This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
File:                     7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json)
Hash identifier:          If3jWdrfOtE3q2RJYF5IzJm4i7j2oBmrHSirG8C3CLs=
Subject key identifier:   EB:72:29:14:8B:CD:CC:D3:48:BB:D9:85:B8:2F:75:D0:06:D8:BA:10
Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF
Certificate issuer:       /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
Manifest number:          06D3
Signing time:             Sat 24 Jan 2026 21:26:21 +0000
Manifest this update:     Sat 24 Jan 2026 21:26:20 +0000
Manifest next update:     Sat 31 Jan 2026 21:26:20 +0000
Files and hashes:         1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: s1iysqbwELCl1kkM+ZOR/OMGpH8spMaZqz2hpVhe8VI=)
                          2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: twDSchPdGzrqlLCoHP097W881rTgiSF0Kw2KrznKgJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl
                          rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
        Validity
            Not Before: Jan 24 21:26:20 2026 GMT
            Not After : Jan 31 21:26:20 2026 GMT
        Subject: CN=697538fd-9257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:c5:b4:a7:40:ad:fa:d1:65:1f:f3:cf:e6:
                    5b:14:68:3c:2c:db:04:4c:ea:fe:c6:70:1b:d2:b9:
                    9f:09:48:47:21:a7:d7:71:96:b2:81:8f:fc:31:64:
                    64:19:2d:6a:56:5c:7f:9b:fb:09:37:d6:24:a1:1c:
                    3b:fd:6e:b4:c6:de:31:24:9a:62:3b:9e:99:03:97:
                    d0:9e:fa:67:6e:41:4a:31:0a:0f:d6:8e:59:ca:a9:
                    90:23:9b:a7:ce:2f:fc:67:0f:58:d2:48:fa:42:38:
                    14:39:8a:93:a2:02:56:4c:7a:03:64:44:05:1f:e2:
                    a5:05:22:0d:63:95:2b:03:3d:a0:1e:74:3f:b5:77:
                    ff:58:15:d7:a5:7c:e9:04:4c:3f:d2:a0:81:ac:56:
                    0e:2d:11:27:e9:1b:61:7f:f8:06:65:c3:39:66:d8:
                    a1:13:05:52:fb:e5:44:de:d4:8b:b2:0b:07:52:42:
                    78:aa:92:e0:f8:ba:b3:50:56:b6:f9:7b:e2:58:bf:
                    22:a5:bd:09:05:bb:20:d8:60:da:dc:30:af:42:35:
                    c7:92:40:bb:a5:91:2a:c3:c1:93:0a:f7:10:37:42:
                    8c:59:ef:6a:89:72:a6:aa:ff:94:58:b9:c0:7b:bd:
                    78:09:e5:50:d1:b4:36:d0:b1:52:04:95:20:23:79:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:29:14:8B:CD:CC:D3:48:BB:D9:85:B8:2F:75:D0:06:D8:BA:10
            X509v3 Authority Key Identifier:
                keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:32:d5:56:46:53:bc:4a:13:75:57:36:e5:1f:09:84:46:0a:
         42:88:46:c5:8a:b9:ea:3b:51:bc:0f:a3:70:05:b6:f0:4e:63:
         bf:72:ab:fd:27:54:a4:b4:ae:54:15:70:88:c2:00:b3:4f:1e:
         db:69:e0:d1:d9:6c:e7:9c:d2:af:c2:e0:21:10:0e:d7:40:d6:
         50:f4:f6:10:64:28:44:f1:18:28:2d:cb:e5:59:19:fd:8b:44:
         87:3a:cb:84:de:58:dc:a8:70:0f:95:9f:21:f0:48:4b:a5:eb:
         9f:42:39:3d:e6:f3:1a:63:ef:b0:d2:94:89:b0:ce:56:c0:35:
         96:6d:1f:6e:3d:dc:f8:42:47:b2:cd:ca:d3:d4:2a:ab:5a:3b:
         a1:3c:07:bc:2d:0c:28:cd:7e:05:9b:2d:9e:b4:4a:da:f1:62:
         3b:18:3d:ad:60:34:d8:a5:b3:07:7b:c2:c1:96:5f:bd:1b:e1:
         3f:58:20:82:3b:4c:23:c6:db:b1:e9:c6:5a:b0:26:ee:36:a1:
         39:26:b9:a4:df:79:e5:e6:60:a3:9b:d9:65:5b:3f:5e:d6:fa:
         c7:50:36:bc:51:0e:41:68:f2:f1:e0:e6:19:5b:ab:05:f7:42:
         c1:4e:f8:51:ae:1d:ed:f9:d1:c2:92:33:5c:e5:70:f7:05:ab:
         0b:5d:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:19 2026 by rpki-client