This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File:                     br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier:          gcff6Qx1h8bnTJUdkj2eQRK0GiHewflFnbrxgiPU7jM=
Subject key identifier:   9E:A4:CB:E5:C6:8E:97:58:7F:EB:03:99:3B:46:7D:34:63:11:4C:78
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer:       /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number:          0B37
Signing time:             Sat 24 Jan 2026 18:52:49 +0000
Manifest this update:     Sat 24 Jan 2026 18:52:49 +0000
Manifest next update:     Sat 31 Jan 2026 18:52:49 +0000
Files and hashes:         1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: VYPKZ9GwQFAZuVsBS8rx/4KC/2HqCm2FsiaNRO63Myk=)
                          2: 121EADE62F7011EF82514126C4F9AE02.roa (hash: Ggk4L4L5OqKbvJnFw7W1rW5JJcN5Zt+SHJCIjJMSok0=)
                          3: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: 5eFto7Xbd6SIdBIgHT1gzsw1kP93cMF3mG+IAAtdNqA=)
                          4: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 5Zn/NXgpFmO6vwefOP5YQZGHnsLFk/qGC1rRCPIC8NI=)
                          5: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: day2QfsK2GhqNsQUlv32u5aYAMW/wnELuNVvZR1uSgU=)
                          6: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=)
                          7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 6RbxNEp3aAcRY9ABgjcNbqmStmri8VA4rw2gNzJyQ34=)
                          8: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: +GeY+3nzfxfGGtkbBKDt2xX2WXjnwHUxE0t1JDRZXWg=)
                          9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: DeDkGdsN3N2xX3gJk6DxRPzTQe+BgFZ1qo1jOWYyHBQ=)
                          10: 3061606C730211EE89A20645C4F9AE02.roa (hash: WeaTbMf7BP2O/+pSf493EUl2h+/ILCKWUynSWVLQ+8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
                          rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
        Validity
            Not Before: Jan 24 18:52:49 2026 GMT
            Not After : Jan 31 18:52:49 2026 GMT
        Subject: CN=69751501-67bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:7e:8f:5d:97:74:19:29:b8:9d:5c:2b:3c:
                    8e:ec:9e:38:ac:e8:f0:63:8c:d4:26:c0:a2:93:60:
                    1b:fc:c6:98:b6:94:76:55:a1:e1:1b:b0:44:9f:32:
                    e8:8b:fa:73:17:6b:47:55:74:d2:e8:52:6b:78:65:
                    25:21:16:8f:b4:92:cc:80:1d:3b:70:75:3f:0d:de:
                    ec:27:de:ab:eb:9c:9b:79:7b:88:df:44:7d:6f:e5:
                    f2:c1:ba:04:d1:9c:77:dd:9f:00:70:50:a4:5a:9f:
                    af:e7:26:ab:69:32:c4:e9:d0:25:63:9a:b9:15:f1:
                    12:58:ef:84:ae:4e:49:d6:85:da:8f:1d:d1:40:1a:
                    bd:b5:e0:01:39:a6:d4:ed:af:70:e9:bb:91:22:b7:
                    e9:23:4d:54:b9:6a:27:f4:5f:bf:e1:78:88:c9:3a:
                    e5:8d:a2:94:b9:c5:e6:fd:e7:bc:90:b7:00:7b:58:
                    bb:5c:b7:d2:a0:ed:60:d3:79:86:b0:66:07:22:b3:
                    49:1c:93:0e:22:a5:d5:c6:64:94:18:62:ca:34:06:
                    1c:37:66:35:66:02:bc:75:aa:6a:b7:86:92:98:9d:
                    fe:de:a1:8f:2a:a6:5a:8f:cb:2f:a8:62:4e:80:a4:
                    e9:38:49:14:89:56:3c:80:45:8d:73:ad:7f:98:e1:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:CB:E5:C6:8E:97:58:7F:EB:03:99:3B:46:7D:34:63:11:4C:78
            X509v3 Authority Key Identifier:
                keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:56:74:82:8a:84:39:61:47:8e:5f:12:4c:42:59:f6:8f:
         01:a2:62:8f:bf:17:8a:0f:10:97:57:15:6d:4d:31:3a:57:e9:
         e1:5d:3a:ed:58:f5:37:18:b1:ca:c0:8d:5b:d4:ee:88:1c:18:
         91:0a:c2:6e:dd:67:44:1f:c7:37:3e:03:a8:2b:1c:47:58:80:
         fc:35:3c:2e:56:25:11:d7:20:90:b8:6d:ef:92:d2:53:64:ab:
         b1:6e:8d:b2:29:a7:58:8d:ed:53:7a:71:0b:92:4b:23:74:df:
         b8:0f:00:96:65:73:4a:7a:28:f2:9b:7c:fa:b9:40:b7:b3:10:
         5d:79:89:58:2e:14:f7:76:fe:3d:c9:81:06:6e:a5:87:2c:24:
         30:26:3c:e6:cc:fb:c4:6d:79:21:0a:b9:00:9d:a2:1f:2d:63:
         93:12:80:e4:23:e9:50:e6:df:a6:c8:a6:ce:a8:96:27:ea:a8:
         30:91:24:24:4b:f9:d3:c1:73:5b:2a:a1:5b:fd:44:19:21:49:
         cf:33:4f:f1:54:51:b2:b0:94:9f:22:35:db:53:56:23:f0:97:
         9d:cd:fb:7a:03:01:34:e5:1e:54:b7:14:d8:f3:5c:8a:28:5c:
         ff:46:13:15:0a:d9:4f:58:7b:a2:c4:06:6c:5a:e4:1b:9f:a9:
         0e:e8:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:32 2026 by rpki-client