This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
File:                     7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json)
Hash identifier:          jrbCEbVJmQ5LvCng11kqReexy6L7MdKfZpxw+f0Pi5Y=
Subject key identifier:   1B:16:45:C4:E9:96:C5:EA:12:68:F7:ED:AE:0E:BA:AA:0A:1E:E4:94
Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
Certificate issuer:       /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
Manifest number:          0200
Signing time:             Sun 11 Jan 2026 01:42:12 +0000
Manifest this update:     Sun 11 Jan 2026 01:42:11 +0000
Manifest next update:     Sun 18 Jan 2026 01:42:11 +0000
Files and hashes:         1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: Z/9hfXaphZQr04RcuI8tHtyIuKqezVahYxOdNTBA7Lw=)
                          2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: hjXWWNVk9qeFLg+JXu1VxvXREeEeEZlGLduNQ3cBxlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
        Validity
            Not Before: Jan 11 01:42:11 2026 GMT
            Not After : Jan 18 01:42:11 2026 GMT
        Subject: CN=6962fff4-48f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:d1:b4:65:b4:a3:92:59:8c:d8:e0:fa:fb:
                    b5:f6:d2:90:2a:b1:86:71:92:a4:1d:8d:a9:7c:9b:
                    bb:f8:96:91:78:6d:91:08:fa:a3:83:25:35:eb:e8:
                    ee:f5:86:2a:44:89:e9:2f:74:11:8e:79:79:6f:ab:
                    90:ae:42:9f:a5:67:07:8c:7c:30:60:2f:98:b7:17:
                    71:2d:39:ff:35:2e:ed:1d:c3:41:67:df:62:ce:02:
                    9d:ba:6d:83:a3:aa:21:a4:04:a4:37:19:67:f4:d8:
                    94:d8:81:5a:30:92:21:a1:57:36:53:cf:54:f4:ba:
                    f4:54:81:2b:27:e2:a7:da:ce:6f:c4:92:48:83:df:
                    cc:03:f9:23:1f:e9:a1:c0:2d:07:31:38:4d:78:32:
                    3a:62:63:96:ff:e9:dd:8f:80:10:b3:3a:82:c4:34:
                    dc:d1:52:d5:69:7a:f7:d2:64:1f:f8:c5:e5:d8:b4:
                    65:d7:e9:42:e5:e5:02:c8:9d:a8:a1:98:47:b2:a2:
                    c9:40:9e:96:1d:f3:77:4e:47:c4:9c:f6:62:08:77:
                    29:7b:ff:13:2a:c8:ac:b1:90:e8:dd:d8:2b:23:08:
                    cf:16:fb:c7:96:2b:0b:18:79:92:da:b3:d8:4a:b6:
                    31:81:5d:7d:b8:ab:df:a8:ff:a5:67:ff:06:ba:1f:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:45:C4:E9:96:C5:EA:12:68:F7:ED:AE:0E:BA:AA:0A:1E:E4:94
            X509v3 Authority Key Identifier:
                keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:00:09:f2:96:96:cc:bc:77:19:5b:44:68:80:38:e2:56:
         78:fd:8a:04:1b:89:92:dc:cf:9a:5c:7e:07:4c:95:7b:c0:c6:
         42:91:4e:5b:68:f2:e3:fc:0e:e1:de:32:71:d8:1d:73:2e:4e:
         b1:ec:c2:7f:59:aa:4b:7f:07:47:6b:f4:bc:d1:d8:c1:f3:42:
         48:c0:30:15:fe:2d:6a:e9:79:da:50:bf:be:cf:e0:1e:14:88:
         98:e7:ed:95:65:6e:0b:04:c1:cb:6f:44:ee:77:81:46:14:c1:
         74:c8:c0:26:09:92:38:32:6d:3a:ba:cb:bc:5c:8b:61:28:f4:
         06:eb:f0:d8:47:e9:e2:e1:b7:f7:c7:ca:19:23:bb:63:71:87:
         65:e1:73:10:f0:81:2f:d3:f9:00:00:5d:22:f4:0f:f7:f3:61:
         e0:0f:82:8c:82:aa:f8:0f:8f:77:f5:56:6d:d0:6d:cc:01:fe:
         50:63:df:5a:0c:f2:95:60:da:9b:b9:00:17:fc:52:2b:ce:c2:
         a0:b1:60:9a:6c:89:41:15:48:01:fa:51:5d:7a:4f:15:82:58:
         11:30:4d:87:19:be:c5:77:90:20:ad:82:19:56:dd:3e:a4:3b:
         0f:88:76:b3:df:d0:c6:e0:c6:47:f8:62:1f:5d:9f:83:82:ce:
         2a:54:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:53:01 2026 by rpki-client