This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
File:                     F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json)
Hash identifier:          1zJbdqfMutb05UC8GLa1/AqqRFbMoHlKKqX68vEs51Y=
Subject key identifier:   86:52:7F:69:09:95:7A:C9:AB:F1:73:B4:90:43:46:C3:D8:58:0C:18
Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
Certificate issuer:       /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
Manifest number:          24
Signing time:             Sun 25 Jan 2026 06:46:47 +0000
Manifest this update:     Sun 25 Jan 2026 06:46:47 +0000
Manifest next update:     Sun 01 Feb 2026 06:46:47 +0000
Files and hashes:         1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: Yl/GO1GEn2ptgQCT6ZSLyllvcMVULt2+kKd5uGxOz38=)
                          2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: qXETRU+GynJDK8p52SWay/hILThEiMclY+eMG2SJhMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
        Validity
            Not Before: Jan 25 06:46:47 2026 GMT
            Not After : Feb  1 06:46:47 2026 GMT
        Subject: CN=6975bc57-c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:95:b6:03:cc:6c:8a:85:6b:35:a8:2e:f6:
                    e5:85:c3:d6:03:93:cc:dd:60:4f:1c:a1:0b:e9:b0:
                    b5:65:bb:b3:7a:c5:81:e4:7d:2d:e9:77:95:8a:f8:
                    c9:59:3f:06:75:e3:9d:99:b1:e5:82:e8:68:2e:83:
                    55:c6:5e:8d:3c:16:bb:c9:e4:36:32:b2:15:53:aa:
                    c6:80:ac:99:db:fb:b7:08:9a:5c:a5:45:7e:07:4c:
                    80:1d:29:ad:b0:a8:03:f4:fd:bd:62:16:35:94:5a:
                    f8:2c:d2:3d:b5:88:08:a7:ea:78:d2:ce:7c:07:e1:
                    a1:9a:1d:4e:38:b4:7a:95:30:56:92:79:2a:92:ef:
                    0f:38:4a:96:c6:ef:38:2c:61:84:39:15:3b:51:ca:
                    a0:03:fd:5a:8c:9e:01:5a:34:82:0d:17:f5:79:e5:
                    e0:dd:2b:e8:6b:c2:41:77:89:f4:a3:4c:ff:ed:82:
                    64:fe:fa:7d:85:e2:38:33:55:04:aa:12:38:a2:ae:
                    84:98:f8:3f:37:d2:07:8f:52:49:96:19:37:87:19:
                    cf:53:9f:ae:85:11:12:dd:eb:cc:5d:80:97:c6:39:
                    e4:6d:85:16:1e:e6:c3:6f:b0:77:c1:3f:f0:1d:32:
                    de:7b:62:90:ee:1e:df:26:df:60:a6:7f:9a:3b:5f:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:7F:69:09:95:7A:C9:AB:F1:73:B4:90:43:46:C3:D8:58:0C:18
            X509v3 Authority Key Identifier:
                keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:2e:8f:35:4d:31:98:47:63:e5:49:2b:a2:a5:21:14:10:
         15:38:14:1b:29:9f:65:51:c8:b6:99:2d:c8:83:22:2c:4d:e2:
         c2:59:cc:14:2c:6f:b1:96:11:ee:70:a0:b7:7b:ef:00:b0:d4:
         a3:ca:e0:d2:ae:3c:ec:64:9f:5f:79:1c:71:3e:0a:16:c9:89:
         97:dd:9f:2d:19:7d:60:b5:81:68:e9:3b:0d:1e:01:94:2f:3d:
         dc:8e:0a:4e:e8:0c:c0:89:2f:7a:03:2c:3d:a7:d6:f5:37:ef:
         25:04:f7:ed:2c:77:6f:52:bc:64:59:88:40:68:e3:0e:f1:3f:
         25:22:a0:ae:53:cc:ae:7d:15:b9:af:4e:17:04:18:49:5e:d0:
         2e:55:7b:51:09:e9:b9:a7:8a:dc:1f:18:75:16:5b:b3:5e:7c:
         89:2a:37:56:e3:6f:c1:31:cc:99:ee:ed:ff:14:61:51:9f:33:
         d7:4c:93:56:7c:8b:97:44:09:57:a7:cb:05:73:1a:ec:62:a4:
         55:ae:99:93:4a:9a:0f:d3:e5:d9:c7:fa:0e:fb:2a:9a:1c:11:
         5c:0e:b3:ba:b3:18:45:50:73:56:37:7b:68:2b:d4:f6:68:f0:
         c3:23:7c:aa:32:c2:ab:b5:fa:a3:6b:b0:14:4e:09:4a:b7:25:
         5a:2d:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:41 2026 by rpki-client