This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File:                     -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier:          edAQod6fzdwXyXBlTTviUTK8v82EIkJzjGZmGTNzY+w=
Subject key identifier:   1E:B8:8B:77:36:C1:22:02:FF:A5:15:A4:B5:0C:8B:A8:A1:B6:90:F2
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer:       /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number:          010F
Signing time:             Sun 25 Jan 2026 04:14:21 +0000
Manifest this update:     Sun 25 Jan 2026 04:14:20 +0000
Manifest next update:     Sun 01 Feb 2026 04:14:20 +0000
Files and hashes:         1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: ploqKFigGz+Fe0YbDGPhVcsFq4I+JIPomjLMPHjQswA=)
                          2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: V41vD109qFi79qtSI0V3NbHmJv38JNXS4Cmmah3H2Gs=)
                          3: DF6D4464818211F097447962C4F9AE02.roa (hash: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
        Validity
            Not Before: Jan 25 04:14:20 2026 GMT
            Not After : Feb  1 04:14:20 2026 GMT
        Subject: CN=6975989c-68da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:71:7e:82:b1:9c:78:63:cd:0c:10:42:8e:
                    b7:97:90:64:a5:31:54:de:0c:11:d1:d2:a5:16:f9:
                    50:34:00:0b:aa:3b:50:19:38:1d:8b:da:57:22:80:
                    69:a1:3f:c2:d6:00:bf:45:6e:40:ec:14:f7:7e:9c:
                    80:1d:55:e8:e6:3b:fd:24:dd:a1:67:40:23:e6:ce:
                    b6:d3:3c:7f:cd:96:fa:6d:be:bd:b4:28:1d:8f:b9:
                    56:e5:58:a2:2a:8e:fc:60:93:76:fd:5c:0c:57:57:
                    07:e5:3c:1b:e7:e9:73:b0:c7:ba:a6:f0:cd:a6:25:
                    07:a7:f5:ee:4e:a9:de:d0:de:06:42:27:b9:66:6c:
                    11:a8:f3:36:e3:e7:62:23:88:9e:38:74:46:b9:a2:
                    25:00:c8:d3:0f:cf:04:00:48:a4:80:3e:64:e0:14:
                    4a:bc:32:e0:93:6a:49:40:0c:33:3c:12:10:91:08:
                    82:5e:c4:57:48:cb:d9:6c:36:95:cd:6c:0c:ab:d3:
                    08:2a:43:b9:65:64:ad:00:2f:eb:bc:1d:f2:de:aa:
                    4c:f2:eb:49:e4:31:da:5b:25:7a:c6:58:6d:48:ce:
                    d0:0b:51:cb:b7:4d:a8:b5:82:0d:dc:d7:c1:e5:d4:
                    f4:f9:e9:28:b9:77:85:25:0e:f0:86:98:a1:35:c9:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:8B:77:36:C1:22:02:FF:A5:15:A4:B5:0C:8B:A8:A1:B6:90:F2
            X509v3 Authority Key Identifier:
                keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:bb:7e:64:06:19:c3:78:12:0c:e8:a9:7a:3d:07:d1:d3:
         3c:c9:8b:63:04:fb:c7:eb:c8:22:90:26:0a:e3:aa:a5:b2:60:
         63:15:7e:bd:24:ef:ef:78:a7:b8:37:7b:2e:8d:29:d7:49:ba:
         a7:dc:ce:3c:53:c9:b3:3e:10:e6:d7:6a:3b:a2:83:7e:72:e4:
         2f:62:fa:63:74:93:3f:c1:a0:bd:af:de:a1:7d:08:fa:1c:83:
         21:7f:d4:17:6e:89:e6:55:40:75:40:8e:dd:65:9f:f7:01:01:
         8b:02:06:32:3b:8b:e9:b1:d8:5f:57:73:98:01:52:af:c1:3a:
         98:d2:7a:e8:ff:60:1f:2f:36:5a:2d:49:c1:e9:67:4c:7b:b6:
         c6:47:01:16:a8:f3:df:b6:56:18:cf:68:4c:bb:63:88:c8:49:
         8d:1a:6a:ed:31:86:25:80:8f:e1:0b:4a:9d:ac:73:90:d8:a4:
         ba:6d:8d:37:5d:c8:d0:8d:58:a5:37:f1:59:b2:b2:5b:35:4a:
         bc:4e:5c:7e:a0:db:0d:8c:4a:f7:30:c5:10:70:bd:7d:10:b0:
         66:ed:d0:b8:1f:66:13:09:73:4b:83:33:0a:ac:39:76:dd:d4:
         6a:9b:12:df:84:7c:f8:23:df:be:85:50:4f:6d:60:a5:bb:04:
         f1:3d:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:25:21 2026 by rpki-client