cd:b1:99:a7:7c:bb:5d:73:
         64:97:32:df:82:53:92:46:fc:29:01:b0:f0:ba:cb:08:c2:52:
         86:98:9d:86:91:3b:5c:b6:b1:94:23:cd:db:88:61:1e:a3:0a:
         e2:3f:51:5a:84:c3:1f:2b:5d:d7:71:14:96:17:bc:33:95:18:
         81:f1:87:2c:8a:c5:16:80:e6:dd:98:a6:16:04:45:16:87:f8:
         61:ce:1b:aa:ef:2d:f2:35:ba:e9:6a:0f:5e:7b:db:1e:69:9e:
         33:8e:09:ed:82:c5:70:d6:2f:12:30:f7:73:3d:9d:45:b4:c3:
         a1:20:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:47:52 2026 by rpki-client