This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
File:                     _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json)
Hash identifier:          VfJXF+dwkUTJ7P2JfTR9Zyar89+g/BICIYqrcOB4rvU=
Subject key identifier:   6D:4E:7A:B6:20:78:15:30:01:87:6E:EE:E7:16:70:C5:F8:99:23:E5
Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B
Certificate issuer:       /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
Manifest number:          C0
Signing time:             Sat 24 Jan 2026 14:34:14 +0000
Manifest this update:     Sat 24 Jan 2026 14:34:14 +0000
Manifest next update:     Sat 31 Jan 2026 14:34:14 +0000
Files and hashes:         1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: dNWe+YLaib12piUodecU0ZeB4Y1rz34lfy2RrlSz+Ds=)
                          2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl
                          rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
        Validity
            Not Before: Jan 24 14:34:14 2026 GMT
            Not After : Jan 31 14:34:14 2026 GMT
        Subject: CN=6974d866-1cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:08:df:f3:d2:39:01:6d:be:1d:31:31:50:
                    a2:f8:0c:ef:44:97:44:85:5c:3f:d5:9c:71:c7:23:
                    61:05:dc:b5:71:8c:c0:ba:de:13:93:2d:50:bc:2a:
                    7d:8b:6d:e1:c0:e3:c4:78:45:d9:5c:18:a9:fa:70:
                    b9:f1:7f:97:07:db:7d:12:85:28:32:07:45:9d:89:
                    13:a6:fe:8d:4f:0d:d9:83:1c:b3:4d:2f:6c:db:13:
                    6b:26:4c:b1:63:f1:34:71:ac:ac:76:96:3e:66:5d:
                    e2:a6:3a:0e:27:4e:b7:2f:86:af:46:a0:16:eb:4d:
                    2a:22:bb:4e:f2:7d:0e:87:01:74:d8:d8:e4:0b:46:
                    63:15:26:c5:72:e9:69:58:54:aa:3e:b4:02:ba:c7:
                    93:88:ad:49:af:92:6c:f5:01:37:12:f1:48:97:65:
                    1e:1b:7b:17:42:cb:8b:31:78:2a:7f:45:77:96:03:
                    18:4b:b4:5e:f0:4f:35:19:3e:98:d2:37:86:1b:f9:
                    d9:b3:9b:ae:17:2c:6b:2b:df:46:7f:e7:fc:ea:92:
                    1b:4b:c3:40:03:2d:71:87:87:52:c8:c3:9b:fa:13:
                    df:79:46:1e:4e:9c:3d:33:1d:d3:f0:cc:22:c6:fe:
                    f6:92:b4:8c:ac:ba:51:68:d1:8e:6f:b9:93:12:89:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:7A:B6:20:78:15:30:01:87:6E:EE:E7:16:70:C5:F8:99:23:E5
            X509v3 Authority Key Identifier:
                keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:bf:70:13:a2:ac:98:05:8d:ef:c3:0a:43:2f:7a:9b:70:
         88:e2:92:07:8a:5a:19:1d:69:75:2c:a7:0a:6f:00:b7:38:9a:
         66:e0:2c:5e:f9:0d:61:05:6d:58:f4:13:08:26:47:0f:76:c2:
         27:ff:28:9b:1f:a5:24:3d:78:ff:73:06:d8:b1:86:dd:f6:b9:
         ee:c4:55:b5:ff:f0:ca:02:60:90:8f:10:b8:92:f2:fe:aa:36:
         91:7f:04:a1:27:bd:7d:79:e4:21:81:7a:a6:b5:db:be:7d:a9:
         c0:86:ff:aa:b5:4d:1e:fa:b0:ee:44:7a:88:0d:a9:92:34:fa:
         18:a3:60:cf:be:82:8e:c0:4c:e4:65:a0:fa:81:f9:82:d7:2b:
         a4:b3:37:bb:0a:60:d7:fc:fc:42:a8:19:fb:00:98:6e:8a:cd:
         e0:ee:99:87:5c:02:45:51:a7:4c:13:b1:19:0d:ac:ca:c6:c8:
         5f:92:cc:e5:b0:50:85:2e:fa:74:b3:64:09:2a:5a:8e:79:7b:
         0d:3c:35:c5:f4:28:ed:31:0a:86:bf:78:13:a3:de:89:cd:ff:
         10:12:a6:da:b3:a5:85:ba:72:49:2f:50:a0:59:17:f1:09:50:
         7f:c3:cc:bb:93:e4:0b:4f:97:32:a6:0e:70:79:b3:77:35:e8:
         77:bc:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:08 2026 by rpki-client