This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File:                     P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier:          rBALhOgHB+igknnr1SDCfg4FpurhBQ2Qg4meyTp6aZY=
Subject key identifier:   03:4F:C4:6B:75:F8:B0:D7:65:0B:C3:DE:5B:7C:11:C6:A9:9A:41:AA
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer:       /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial:       0826
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number:          07EE
Signing time:             Sat 10 Jan 2026 20:49:04 +0000
Manifest this update:     Sat 10 Jan 2026 20:49:03 +0000
Manifest next update:     Sat 17 Jan 2026 20:49:03 +0000
Files and hashes:         1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: ap51c5iHCCPpHYR/akdBEoTxFpuGfqWOYp/I4L3KaiI=)
                          2: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: ZpwyPiCXkjRXO4ZSTXQ+QaUgc/jpAAvEAS4GzmeP7h8=)
                          3: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (hash: tLiTzUDyKzyyz6n9FViLxVBECTwcq4mKzuqGNpHQJM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
                          rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
        Validity
            Not Before: Jan 10 20:49:03 2026 GMT
            Not After : Jan 17 20:49:03 2026 GMT
        Subject: CN=6962bb40-0189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:0d:5b:3f:b7:c7:89:9a:d7:2f:17:61:8f:
                    45:0b:fd:81:b0:03:2f:85:5a:2a:ec:2a:ca:03:7d:
                    53:6c:1e:d4:64:84:1a:95:99:3a:c6:a2:1a:67:0d:
                    c3:8e:90:1d:b3:f6:e8:47:74:83:c1:30:86:c1:60:
                    ef:ed:fa:6a:91:e7:fd:63:9b:51:35:bf:91:09:70:
                    a8:10:1c:93:f4:83:d7:45:9b:30:93:25:6c:f1:a8:
                    cf:06:8c:72:ce:ed:9a:54:44:91:b4:eb:26:ad:98:
                    e4:e5:74:9d:2e:9f:b1:11:6c:d4:a7:ca:65:10:7f:
                    a1:d2:4e:31:da:20:cf:b6:28:d4:f4:13:ee:cd:d1:
                    79:7d:34:90:88:a5:1c:a3:a8:c0:e8:19:6c:10:0f:
                    65:6e:41:f2:96:69:dd:fa:db:d0:9e:6c:34:0a:00:
                    af:98:55:43:ba:84:ba:1b:55:35:ac:7b:96:e8:89:
                    b0:39:33:af:57:58:5c:c2:ec:ce:cb:8b:55:35:87:
                    23:6d:a5:2b:c5:72:29:60:5d:de:da:4f:ee:23:66:
                    b2:5b:b6:64:c5:e3:13:a7:55:1a:21:41:0f:de:98:
                    af:87:95:d3:35:ee:17:c2:c8:52:d1:f3:4e:63:5e:
                    2a:67:5d:7f:0c:ff:62:23:df:ff:87:48:bf:39:5b:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:C4:6B:75:F8:B0:D7:65:0B:C3:DE:5B:7C:11:C6:A9:9A:41:AA
            X509v3 Authority Key Identifier:
                keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b4:a5:34:31:22:9d:fd:96:f7:29:4f:1b:d3:f4:a8:06:93:
         4a:7f:6e:79:b6:96:ef:f3:c0:db:6e:a7:68:5d:b8:3a:9d:d8:
         1a:22:2b:cd:d7:02:17:ac:a6:4f:ba:1f:39:19:0b:89:f6:e5:
         6b:10:e1:bd:7c:0b:5c:43:36:c1:4b:f9:c6:11:75:bf:c3:03:
         21:0c:96:5e:da:80:05:af:8f:24:f7:b3:99:ac:c6:e9:bf:5c:
         de:a6:49:ce:ad:64:40:59:ca:1d:d0:8a:90:9b:d0:3b:60:ea:
         3d:a0:17:c2:13:03:1c:43:5a:fb:9e:67:bf:7b:26:3d:13:b4:
         a0:f6:4d:b3:a2:4e:aa:02:fa:21:ae:46:92:dd:fd:c3:34:92:
         77:01:5c:cd:b3:39:53:23:22:3d:1e:ed:40:52:c8:7c:9a:8c:
         18:e5:26:77:5b:43:39:b7:7f:b1:0f:69:2e:fb:8e:69:5d:c4:
         2b:11:7e:0b:27:d1:ff:49:90:92:11:37:2f:ba:ec:86:eb:81:
         5d:08:d5:88:66:b0:b7:42:69:70:c1:6b:d5:ac:7f:d0:c1:23:
         60:8a:47:ab:6c:1c:59:20:f2:e0:1a:3b:1a:da:cf:d3:d3:28:
         0d:34:04:be:f1:2a:40:00:6c:cb:66:67:4b:b7:fd:84:2f:b3:
         31:5b:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:41:42 2026 by rpki-client