This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          KgGjAfd4V3sujgXHl11jTk183x1yS15npfwgHmSmVEI=
Subject key identifier:   80:10:29:55:64:1A:8B:AF:71:D6:70:ED:6E:67:E9:BC:85:F7:2D:B2
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          024D
Signing time:             Sun 11 Jan 2026 00:59:14 +0000
Manifest this update:     Sun 11 Jan 2026 00:59:13 +0000
Manifest next update:     Sun 18 Jan 2026 00:59:13 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: VctxGSUz4yx56OvRdEzfhhPacMCSXBrPOOB3MSD164k=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: RTJgvsbwzmrs85A6QasoAHRw5V84DsstoScVFoVQEIM=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: rtm7vvm7OiRTQ81QyLkzE6dolT8d+wgU5NT1/xcizMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Jan 11 00:59:13 2026 GMT
            Not After : Jan 18 00:59:13 2026 GMT
        Subject: CN=6962f5e2-7369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:c6:b6:eb:e6:c0:81:df:3c:53:f1:77:bb:
                    3d:05:50:f3:06:9f:6a:e3:9b:a4:d1:f0:ff:da:8f:
                    5d:0c:2a:b7:1b:ed:98:94:c7:19:23:e4:a3:8a:db:
                    eb:2c:96:6c:ce:1c:77:0f:36:4b:96:ef:c4:94:42:
                    1f:9b:86:56:e8:eb:2d:b0:39:d9:71:58:27:75:15:
                    10:42:a5:67:b2:68:4b:4d:17:15:97:47:c9:f4:94:
                    66:77:4f:de:9e:ff:bc:62:20:90:98:76:1e:40:cf:
                    83:73:de:94:23:d4:16:fb:27:d7:85:0f:62:00:c5:
                    f5:dd:66:83:c1:7a:6e:18:fe:ec:9d:da:23:4e:3e:
                    dc:f2:8a:41:e1:dc:77:13:08:12:20:c5:c2:2e:59:
                    ec:8d:28:6a:98:eb:75:36:ea:e2:52:d8:98:5e:cb:
                    9f:cf:f2:86:9e:20:95:bf:19:8b:3c:ca:62:40:6e:
                    10:72:77:46:67:2e:32:3f:d0:7c:2b:be:48:46:5c:
                    2a:23:ed:6d:5e:e5:c8:4f:46:ec:ff:28:d8:86:75:
                    2f:a3:64:bf:70:a6:f5:a5:f7:4e:b5:8e:33:7a:6f:
                    97:20:80:cb:e7:dd:67:56:2c:81:1a:53:ac:48:60:
                    56:03:a1:42:69:5f:38:ec:aa:bb:fd:6c:ae:be:6d:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:29:55:64:1A:8B:AF:71:D6:70:ED:6E:67:E9:BC:85:F7:2D:B2
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:77:dc:f2:12:68:66:46:07:c2:98:b8:6f:bb:72:96:56:
         f3:a6:af:cb:2d:3b:5c:58:84:99:52:67:a9:12:bf:10:31:fd:
         d2:ca:78:cd:e2:ca:1c:76:fe:e7:95:d8:81:5d:7e:a9:ea:78:
         d5:b6:21:5b:3b:6d:83:31:b1:5c:32:2d:a2:67:cb:49:97:93:
         e7:d4:22:27:20:0f:0b:7d:08:5f:d4:df:48:28:9c:b9:13:13:
         0f:ac:d4:7e:e9:c4:11:d7:19:64:ac:81:e1:3d:fe:f9:c5:e1:
         ca:91:e5:77:cc:0e:5e:3e:7b:9c:71:10:90:b7:24:54:f5:6d:
         73:8c:95:2f:b4:87:b0:6f:ec:1c:68:ff:f7:92:c1:fe:11:a0:
         c1:83:7e:b1:ad:20:0c:06:82:77:c9:eb:91:42:1f:94:87:f9:
         4c:66:3a:7e:01:5c:cf:2a:0c:16:f1:14:90:68:99:10:2a:0a:
         8a:fb:63:f2:4d:fd:a7:c4:14:59:0d:a4:64:01:52:e0:18:73:
         31:d3:0f:11:a4:dc:bf:56:26:d4:75:2d:41:f9:a0:cc:b0:74:
         7b:93:ca:aa:3f:7b:f0:02:08:63:e8:32:7d:c2:39:c7:c1:e0:
         ac:d9:f8:89:f7:f3:2d:e8:1d:11:52:d0:f4:f6:72:6f:b0:97:
         fa:c8:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:43:43 2026 by rpki-client