This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File:                     inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier:          0k+S34QqzEomWCwjimAAMKjJApsbo4pbOihE5xU0O/0=
Subject key identifier:   E7:64:7C:82:40:65:E3:29:D4:16:09:24:20:22:63:2B:84:B1:29:1B
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer:       /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial:       1C8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number:          1C6C
Signing time:             Sat 24 Jan 2026 16:00:32 +0000
Manifest this update:     Sat 24 Jan 2026 16:00:31 +0000
Manifest next update:     Sat 31 Jan 2026 16:00:31 +0000
Files and hashes:         1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: eznYRZXfIUylHom2/8//XNHtERArLRbzNDvWgLwaGJc=)
                          2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: uaA0kWTzcnom/FHL/7PrgUw7WfZhLTYeYBPn8V/EpBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
                          rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7309 (0x1c8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
        Validity
            Not Before: Jan 24 16:00:31 2026 GMT
            Not After : Jan 31 16:00:31 2026 GMT
        Subject: CN=6974eca0-0917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:cc:ff:1e:4b:7c:1f:3c:4a:ab:4d:46:3a:
                    a6:6c:96:55:d5:ee:f8:b9:8e:11:5c:2f:ac:99:42:
                    42:bc:05:b8:b8:d0:5a:10:fa:64:4c:6a:64:90:f9:
                    35:b6:18:c7:2c:f6:99:a9:df:aa:8d:d0:41:90:43:
                    79:66:ba:a8:ba:57:c0:c8:3f:db:3d:1d:c0:47:e7:
                    bb:07:5c:18:3e:61:92:06:15:f6:29:d1:58:ee:33:
                    26:a6:33:d6:94:8f:d5:26:99:7f:68:53:0a:91:20:
                    f0:17:17:99:ec:9b:d1:d4:4c:96:ea:ce:59:9c:b3:
                    c0:3f:4e:e6:f4:58:43:ec:b3:72:09:0a:52:d5:27:
                    17:a0:34:bd:4b:9d:a7:d0:c8:42:ba:7f:a9:95:5e:
                    af:17:c7:16:75:81:44:3f:f2:40:30:77:3d:67:39:
                    15:1a:64:b6:97:66:ab:ff:9f:98:87:00:27:1e:fa:
                    ff:eb:b9:3b:76:03:d1:6a:d4:a6:06:ec:db:14:f2:
                    ea:b7:2e:74:69:94:c8:29:a6:47:9a:8d:ea:9c:0c:
                    fd:cb:9a:c4:07:00:94:00:04:57:cf:b7:45:bf:e2:
                    53:79:4a:6c:80:58:6e:b6:e0:57:2a:27:ef:cb:98:
                    51:47:c3:eb:3b:b8:c6:a3:97:3f:1a:ff:f0:07:79:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:64:7C:82:40:65:E3:29:D4:16:09:24:20:22:63:2B:84:B1:29:1B
            X509v3 Authority Key Identifier:
                keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:90:ae:d6:0d:f2:98:64:02:66:61:f3:b0:5e:a1:6a:bb:06:
         f9:0e:99:24:15:fd:75:d3:09:95:44:e3:72:a4:af:d6:53:b9:
         1e:b0:87:97:02:00:28:5c:2b:9b:ed:a6:c5:a5:d6:52:8c:50:
         b9:50:8e:59:7d:48:ee:82:0b:de:2d:99:41:88:49:30:43:6c:
         59:c1:5f:bc:17:3e:37:37:cd:73:64:a5:6b:0f:6b:4c:9e:13:
         29:b2:73:2b:1b:f6:b0:74:b6:94:84:d4:e7:7b:16:63:4c:86:
         0f:8d:ea:7e:dd:13:ae:1e:d7:4f:b9:dc:36:79:f3:8a:36:ce:
         5f:ff:4e:be:30:ef:4d:32:0a:d4:68:1b:4e:ea:f2:91:55:71:
         e9:6c:c6:a1:0c:11:97:f3:50:3e:a6:21:c9:93:34:03:56:a5:
         fc:42:0d:4c:2e:2c:48:1f:e7:f9:01:ce:e2:1a:7d:2a:46:90:
         3f:09:db:19:4a:db:f0:18:d6:ce:48:11:16:91:f2:71:bc:c4:
         bc:92:27:d2:e3:f2:71:db:08:66:8d:24:2a:1e:0c:c6:00:4d:
         e7:af:04:32:b9:5c:58:7a:a0:30:8e:9f:17:71:b8:cc:03:c7:
         f6:9b:f8:bd:01:98:03:44:d0:4a:89:dd:5f:f0:44:98:ce:95:
         1e:b1:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:44 2026 by rpki-client