This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
File:                     7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json)
Hash identifier:          lWTIS6wjiGIfoO/2lBRmrOfnZOC3AFZMxeJvpCCpSC4=
Subject key identifier:   B6:F9:3A:4E:34:7B:B1:D5:CA:BD:60:B9:7D:DA:E0:D1:AF:63:C0:48
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Certificate issuer:       /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial:       0C01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
Manifest number:          0BFB
Signing time:             Sat 24 Jan 2026 18:23:53 +0000
Manifest this update:     Sat 24 Jan 2026 18:23:52 +0000
Manifest next update:     Sat 31 Jan 2026 18:23:52 +0000
Files and hashes:         1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: 5bMnKnY5cO+KtjTPpRDD4Xvo8Sg9TCrN0KVF+JruNyA=)
                          2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
                          rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3073 (0xc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
        Validity
            Not Before: Jan 24 18:23:52 2026 GMT
            Not After : Jan 31 18:23:52 2026 GMT
        Subject: CN=69750e39-6279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:51:74:88:92:34:3b:73:7d:d6:4b:cf:0c:
                    da:20:f3:5d:b6:cb:fa:dc:07:bb:88:bc:ad:57:04:
                    50:67:67:0f:3f:86:ea:7f:64:b1:e4:c9:bf:90:61:
                    74:a9:0c:86:ef:58:c1:a9:cb:9b:38:44:f9:72:2e:
                    21:3c:d9:79:f3:dc:b7:c4:d7:9a:71:5c:ed:b2:c3:
                    42:40:ce:24:aa:27:64:d0:dd:a7:40:3e:1c:6d:68:
                    1a:f1:c5:4d:71:0b:61:39:c8:71:8b:35:60:b7:af:
                    bf:10:5e:85:a6:f0:58:55:9a:61:60:8e:0b:15:28:
                    95:db:de:32:56:c7:b1:23:65:2d:6a:89:3b:3a:00:
                    35:92:a0:a6:ad:98:37:fd:a6:96:0d:04:9d:a0:7d:
                    ec:ff:33:5b:a5:cf:20:80:be:b8:e9:13:d4:38:b7:
                    4c:35:3a:85:94:38:6c:4f:a9:75:a1:bf:5c:de:12:
                    23:8a:0d:15:75:44:2f:bc:78:de:4b:fb:2d:50:71:
                    35:0f:aa:0e:56:bd:7f:56:b9:59:f6:b5:2f:57:fe:
                    9d:b6:48:45:d3:66:32:be:18:ec:c9:2d:82:b3:d0:
                    08:bc:d3:ad:a3:83:99:c7:67:dc:79:81:37:7d:dd:
                    b5:e8:96:0b:25:de:03:47:8b:9b:c9:a1:ff:55:7c:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:3A:4E:34:7B:B1:D5:CA:BD:60:B9:7D:DA:E0:D1:AF:63:C0:48
            X509v3 Authority Key Identifier:
                keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:bc:74:1b:15:fe:8b:6d:eb:cd:32:88:c0:f0:3d:6d:6d:
         dc:9a:25:f9:c4:1f:53:f2:ed:83:55:fd:14:d6:e0:ad:55:22:
         26:c3:86:21:1b:35:8e:f8:5c:5a:35:bf:54:d2:ac:93:96:4b:
         2b:e2:b9:d7:7b:6b:2e:22:f9:e8:cf:df:70:4b:62:0f:df:79:
         69:fb:37:39:5f:5d:f7:67:77:8c:11:e2:af:bd:ec:c4:2f:e7:
         f1:a5:f6:6a:38:40:7d:15:94:16:22:16:b2:73:1d:c3:12:4a:
         9d:9a:18:ad:7f:06:33:9b:b6:94:30:38:18:c1:ce:f6:29:ed:
         f5:25:34:fe:0a:3f:04:72:e6:a5:07:df:d3:b6:3a:54:16:48:
         e2:f3:bd:17:00:d4:c0:56:00:8c:96:ff:99:cc:f0:7b:cd:f2:
         c0:fd:dc:23:7c:9a:4b:57:59:c9:b7:e0:ad:76:a3:eb:ef:2b:
         35:57:f7:38:b7:b3:50:b1:7a:cf:ca:7b:29:03:92:4f:bc:69:
         16:4c:40:e1:99:f2:70:09:e7:91:f7:7e:93:6d:09:78:ed:b8:
         06:d9:f1:57:a2:88:b5:c6:05:40:b1:e8:e7:a4:cf:2e:a5:7a:
         7b:44:3b:9a:35:bd:cb:97:52:e2:fb:5a:dd:ca:8c:44:04:f2:
         b9:87:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:57 2026 by rpki-client