This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
File:                     C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json)
Hash identifier:          68+zFgq6ZtKM9QqlNPr7IscQje8OiakL7bhYqvF4sCs=
Subject key identifier:   E8:7A:C4:0F:9E:3C:9A:9B:2F:C4:F4:24:4C:0B:9F:C4:AE:94:06:51
Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
Certificate issuer:       /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
Manifest number:          55
Signing time:             Fri 23 Jan 2026 06:14:54 +0000
Manifest this update:     Fri 23 Jan 2026 06:14:54 +0000
Manifest next update:     Fri 30 Jan 2026 06:14:54 +0000
Files and hashes:         1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: qQvbXBMiQPnSb4fC3x4Bq1NJFZ3BRbiMg7uD4numWQM=)
                          2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: jTESa3U73YRI0+Qom5Rj/Y57jrY10Y9T/v9pDSvTy48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
        Validity
            Not Before: Jan 23 06:14:54 2026 GMT
            Not After : Jan 30 06:14:54 2026 GMT
        Subject: CN=697311de-3358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:37:a5:a0:87:8e:fb:60:1e:b7:d6:fb:03:
                    27:12:69:e4:03:33:56:9f:70:17:9c:34:90:c4:e6:
                    16:87:8e:37:4f:dc:a9:4d:6f:77:d3:bc:12:b1:ad:
                    9f:46:3e:56:50:2c:76:b4:83:b0:ee:d4:fb:f3:f1:
                    db:a4:95:53:3a:81:7a:70:2a:e9:d5:1f:16:40:ad:
                    9d:cd:22:af:85:96:5a:7e:c0:4f:a6:00:40:b7:22:
                    0e:99:60:d8:33:10:20:ea:f0:75:a2:c6:17:89:14:
                    a8:5a:20:cd:56:76:27:e4:28:7c:23:50:0e:d0:b0:
                    46:20:4c:0b:fa:7b:88:dd:b3:d5:0e:28:09:a3:92:
                    5b:ab:15:5b:8b:e4:9f:73:62:ed:f3:eb:a2:7b:3f:
                    1f:6a:19:06:35:94:8a:13:f1:d6:02:06:7b:1b:e5:
                    7b:0e:c0:00:26:5d:43:78:cc:ab:0b:1b:84:2e:dc:
                    ce:bd:a7:e5:0c:6b:c8:21:4f:e8:fa:e5:f2:df:3e:
                    db:05:81:ea:af:f3:db:f9:74:a7:55:f3:55:75:f5:
                    cf:54:a9:7f:84:1f:df:32:57:c5:37:4b:8c:a3:3a:
                    c3:c5:aa:d2:fb:ed:f5:24:57:6a:fe:f3:77:8e:63:
                    6a:0c:97:f9:7d:04:12:88:21:b8:55:39:1b:c9:6d:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7A:C4:0F:9E:3C:9A:9B:2F:C4:F4:24:4C:0B:9F:C4:AE:94:06:51
            X509v3 Authority Key Identifier:
                keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:da:e3:24:fc:72:c1:69:c3:a8:a5:34:de:f3:99:76:92:68:
         7a:d7:2d:c0:e8:38:41:3d:01:68:f6:22:1d:bd:d8:d5:c4:32:
         a6:27:32:6e:3c:8e:69:35:b7:f2:29:ce:05:a8:58:c0:b3:da:
         38:2d:13:f2:4c:cf:25:42:2f:c6:c7:b0:5d:85:d6:81:a9:54:
         95:7d:cc:ed:48:e3:1c:6c:a2:b7:b7:0b:73:7a:c5:03:80:82:
         14:7a:52:6b:22:70:04:77:b3:d7:24:04:e0:1c:7e:f8:ab:4b:
         5d:80:1b:6b:f0:53:9d:31:4f:d7:47:21:73:12:f0:68:a0:94:
         3c:09:f4:73:21:b9:fb:95:7a:bc:51:26:d5:6b:fe:36:25:19:
         e5:ac:93:a0:09:4e:ad:c8:85:95:68:45:23:33:45:65:9a:8f:
         5e:25:86:71:92:16:db:7d:84:ae:08:02:d4:c6:5a:90:24:e6:
         46:20:a6:eb:c6:e4:db:41:9d:62:e4:01:37:30:5b:40:e4:f3:
         6a:fc:94:c9:dc:a2:27:96:ba:85:12:63:41:68:4c:26:58:c1:
         f1:dd:56:cc:fd:6a:76:b0:16:e0:ac:5c:70:4e:df:31:4d:1d:
         de:c2:91:b1:0c:85:a3:55:bb:17:76:0f:60:35:3a:1a:47:d4:
         a9:68:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:37 2026 by rpki-client