This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          ITF4OCW8ncqfMq81GCgbCGb41PbvMRW2i/+GlkDw09Q=
Subject key identifier:   C7:86:6A:02:EA:FD:E4:21:14:49:CB:76:B4:46:E2:03:A2:44:27:FC
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          023E
Signing time:             Thu 01 Jan 2026 01:28:49 +0000
Manifest this update:     Thu 01 Jan 2026 01:28:48 +0000
Manifest next update:     Thu 08 Jan 2026 01:28:48 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: v9EEJqZZ5aRawvUIkWq7ZzrMhe2mcjHL/IoMOKyLKQ0=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 01:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Jan  1 01:28:48 2026 GMT
            Not After : Jan  8 01:28:48 2026 GMT
        Subject: CN=6955cdd0-d13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:40:31:06:c1:f2:b3:40:b6:7e:4c:3f:bf:
                    fb:25:63:0f:61:e9:9b:f3:20:68:1f:3b:ba:2d:65:
                    0a:d3:1d:6c:43:03:51:ab:c4:1c:01:20:74:3f:3c:
                    cb:7c:e6:15:37:96:7f:79:69:96:b7:1f:d1:16:33:
                    1b:49:e4:73:df:93:6c:35:65:05:43:a6:2c:00:47:
                    5a:87:9b:ac:a9:65:3a:f7:84:f3:ee:ac:f1:c1:3c:
                    a0:87:33:af:ae:0d:fc:54:b4:42:d3:a5:08:97:9f:
                    c1:7d:09:94:87:46:c7:c2:57:cc:02:e8:60:a1:eb:
                    78:f8:91:69:b2:dc:6a:2e:24:fe:e8:f3:96:e7:c7:
                    e5:0d:db:3a:e4:94:8f:e4:80:70:1b:4a:b2:57:e4:
                    2f:97:8c:3f:ca:3e:29:e0:6d:43:0e:f9:48:a7:ae:
                    4f:3b:dc:a2:83:cb:a1:c4:4a:c4:7e:a4:40:98:d2:
                    01:9d:fb:11:48:93:86:7b:38:4a:96:3e:ba:a0:b2:
                    1b:ce:a3:46:84:72:e2:42:f3:7f:4f:d4:e4:9d:08:
                    d4:32:d3:7f:79:d1:8b:ce:90:b0:29:54:53:2a:1d:
                    15:47:f1:80:88:20:c0:ed:5f:99:1d:b3:83:1b:49:
                    68:45:14:77:f2:7b:da:0e:9b:12:c2:90:63:18:f4:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:6A:02:EA:FD:E4:21:14:49:CB:76:B4:46:E2:03:A2:44:27:FC
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:63:2a:d6:19:bb:9d:d9:b7:2d:07:f2:bc:e5:03:23:48:58:
         5b:5f:90:07:9b:f8:26:26:ac:b5:69:3b:4a:d4:4e:1f:25:77:
         61:d4:6f:d1:cf:16:4d:de:8a:76:14:1e:25:41:81:9a:40:a4:
         15:de:81:10:13:db:7b:e6:d0:6c:9a:8b:30:e2:7c:27:ff:be:
         d2:e7:8d:16:d4:f2:2f:8a:74:d4:cd:b2:cf:61:20:84:b9:db:
         2a:8b:9e:37:3a:06:5e:89:d3:e5:0c:b6:20:b1:4e:91:29:f7:
         f6:ff:4f:57:e1:77:eb:d6:a8:17:3b:2a:dc:58:9f:83:61:7d:
         d0:15:41:e1:b3:fe:87:e4:0d:ee:e6:49:1d:86:3c:2d:54:77:
         b4:e4:fe:ff:90:15:f8:9e:24:82:b0:bf:06:6f:cc:d2:82:f3:
         62:c2:d9:57:a0:ee:e2:44:fa:35:d9:a4:74:13:ea:41:4d:d8:
         06:ab:ba:e3:e3:07:72:cc:2b:2d:5e:d0:d9:b2:f6:7b:5f:fa:
         22:13:be:7d:52:6c:3b:dd:58:cd:c2:1a:58:a4:18:17:4b:c1:
         d2:86:d5:7e:aa:f1:00:96:d9:04:ef:b1:1d:c2:c8:78:5a:b6:
         67:8b:b9:ba:a7:92:fa:d6:34:be:6b:0d:ea:4d:bc:6e:ca:c8:
         d2:e3:35:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG
M0E3MDRDNDAwHhcNMjYwMTAxMDEyODQ4WhcNMjYwMTA4MDEyODQ4WjAYMRYwFAYD
VQQDDA02OTU1Y2RkMC1kMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNxAMQbB8rNAtn5MP7/7JWMPYemb8yBoHzu6LWUK0x1sQwNRq8QcASB0PzzL
fOYVN5Z/eWmWtx/RFjMbSeRz35NsNWUFQ6YsAEdah5usqWU694Tz7qzxwTyghzOv
rg38VLRC06UIl5/BfQmUh0bHwlfMAuhgoet4+JFpstxqLiT+6POW58flDds65JSP
5IBwG0qyV+Qvl4w/yj4p4G1DDvlIp65PO9yig8uhxErEfqRAmNIBnfsRSJOGezhK
lj66oLIbzqNGhHLiQvN/T9TknQjUMtN/edGLzpCwKVRTKh0VR/GAiCDA7V+ZHbOD
G0loRRR38nvaDpsSwpBjGPTMiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeGagLq
/eQhFEnLdrRG4gOiRCf8MB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD
NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND
cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmYyrWGbud2bctB/K85QMjSFhbX5AHm/gmJqy1aTtK1E4fJXdh1G/R
zxZN3op2FB4lQYGaQKQV3oEQE9t75tBsmosw4nwn/77S540W1PIvinTUzbLPYSCE
udsqi543OgZeidPlDLYgsU6RKff2/09X4Xfr1qgXOyrcWJ+DYX3QFUHhs/6H5A3u
5kkdhjwtVHe05P7/kBX4niSCsL8Gb8zSgvNiwtlXoO7iRPo12aR0E+pBTdgGq7rj
4wdyzCstXtDZsvZ7X/oiE759Umw73VjNwhpYpBgXS8HShtV+qvEAltkE77Edwsh4
WrZni7m6p5L61jS+aw3qTbxuysjS4zV/
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:54:45 2026 by rpki-client