This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft
File:                     FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json)
Hash identifier:          Anuhxy4rKhI5JrOpIX+qsRrlaXaOMiH+WPTvawYmrOI=
Subject key identifier:   C9:AF:10:F9:F8:E1:12:3B:2C:99:38:1A:26:C1:C0:84:5A:93:A8:91
Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4
Certificate issuer:       /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft
Manifest number:          E1
Signing time:             Fri 23 Jan 2026 04:40:48 +0000
Manifest this update:     Fri 23 Jan 2026 04:40:48 +0000
Manifest next update:     Fri 30 Jan 2026 04:40:48 +0000
Files and hashes:         1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: vUzwrVNkaW6laCuZB0qzBEiy3DJkuyND0LyfUPZP2yE=)
                          2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4
        Validity
            Not Before: Jan 23 04:40:48 2026 GMT
            Not After : Jan 30 04:40:48 2026 GMT
        Subject: CN=6972fbd0-dc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:c0:6b:a8:af:ec:08:e8:e2:f9:a1:fb:07:
                    b3:f7:a2:73:92:d2:24:ca:2f:a3:b7:8c:4d:e2:e6:
                    1f:0e:4f:93:d5:15:3d:86:7a:ba:9b:1c:02:03:6f:
                    ca:5f:b1:00:80:d2:5e:b5:fc:36:7a:31:30:5e:96:
                    7a:cb:f5:88:8d:08:fc:01:46:c9:50:6a:1b:82:08:
                    0c:2a:13:40:9b:31:e4:03:75:07:44:83:fb:23:5a:
                    39:96:f0:cb:1b:05:4a:99:fd:ca:cb:ae:57:0f:93:
                    28:b4:bf:cb:ab:8a:93:26:96:5a:84:14:a5:8e:82:
                    18:19:f4:94:86:5e:76:32:0b:17:e4:48:32:6d:71:
                    19:8e:5a:de:ea:38:d4:e7:29:18:16:76:3b:4e:dc:
                    33:5b:f7:60:d3:62:a2:6f:5b:6d:52:fc:11:b7:9e:
                    2a:37:48:92:66:bc:fc:9e:50:47:cd:0e:40:2b:ce:
                    11:91:8c:27:0a:bb:b8:44:96:0c:00:2b:9b:99:52:
                    65:09:60:dc:07:ab:94:b8:96:b8:8c:38:c2:8d:16:
                    b1:4d:1a:6a:da:d4:89:ea:79:a0:7f:e3:23:b2:15:
                    97:52:6b:91:2d:5e:51:7a:89:43:75:b4:9b:26:ad:
                    33:ea:0c:2f:41:bb:f7:a2:c6:0e:49:cd:0e:37:56:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:10:F9:F8:E1:12:3B:2C:99:38:1A:26:C1:C0:84:5A:93:A8:91
            X509v3 Authority Key Identifier:
                keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4d:e5:cb:c7:23:bb:a0:6b:a3:38:f6:7e:05:92:61:31:0a:
         4b:17:9e:8a:28:e1:bf:7f:57:59:ab:2e:bf:b7:3e:df:9b:72:
         34:ee:a7:80:85:40:38:58:f8:30:09:ba:4d:10:2c:66:6a:1d:
         fd:bc:31:04:25:a9:26:36:7a:bf:4b:71:d3:86:50:18:0d:c5:
         7b:b4:1d:da:a2:01:f2:4b:24:c6:21:a8:59:46:8b:78:e0:9a:
         c2:84:af:07:c2:d3:1f:29:b3:e9:b5:56:5a:b3:fe:2a:8f:44:
         fa:69:b5:c4:37:bf:ce:6b:41:8f:6f:3e:9c:d2:63:cf:3e:f2:
         c9:03:f5:ca:ce:99:ac:72:3c:fd:8d:6b:88:ac:56:55:57:43:
         d6:e4:44:fc:60:02:13:5d:95:7c:0e:15:2f:c1:b6:ac:7f:92:
         a8:43:f1:97:e6:3f:aa:e6:2c:74:ba:d6:fe:20:d6:f6:69:40:
         e4:2b:a5:51:8b:22:cb:fe:f7:0e:d1:53:11:2e:0d:ca:7f:a5:
         49:69:4f:3f:05:0e:6c:01:6e:0c:6a:8d:81:cf:ba:b9:43:a1:
         7c:18:c1:3f:d1:5d:89:2a:17:7c:07:c7:31:a9:54:69:a1:22:
         1a:ec:2c:3a:b8:41:bb:b2:d5:3f:8d:06:4a:68:f2:31:a5:4b:
         bc:2f:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:17 2026 by rpki-client