This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
File:                     mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json)
Hash identifier:          7dzw+7kX2dHpgNchkapY6vo4NdHMgmDVkoJYqja2HiY=
Subject key identifier:   84:19:C3:53:64:A3:EB:2F:16:B0:50:72:3E:DB:36:80:FA:80:9E:8F
Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
Certificate issuer:       /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
Manifest number:          18
Signing time:             Sun 25 Jan 2026 06:55:30 +0000
Manifest this update:     Sun 25 Jan 2026 06:55:30 +0000
Manifest next update:     Sun 01 Feb 2026 06:55:30 +0000
Files and hashes:         1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: EaErCb37aNGfZ8Tj3/577e01aPDlhPr8ELfBRSvCx04=)
                          2: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: cnu2jvpz6VuTwHgFw7Z5D84LK7BDcNMaOVaG50JEGUE=)
                          3: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: D81DSvORE+T8JlZrt9j4gBVy+u4hLWZ+jPLU48Kviw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
                          rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
        Validity
            Not Before: Jan 25 06:55:30 2026 GMT
            Not After : Feb  1 06:55:30 2026 GMT
        Subject: CN=6975be62-2fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:ad:e3:9a:b9:2d:ef:62:c9:d5:a2:fd:08:
                    b2:e9:97:e3:a7:c7:16:77:b7:5c:d0:62:d7:bb:62:
                    50:44:b3:e0:8b:8d:8b:c1:d8:08:02:0b:17:11:3b:
                    82:51:e8:45:29:82:2e:8d:7d:e9:11:2f:1a:7d:6f:
                    e4:44:de:c7:21:bc:eb:a2:f6:0c:4f:9a:b0:be:5f:
                    d2:71:80:4e:d7:02:50:ed:ec:eb:7f:61:e2:9b:f5:
                    17:1b:74:fc:c9:66:84:40:ec:98:c6:19:32:1b:c7:
                    40:46:28:68:8f:66:50:8c:8a:80:5c:b1:29:1a:61:
                    68:1d:21:e2:b3:71:9d:91:28:1f:86:87:b8:c5:34:
                    fe:3f:19:84:62:a4:05:a0:f9:c1:b2:a0:40:e1:33:
                    e8:34:66:8b:6e:6a:6a:e9:95:76:d7:c6:b5:2f:6f:
                    0e:43:68:ac:7e:89:c3:6f:b7:81:66:1a:4d:2c:b8:
                    b8:25:5d:a1:77:1a:e3:0a:f0:31:aa:33:33:d7:f8:
                    01:c0:dd:15:00:67:78:4f:63:47:12:52:bd:b7:3f:
                    11:93:b0:d7:f8:ff:f6:e7:fa:66:a4:ae:73:cc:35:
                    af:19:b1:c2:e8:f7:1b:15:27:06:38:bc:61:4a:b7:
                    7e:96:68:07:ad:31:c6:9f:ea:07:2f:97:82:60:00:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:C3:53:64:A3:EB:2F:16:B0:50:72:3E:DB:36:80:FA:80:9E:8F
            X509v3 Authority Key Identifier:
                keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:f2:ce:1c:00:57:4c:9b:83:32:33:9a:04:60:02:1c:79:
         64:8c:09:71:a5:7e:c4:4f:4d:d9:bf:f0:be:51:3d:70:b4:17:
         80:ba:53:a0:ad:e7:f5:aa:72:b9:d0:44:c7:fd:86:1b:80:db:
         41:83:ce:ff:6d:7d:95:6f:9e:00:69:35:38:49:e9:90:88:35:
         c7:ce:69:4c:a8:cc:73:07:f4:e0:2e:55:ad:bb:ee:aa:94:01:
         d9:69:4e:e7:2a:5c:33:8e:2c:e5:1d:68:91:39:21:12:6e:e2:
         bb:53:dd:9d:b7:74:7c:85:92:24:96:7b:6b:a6:ae:45:28:f1:
         d2:f8:80:8a:a6:14:c5:63:4c:71:60:25:f6:40:c2:59:47:4e:
         56:12:5a:f7:e3:f8:d1:f0:06:be:8c:fb:ab:d6:62:38:6d:1f:
         85:25:ac:1b:b2:f7:c0:2f:bf:f0:ac:14:94:1f:6e:54:de:79:
         75:dc:ba:c6:b2:96:0e:a4:f4:56:97:54:9f:ef:9c:cc:55:cf:
         99:52:b9:81:44:3b:13:ee:95:bb:0b:52:5d:2e:8f:49:0a:b9:
         a5:0c:44:fa:ef:91:d5:c7:2d:6d:15:8d:a2:25:24:d6:24:d4:
         15:23:7e:33:d9:78:96:78:9c:fd:ef:07:a5:93:96:26:b2:df:
         be:e3:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:37 2026 by rpki-client