This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File:                     Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier:          BuyRfhnWMcx+8eZ932Cy3XlXekG+wlPzBYE0X59IMtw=
Subject key identifier:   D2:F3:30:27:17:35:34:06:03:8C:3F:27:9F:AE:2A:84:98:5E:2D:7D
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       02DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number:          02DA
Signing time:             Sun 25 Jan 2026 00:31:26 +0000
Manifest this update:     Sun 25 Jan 2026 00:31:26 +0000
Manifest next update:     Sun 01 Feb 2026 00:31:26 +0000
Files and hashes:         1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: QRXZ+BGzbZpfmdj5khmVqdz4C9nh1Q9WCb4Kf33bcpU=)
                          2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: xcEo5ZEds1+7lHb6kjHbxyhxfOhLVoaBRTvNwgY9oCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Jan 25 00:31:26 2026 GMT
            Not After : Feb  1 00:31:26 2026 GMT
        Subject: CN=6975645e-102f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:eb:10:73:e0:43:ac:aa:54:c8:9f:49:16:
                    c0:61:55:17:ba:67:14:12:97:86:db:a1:1a:c9:3f:
                    24:97:51:6c:7a:be:1e:f1:38:31:83:22:9f:43:19:
                    4d:cf:67:8c:7a:6d:aa:18:8e:d2:b6:b7:83:1c:70:
                    58:a2:07:6b:c5:7a:31:10:0f:ad:d6:d4:27:5f:5c:
                    01:ad:ad:ad:33:9f:64:f7:99:79:5c:02:59:bf:ee:
                    d3:e8:f8:a8:ff:cf:2e:8c:57:38:92:74:65:c6:b4:
                    a5:3f:43:fc:b0:6f:b4:f3:3a:3f:26:93:d3:12:8e:
                    69:e1:ba:88:42:fb:25:71:31:6e:c4:0b:d2:42:77:
                    54:8c:5b:f4:9b:f3:11:51:64:0e:d3:55:87:8d:a7:
                    51:77:4c:1a:74:af:73:ea:36:13:04:6a:d1:04:a2:
                    5a:bd:13:4b:b7:2f:31:14:eb:ae:c5:c5:a8:91:50:
                    b4:7f:92:94:c1:26:29:58:23:96:a0:d0:78:62:d1:
                    0b:1b:5f:7b:ae:35:9e:f2:29:ad:98:15:ec:f1:2b:
                    1b:d4:09:16:58:ed:12:32:3e:3c:71:4a:a3:89:27:
                    90:f8:58:82:1a:63:ef:e6:e1:8c:13:f0:a5:b2:ee:
                    36:e9:c7:fa:5e:73:19:e8:68:c6:ec:78:73:d6:e5:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:30:27:17:35:34:06:03:8C:3F:27:9F:AE:2A:84:98:5E:2D:7D
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:87:63:e6:bb:55:77:b8:d2:8a:29:d2:ce:8c:e3:c5:47:2f:
         a0:ef:fe:ef:65:44:11:1c:25:02:41:63:da:d5:5c:42:a4:87:
         14:04:f2:bc:3a:7e:91:99:d7:ff:aa:4d:f0:25:61:21:41:d4:
         36:5c:13:91:a9:53:70:76:6f:8a:08:68:7e:8e:9e:e3:4f:2f:
         9f:c2:0f:17:6d:f3:be:53:fc:bf:be:ca:3b:c7:d1:dc:4e:15:
         ec:9a:b5:d7:3a:21:89:2a:a9:e0:2f:0e:9e:42:5e:9c:e1:24:
         cb:3e:aa:2b:ae:2b:00:39:eb:43:af:90:28:43:ba:7d:9f:6e:
         1e:c6:1b:98:76:ca:42:3f:6a:e0:40:78:c1:92:87:f9:a7:fa:
         01:61:70:2e:73:ac:50:b8:78:b0:b4:8b:7b:fb:d9:30:cc:45:
         fe:22:28:3a:4f:e8:68:36:c6:bf:a6:b9:1c:85:81:c2:2e:89:
         cb:a6:ba:6d:b4:d1:d6:58:42:65:38:11:99:71:11:6e:29:ef:
         1d:9f:33:d6:d8:15:d1:63:78:9b:41:af:3a:21:63:2f:1c:c4:
         4c:1b:71:06:cc:e2:4b:79:18:c6:6a:c4:a1:7e:87:a5:74:53:
         8e:4c:ce:34:43:81:09:7a:f5:b1:b4:74:4e:a9:83:06:7c:55:
         69:bb:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:04:48 2026 by rpki-client