This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File:                     eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier:          IYJeSe1D6mt7c2HiLxgNGjGLwJ8tlNkX4LOMpYa7Qqc=
Subject key identifier:   3E:CE:FE:6C:38:E0:85:88:A1:91:CB:2B:B5:0B:A1:C4:83:B7:21:AF
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       11C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number:          1141
Signing time:             Sat 24 Jan 2026 17:00:46 +0000
Manifest this update:     Sat 24 Jan 2026 17:00:46 +0000
Manifest next update:     Sat 31 Jan 2026 17:00:46 +0000
Files and hashes:         1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: A7ulXuDmXf6s6zf/fkwFcbiEm7gCXdJGqPQXc3xPB94=)
                          2: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=)
                          3: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=)
                          4: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: /aMpRk+sARCQOAQAAD5zmHedoziM1XqWy40fj+d7TUA=)
                          5: 08DE553CE33411F09C32B5836E6F56BC.roa (hash: eUx0szc6mDFrTXmR6KQgfAyJ6imSHu6ZcWSwSYyS93w=)
                          6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=)
                          7: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=)
                          8: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=)
                          9: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4548 (0x11c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Jan 24 17:00:46 2026 GMT
            Not After : Jan 31 17:00:46 2026 GMT
        Subject: CN=6974fabe-e4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:1b:df:0a:6f:65:ae:1b:84:e3:73:7f:38:
                    4c:5b:e2:e5:9e:df:d6:b4:94:31:b3:10:40:d9:19:
                    5a:00:bf:f8:7b:82:fe:d8:33:00:fa:5c:84:ba:bd:
                    37:1b:f3:c4:a5:5a:5a:16:e7:b7:40:1f:30:84:f0:
                    cf:c9:a4:58:93:de:72:75:43:f9:21:2d:bd:72:14:
                    f8:d1:ba:ba:20:9d:b3:f0:0b:ed:f3:b0:db:36:9c:
                    74:f0:36:a6:85:c7:91:11:c7:7a:42:a3:32:21:84:
                    b0:b5:6f:1b:96:d0:8b:dd:4e:c8:ef:6b:36:39:c0:
                    95:9d:20:c5:64:fb:a0:ab:a8:8a:ef:ed:14:a9:0a:
                    72:08:13:02:c4:5e:47:a9:09:10:2e:3b:de:6f:d0:
                    dd:a0:84:f7:7d:2e:27:98:9a:a3:3f:11:c0:ba:3f:
                    23:56:76:e5:6b:04:d2:8a:ef:90:77:be:32:65:e1:
                    30:44:27:d2:39:60:41:c0:ef:97:43:f0:a2:a6:10:
                    6c:0a:49:18:16:38:c2:05:2c:47:59:a6:e6:1f:af:
                    b5:e1:0d:80:97:74:f5:83:e8:04:7a:b3:93:2b:be:
                    77:7e:c5:27:5a:df:f5:8f:7d:6c:41:a9:90:a4:70:
                    65:b6:e2:0e:7b:4b:a9:73:99:e2:a6:27:44:b5:e4:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CE:FE:6C:38:E0:85:88:A1:91:CB:2B:B5:0B:A1:C4:83:B7:21:AF
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:74:96:60:4a:56:06:19:43:ef:2f:45:fd:9f:00:e8:9d:
         3b:7a:bf:8a:4e:62:6a:72:2d:f1:3d:87:d8:e5:32:0c:70:05:
         56:41:ff:76:5c:fd:ef:5e:e8:51:22:6a:80:98:75:8a:c1:bc:
         e7:a2:3e:f1:13:dc:91:3d:ee:b7:7a:71:34:06:eb:00:fa:6e:
         7d:e0:02:30:a5:61:99:e5:2b:de:3d:5b:12:0e:9b:e4:04:5b:
         c5:79:7e:64:93:b4:10:be:e3:01:ec:1c:79:be:0c:99:fb:e6:
         6d:dc:9f:8b:a7:f5:50:63:7f:96:e6:98:c1:ee:8d:b4:66:4c:
         d4:82:ca:09:53:15:8c:88:79:7c:4a:bc:ca:65:2d:41:3b:b0:
         5c:33:25:36:b9:ce:b6:23:66:35:d7:93:c7:12:f9:d6:ea:99:
         2d:bf:80:f0:67:31:a6:3f:5d:58:34:41:3a:17:89:cb:6a:91:
         11:60:92:74:6a:3b:2e:68:52:c5:d7:19:d4:44:c5:f6:c4:8b:
         c2:d2:44:92:6d:e4:a2:08:a9:fc:85:55:9a:e5:8d:15:a2:05:
         e9:ed:f6:2d:35:a5:af:88:29:29:10:c4:90:b0:2e:01:2b:f2:
         37:8b:d7:e4:e1:f5:99:78:61:92:40:7c:16:38:f3:0e:72:5a:
         35:af:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:43:50 2026 by rpki-client