This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          ncehg/S0WUEcTKDqEsYXXfoafVBOT/QbBR19mPGQL2Q=
Subject key identifier:   5C:C1:30:ED:08:6A:EE:2B:12:02:1D:B2:04:53:01:25:78:59:16:EE
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          017E
Signing time:             Sun 25 Jan 2026 03:02:40 +0000
Manifest this update:     Sun 25 Jan 2026 03:02:39 +0000
Manifest next update:     Sun 01 Feb 2026 03:02:39 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: uQRzIRvti8an6KCuiIgq9QHfJStClEdtkx9bR/3YjJk=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
        Validity
            Not Before: Jan 25 03:02:39 2026 GMT
            Not After : Feb  1 03:02:39 2026 GMT
        Subject: CN=697587d0-dd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:61:66:bb:c9:25:e6:7e:6e:96:05:3a:55:
                    36:b8:90:ea:b0:51:b4:fd:4a:d3:7e:d9:26:17:12:
                    4b:ae:da:a7:45:3a:85:59:c9:87:10:5f:12:80:b1:
                    36:fb:88:f1:c0:5b:c6:10:32:4f:1e:e1:a6:2d:0b:
                    c3:84:d1:30:ac:34:41:e5:62:c1:62:ea:00:d2:57:
                    6a:fe:3b:08:6f:23:d4:75:d8:7c:5b:64:5f:13:c4:
                    8f:cf:d9:01:fc:f7:ea:72:7c:45:61:3d:8d:25:6d:
                    eb:b0:a8:99:da:7c:d5:4c:99:0d:95:59:a0:e9:95:
                    f8:71:28:67:b5:5f:8a:67:16:81:7e:1d:fa:62:dc:
                    91:23:c9:8e:86:25:ff:dd:ea:ea:13:d5:3a:3d:f7:
                    78:da:44:83:88:71:cd:70:7b:e9:68:96:4d:bb:d7:
                    81:ef:b6:6b:6e:b0:6a:11:f5:00:0c:14:53:32:fc:
                    fc:0b:39:a0:54:11:47:fb:86:12:31:7e:9a:0b:37:
                    ef:da:81:2f:20:e1:9b:26:d4:51:a0:e7:f1:53:db:
                    6f:e6:6b:d4:3b:d9:3f:b2:d7:e8:0f:3e:cf:06:7f:
                    4d:98:b3:64:ca:90:5e:b3:bb:24:be:96:31:47:3d:
                    5b:66:fc:65:af:b4:83:0f:e3:01:8e:34:47:2e:56:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C1:30:ED:08:6A:EE:2B:12:02:1D:B2:04:53:01:25:78:59:16:EE
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:55:4e:1f:c3:32:ab:f1:87:bb:38:6b:ab:e0:b9:a7:1b:
         76:49:7f:14:e2:fc:a0:52:a9:07:14:38:51:13:d9:0d:3d:b7:
         0f:bd:4b:46:11:a7:e3:c0:8b:98:4c:73:1e:ee:95:4f:7b:b1:
         ce:e9:12:67:03:0b:c3:13:a5:bf:d3:85:3a:b4:2f:70:f3:77:
         b0:f6:af:c6:15:27:c3:97:4e:68:11:f8:b7:d1:45:dc:ab:d9:
         f7:61:04:e8:be:fa:22:a2:00:d1:14:8f:41:73:e6:91:93:55:
         43:50:b1:0b:f3:89:d9:9d:23:5c:c2:2c:32:5c:2e:4f:3f:c2:
         c6:09:fe:7d:52:2d:be:1b:90:02:44:b1:41:2f:94:85:f2:55:
         76:b7:55:44:39:dd:c0:56:87:4d:9b:95:f6:c9:19:1d:c3:3c:
         43:56:56:80:75:55:18:7a:dc:b7:59:71:e2:ec:07:26:38:b6:
         34:7a:bf:cd:22:c8:da:66:39:9c:10:29:ad:0d:58:8b:2c:e6:
         44:bf:32:ee:6f:25:ef:d4:bb:55:84:fc:64:3f:92:d5:27:3a:
         58:04:70:3a:ad:ab:3e:f3:fe:ca:53:f8:34:3e:4f:2b:9d:43:
         ff:68:05:b1:47:6a:54:13:e1:33:e6:4a:5c:68:7f:73:6a:db:
         dc:4f:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:01 2026 by rpki-client