This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
File:                     dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json)
Hash identifier:          EcHyBpLGL5jxnIhTU47Aiep9qvgTFKeS8MthHe/aXHM=
Subject key identifier:   61:42:D7:9F:E4:9F:47:D3:5D:C6:E7:5C:2C:73:42:BC:17:73:07:39
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Certificate issuer:       /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
Manifest number:          01E1
Signing time:             Sun 25 Jan 2026 01:59:21 +0000
Manifest this update:     Sun 25 Jan 2026 01:59:21 +0000
Manifest next update:     Sun 01 Feb 2026 01:59:21 +0000
Files and hashes:         1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: ZUMh/8oaGT5baxkmXveeFPfDPPWNYo3DYWY3b2HdoLk=)
                          2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0=)
                          3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
        Validity
            Not Before: Jan 25 01:59:21 2026 GMT
            Not After : Feb  1 01:59:21 2026 GMT
        Subject: CN=697578f9-d853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:2f:e9:68:b6:f3:80:19:a6:a5:82:5e:57:
                    63:fb:a0:d5:96:3e:d9:8f:1a:6a:dd:12:24:f7:23:
                    49:d8:2b:ca:43:31:a1:3c:3f:10:d2:c7:ea:16:89:
                    a8:ae:43:75:45:85:51:77:92:a5:8c:c2:9e:e7:3d:
                    8b:58:0c:dd:1d:93:7b:d7:16:cc:07:d6:cc:de:aa:
                    a5:28:98:8c:c1:73:40:ad:93:3e:4d:8a:a3:9c:e8:
                    d7:5f:01:28:71:b2:80:56:dc:86:a7:52:44:c8:f5:
                    cb:4e:79:46:49:ca:9d:2d:fa:70:c5:61:98:aa:ba:
                    cd:60:a4:a0:6a:0f:f2:35:8d:c4:52:55:24:88:a5:
                    6d:c5:4a:a0:1d:07:89:f4:98:78:c0:35:03:3d:80:
                    26:16:e3:b4:80:54:ea:41:1c:df:1e:c4:c4:40:d1:
                    8c:03:52:29:b5:c6:71:4c:a1:44:57:38:49:66:2e:
                    f9:97:96:9e:a0:0b:a6:13:6c:01:97:10:71:6d:4a:
                    f4:95:3f:19:a8:86:23:cd:1a:d6:e4:5b:18:48:03:
                    96:3c:1d:2a:f2:82:91:22:41:29:6b:e7:89:0b:d5:
                    6e:24:d3:67:a4:c3:f0:02:57:ae:fb:85:04:57:d3:
                    0d:60:b4:82:1d:8e:89:28:b5:f1:b9:a0:35:49:b1:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:42:D7:9F:E4:9F:47:D3:5D:C6:E7:5C:2C:73:42:BC:17:73:07:39
            X509v3 Authority Key Identifier:
                keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:51:92:6e:f3:3f:7b:5e:f6:3c:00:ea:92:9f:2a:de:16:97:
         77:e8:99:08:e6:4c:4b:4f:81:29:2a:ee:47:26:f0:ab:46:0d:
         18:89:89:24:6e:98:e7:16:6b:9e:d9:da:12:e5:d4:72:64:db:
         41:85:f5:4b:78:b3:7c:04:8e:18:9a:a1:ad:5c:3c:7d:c4:d9:
         59:4c:ef:42:f0:92:85:3b:eb:be:fa:84:51:b1:72:3d:53:db:
         a6:51:a6:10:7e:fc:95:29:ad:b4:12:94:bc:79:83:2d:71:82:
         8c:db:ae:cf:f6:ee:78:30:1a:43:48:2e:59:11:c8:35:6c:79:
         9a:61:1c:19:e9:04:49:a9:0b:59:61:82:05:31:41:25:0d:cd:
         b8:fa:d1:55:be:a2:7c:98:67:9d:f7:96:0e:e8:6b:9d:31:8b:
         47:5e:35:0f:da:20:14:4c:0d:12:e5:45:26:4d:fe:8d:df:c5:
         7a:73:aa:a5:85:dc:09:c1:ed:f1:9f:da:be:17:a5:5d:4c:1b:
         7d:49:2e:0b:83:38:8a:fb:ca:0b:9b:5d:87:bd:47:d5:15:16:
         8f:15:2f:88:b2:b4:2b:a1:a3:7a:05:b0:21:57:59:dd:31:5f:
         5e:97:9b:6b:9a:fb:d2:f4:e8:bf:92:1b:05:53:26:f8:cd:b9:
         aa:17:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:31 2026 by rpki-client