This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
File:                     V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json)
Hash identifier:          i8ZAoJDHdUrqT8Gf0ZO4AFYwRLk68xmAMlPkxyXoH1E=
Subject key identifier:   3F:E0:9E:42:9B:DE:F4:DD:43:34:37:A9:32:99:53:75:5E:23:95:74
Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
Certificate issuer:       /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
Manifest number:          6D
Signing time:             Sun 25 Jan 2026 06:04:02 +0000
Manifest this update:     Sun 25 Jan 2026 06:04:02 +0000
Manifest next update:     Sun 01 Feb 2026 06:04:02 +0000
Files and hashes:         1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: tdkcsJGOw8z3hmMeb5G38ibtryDdYrDTeHDbZz7ao4c=)
                          2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: I9mTloe+CBVyT9j1b2vknypKCm7MYiUBGA2nLvqI+nE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
        Validity
            Not Before: Jan 25 06:04:02 2026 GMT
            Not After : Feb  1 06:04:02 2026 GMT
        Subject: CN=6975b252-6633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:92:84:71:ce:49:f5:78:a5:4c:22:92:e7:
                    e7:78:6d:41:89:3d:1f:b3:50:0e:b5:20:db:2c:91:
                    41:ec:5c:e8:54:4e:b9:fb:24:a5:69:53:49:87:8c:
                    0a:5a:fe:7e:39:8c:06:fb:ff:fe:fd:13:f6:7c:45:
                    69:89:c1:93:fe:cf:0a:31:24:32:87:ee:af:34:be:
                    d7:e4:e6:e4:4d:71:79:42:65:78:f9:54:1e:b2:ee:
                    0e:0a:bd:33:84:ed:8d:24:6d:1c:44:0b:e9:6a:2b:
                    2f:b1:da:6e:4b:ec:c9:7f:4b:a0:3b:fc:4a:cc:02:
                    98:90:ee:42:53:f6:bb:b1:5f:0b:09:ed:58:f0:71:
                    82:ba:bc:c2:a6:0b:b2:1f:c7:1d:2a:9a:99:36:47:
                    8b:44:45:d7:22:a8:5a:3d:3b:16:8b:56:bc:cd:c8:
                    b8:80:01:0f:d9:7f:1c:93:74:0b:30:17:71:d3:8a:
                    09:a6:e1:8a:8a:58:23:c6:d6:bb:e8:b6:79:a3:b9:
                    c1:a5:cc:c3:5a:c9:f3:7a:aa:8b:8a:b4:52:d4:13:
                    67:66:ae:da:cb:1a:5c:48:05:0b:52:4d:03:77:44:
                    84:85:2f:f8:c6:a8:24:69:f0:28:84:fc:6b:55:4c:
                    75:c1:f9:76:20:cd:9f:83:92:e7:eb:59:d0:bd:61:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:9E:42:9B:DE:F4:DD:43:34:37:A9:32:99:53:75:5E:23:95:74
            X509v3 Authority Key Identifier:
                keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:56:d2:0a:36:e7:2a:e7:3e:2d:57:8f:ec:fd:81:52:c1:
         98:02:96:4c:ea:c4:52:e2:ba:c6:4d:2a:28:68:2a:4b:66:69:
         0c:71:5e:1b:6a:f6:6b:2b:cb:ac:5e:df:93:08:f1:36:2f:e1:
         77:fb:4c:93:fc:af:51:37:f7:21:ce:49:15:1a:e5:ea:86:a4:
         94:35:b2:38:c4:40:87:a5:55:5c:31:c2:ea:bb:b3:79:22:7e:
         9d:24:e0:c5:1d:28:dd:97:5c:0b:7c:e2:91:92:02:7b:35:55:
         37:89:2f:3f:f8:d4:e3:4d:31:60:64:d1:86:89:42:bc:78:fb:
         a8:67:5d:4a:80:26:27:b1:31:0f:e2:d0:73:26:e0:63:a9:f7:
         ba:2b:70:61:56:8c:6c:d5:8b:48:70:dc:20:27:d8:3c:42:da:
         f8:a0:9f:98:2c:09:4d:aa:49:e4:48:c0:90:b4:55:c7:7e:2d:
         17:a9:4f:50:a9:b4:fe:76:bd:ab:45:93:b9:5c:84:7f:39:ae:
         1a:c4:14:97:ed:38:cc:71:d3:b2:ef:99:41:3f:96:6a:89:ad:
         a7:85:91:94:24:35:ca:a6:45:ad:91:5c:79:dd:af:f4:ff:72:
         5f:81:f2:c2:22:7d:47:a3:82:34:2d:8a:8f:fd:ea:a3:6d:e3:
         9d:ed:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:22:12 2026 by rpki-client