This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
File:                     7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json)
Hash identifier:          mMdBpvgkfXYCdpQJNB+fr5dqBBL3pec+vgj0bxCWeuk=
Subject key identifier:   04:1C:FA:5B:5E:DC:A9:CD:8D:91:C2:F3:71:72:EB:A8:7D:DC:D8:4C
Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7
Certificate issuer:       /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
Certificate serial:       0807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
Manifest number:          07FD
Signing time:             Sat 24 Jan 2026 20:29:16 +0000
Manifest this update:     Sat 24 Jan 2026 20:29:16 +0000
Manifest next update:     Sat 31 Jan 2026 20:29:16 +0000
Files and hashes:         1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: ZtI5gM4I0WY4+7sLwZbv3b9GaE71VzeoKPX2pxJGVX8=)
                          2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: ib2DoXuoQ2eWeeEfxzG3naQLt5MyqyEn/StzAKuHVrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl
                          rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7
        Validity
            Not Before: Jan 24 20:29:16 2026 GMT
            Not After : Jan 31 20:29:16 2026 GMT
        Subject: CN=69752b9c-f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:28:de:75:50:d2:c7:e3:a6:a9:04:78:41:
                    d2:1e:34:b0:d7:d8:55:24:ee:03:19:37:9b:f1:1e:
                    be:5c:03:22:8e:c7:4f:91:84:69:e2:b9:91:a3:9b:
                    25:82:08:eb:02:d9:58:2f:65:d9:6d:f5:ed:f8:07:
                    bc:d1:4c:d1:41:0a:3c:27:1a:ab:8f:35:33:9a:16:
                    20:3b:0e:87:bc:67:34:ef:9b:a9:ab:0d:8f:0a:35:
                    62:da:32:ab:63:b3:b5:bd:29:0d:dd:54:d3:13:3c:
                    9f:86:39:db:06:79:b4:d4:29:d0:d3:ef:be:a4:ee:
                    95:8d:c6:14:b0:94:c6:a2:93:18:9a:c6:3f:69:f0:
                    b7:34:70:1e:47:8a:18:2d:1b:bd:27:85:8b:90:24:
                    e9:43:dc:11:29:c4:de:99:2a:08:f3:07:40:71:72:
                    55:c5:66:0e:eb:c6:c6:67:eb:87:86:75:75:b1:9f:
                    16:0a:25:43:5d:ed:86:c2:bb:26:ab:5d:75:ad:b8:
                    b4:75:98:24:dd:f8:6b:1f:0e:78:9b:76:fd:6f:98:
                    2c:3b:bd:75:2a:72:86:57:fb:a2:44:a7:54:e1:e5:
                    17:e6:ba:6f:ae:90:88:df:7d:32:11:7a:bf:60:43:
                    df:6e:cb:4b:d5:66:b0:b7:bf:0c:93:d7:0a:75:94:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:FA:5B:5E:DC:A9:CD:8D:91:C2:F3:71:72:EB:A8:7D:DC:D8:4C
            X509v3 Authority Key Identifier:
                keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:d3:c1:4e:fe:1e:29:1b:ba:46:cc:c3:c3:93:37:44:06:
         f1:8e:96:14:dd:4d:fb:2f:6f:d8:94:37:c4:12:4d:ee:d8:dc:
         89:c6:f1:dc:5d:0e:f3:92:a2:e0:a4:11:3a:5f:81:59:8b:91:
         17:92:6d:1b:0a:ea:a0:d9:f5:76:c9:20:2e:ca:3a:52:e1:e7:
         f4:8c:06:d8:f5:60:9a:39:29:2e:90:a2:66:f2:cd:47:73:01:
         ba:81:b1:ed:e2:52:73:21:2d:71:a2:96:50:69:e6:f1:3b:71:
         3f:17:3a:f4:9f:c5:9b:ba:fb:70:c5:2b:76:cb:cc:bc:66:57:
         f5:4d:69:fc:de:63:ec:3a:c6:5d:20:ca:ad:15:6f:d7:d9:b1:
         1a:ba:e4:e3:02:3d:46:e2:9f:ce:33:33:d1:3a:f1:14:56:0d:
         0c:07:ce:05:41:ef:35:d7:05:6e:af:41:f1:0f:60:bc:71:87:
         3f:75:f3:a9:73:a7:52:12:c3:0a:52:26:9c:ef:9d:da:c2:1d:
         21:52:e5:9c:b6:dc:b4:75:7a:1b:d0:c7:fd:58:7c:b0:d8:99:
         80:24:9f:fc:16:9e:7b:a0:79:53:d2:a0:b8:6c:2c:37:b0:8c:
         bc:84:ad:78:e7:f2:32:a0:14:10:65:d3:7b:fd:ca:d0:49:51:
         5c:5c:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:25 2026 by rpki-client