This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
File:                     ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json)
Hash identifier:          APLciJ0+p/TwvOh0pNrf485EmY/ga7sAPNJcLaJ1IPA=
Subject key identifier:   B3:2B:B4:12:91:DF:77:6F:B8:77:40:44:AA:FB:36:48:A5:83:5D:F8
Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F
Certificate issuer:       /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
Certificate serial:       1A8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
Manifest number:          1A75
Signing time:             Sat 24 Jan 2026 16:07:48 +0000
Manifest this update:     Sat 24 Jan 2026 16:07:48 +0000
Manifest next update:     Sat 31 Jan 2026 16:07:48 +0000
Files and hashes:         1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: +uYLpf++Y1evgZGp3GpSVFmFHU+ErwDmoMGrvUnW3qk=)
                          2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl
                          rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6794 (0x1a8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
        Validity
            Not Before: Jan 24 16:07:48 2026 GMT
            Not After : Jan 31 16:07:48 2026 GMT
        Subject: CN=6974ee54-88eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:d7:b2:cd:f2:55:89:be:3f:28:f7:b4:b8:
                    d4:78:3f:d3:f7:67:81:2b:50:07:b2:7f:9c:ef:c4:
                    0a:3f:3c:54:81:27:59:b2:76:24:f4:62:a6:53:a6:
                    26:d6:6a:ef:1c:d0:ae:e3:52:e4:7f:94:95:d3:ae:
                    b3:fd:b3:85:a4:f5:b1:55:35:53:18:fa:ac:76:e7:
                    b9:42:b6:db:53:fd:aa:ea:49:d6:25:92:69:2a:73:
                    de:93:80:b0:48:9c:8e:52:ac:01:e1:e0:28:a3:1d:
                    ae:57:a0:85:50:0e:79:3e:9e:34:3b:ff:fb:a0:d0:
                    93:58:61:69:37:e1:23:03:ac:1b:9c:ab:1b:65:69:
                    6a:59:31:a5:15:17:85:dc:ad:0d:06:cc:f1:92:8d:
                    91:d6:c5:a8:aa:9f:3c:c1:96:92:63:09:00:66:8d:
                    6e:6a:1d:9d:a7:08:62:8b:87:c9:ef:4d:a5:17:13:
                    1b:8d:cf:bf:df:58:94:f1:44:fd:1e:81:fa:9e:ff:
                    1a:96:6a:29:0a:57:c1:1a:a1:4f:41:eb:e3:b5:2d:
                    45:fa:c3:4a:06:fd:35:84:2d:eb:e8:cf:34:4b:46:
                    6c:95:7c:4c:0a:9a:6e:84:72:b5:a1:43:d7:de:ff:
                    d7:00:de:fc:b5:24:a0:51:54:4a:61:79:77:46:6f:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2B:B4:12:91:DF:77:6F:B8:77:40:44:AA:FB:36:48:A5:83:5D:F8
            X509v3 Authority Key Identifier:
                keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:33:64:75:16:a6:db:bb:86:93:7b:fc:c2:09:5d:8d:a5:02:
         fd:ff:91:55:da:af:44:c3:33:b8:27:38:f3:8c:6b:5a:72:d7:
         96:e3:68:ca:2a:d2:92:9a:0c:85:0f:77:72:7b:d1:41:53:09:
         9d:f8:73:7a:d1:a0:a1:0e:2f:67:76:c4:e9:c8:65:29:43:12:
         3f:08:69:3d:85:8f:ca:73:c4:36:0e:87:91:43:e9:f3:e7:41:
         28:28:f1:ca:4b:be:88:ab:72:b8:9a:4f:05:8e:86:fe:f6:1f:
         79:c8:c0:69:f9:46:3a:53:99:b9:57:dc:8f:61:26:85:72:25:
         fa:f8:5b:12:42:40:8c:12:74:b2:02:26:87:7e:7f:58:da:82:
         dd:00:5a:eb:b6:dc:76:2f:88:f5:bf:f2:2a:d7:ad:20:cf:41:
         7d:74:21:01:ed:a2:61:c9:f3:d5:f3:e0:96:1d:03:f1:25:af:
         ac:b5:61:4b:17:29:36:c6:bd:f4:a5:0c:ea:70:dd:9f:9a:26:
         00:79:98:c4:a0:74:5a:ea:d8:89:8d:6a:e3:a9:b8:84:51:33:
         01:1b:d8:e0:4e:5c:2d:8e:f1:73:f7:3f:9c:ed:48:03:67:dd:
         71:7b:47:69:c2:90:96:44:2d:a8:98:4d:fc:e3:c9:9d:4a:d0:
         b0:49:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:21 2026 by rpki-client