This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File:                     7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier:          bc73KKvWoUi3EcJ2nrh2nJkPOXBf19qbjXKsaO6kxY8=
Subject key identifier:   14:1D:64:AF:0E:24:31:2B:C4:4B:20:E6:17:ED:6F:B0:BD:C9:D9:FD
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer:       /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial:       0B00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number:          0AF9
Signing time:             Sat 10 Jan 2026 18:52:25 +0000
Manifest this update:     Sat 10 Jan 2026 18:52:25 +0000
Manifest next update:     Sat 17 Jan 2026 18:52:25 +0000
Files and hashes:         1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: dIFeRiupx8ntNp2f5Vd5fb4qzrMfJUC+s4L+GvT3VOM=)
                          2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: mhhZShl5Y7yfZL9fAMr71xIHefsahB4URe/Sx9ZtMPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2816 (0xb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
        Validity
            Not Before: Jan 10 18:52:25 2026 GMT
            Not After : Jan 17 18:52:25 2026 GMT
        Subject: CN=69629fe9-0ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9e:e1:3e:dc:3b:e7:9d:3b:d5:17:0d:a0:4d:
                    f4:19:c3:8f:c7:7b:92:b1:7c:08:b6:11:b5:fd:a0:
                    e4:72:77:68:be:fe:ce:11:31:86:5a:2d:fa:95:0e:
                    31:29:3b:7c:2d:32:28:50:e3:37:52:ec:ca:fe:42:
                    03:d5:6a:c5:22:66:94:b8:91:53:d3:70:10:3d:4d:
                    11:81:14:a5:1b:70:da:de:3c:88:9c:30:0a:44:75:
                    70:14:ff:34:b2:14:d4:4d:77:03:4d:68:0a:ac:c6:
                    6e:bc:1a:ed:1e:a2:ae:31:a6:db:38:73:17:04:2c:
                    24:09:8b:30:99:7b:19:ef:86:c1:12:00:93:a4:f1:
                    be:6d:d7:d8:89:f4:22:5c:a3:ce:4d:b1:89:f3:ab:
                    e1:29:47:01:0b:fb:74:f7:cb:b5:fe:39:f3:0f:df:
                    1c:7f:6e:ae:85:c8:57:55:23:3b:0e:b7:30:76:27:
                    be:08:30:6e:54:54:96:c7:8d:de:34:6d:4d:58:91:
                    2a:98:20:cd:66:f0:e2:8f:7d:c2:f1:97:06:21:30:
                    11:56:51:f0:38:3c:17:4d:4d:15:53:3b:53:66:49:
                    f4:36:c1:80:5a:1b:a9:6f:f7:9d:de:77:06:e2:da:
                    97:e9:b5:7e:8c:ea:cd:d1:09:21:89:2f:33:3f:b3:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1D:64:AF:0E:24:31:2B:C4:4B:20:E6:17:ED:6F:B0:BD:C9:D9:FD
            X509v3 Authority Key Identifier:
                keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:ef:ab:e1:ba:e2:46:f8:d4:9f:e9:79:f7:fa:d1:8e:77:
         5d:69:96:39:ed:79:9a:a4:f8:d6:a5:49:30:da:03:5c:ec:39:
         e2:a7:95:1d:41:d5:6b:d8:d4:45:d4:01:51:b0:f1:3c:54:13:
         e6:4a:fb:2b:56:f7:63:0f:19:53:58:d9:ca:52:98:91:22:42:
         58:a2:88:11:db:61:6e:af:96:9b:5a:4d:84:70:00:67:ca:1c:
         5d:89:11:5c:16:79:1c:08:e6:9c:e7:11:17:28:11:12:3e:70:
         23:4b:80:91:27:fd:03:91:d4:70:32:3c:82:03:eb:a1:2e:0c:
         ea:b6:0e:bd:72:47:8e:6a:d2:bc:ef:33:c9:0d:d6:f3:35:66:
         9f:00:48:71:c1:41:75:5e:cf:93:84:e4:53:5d:ca:98:3b:d6:
         32:17:d1:01:f7:f1:29:f9:9e:75:f2:70:1b:28:36:42:41:a9:
         a2:c5:6f:5d:aa:05:48:72:1f:c5:df:57:dd:49:e5:17:af:38:
         f3:4b:ad:95:6f:72:80:c8:df:47:1b:df:3f:f5:15:aa:c5:09:
         a0:bf:b1:47:75:65:e8:80:28:cb:12:c9:6d:73:04:99:27:88:
         b0:20:8e:6e:ee:fa:4c:0f:a1:f1:9a:92:89:7a:2d:03:3e:72:
         03:41:fc:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4
NzJFNEIzOTYwHhcNMjYwMTEwMTg1MjI1WhcNMjYwMTE3MTg1MjI1WjAYMRYwFAYD
VQQDDA02OTYyOWZlOS0wYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6p7hPtw755071RcNoE30GcOPx3uSsXwIthG1/aDkcndovv7OETGGWi36lQ4x
KTt8LTIoUOM3UuzK/kID1WrFImaUuJFT03AQPU0RgRSlG3Da3jyInDAKRHVwFP80
shTUTXcDTWgKrMZuvBrtHqKuMabbOHMXBCwkCYswmXsZ74bBEgCTpPG+bdfYifQi
XKPOTbGJ86vhKUcBC/t098u1/jnzD98cf26uhchXVSM7Drcwdie+CDBuVFSWx43e
NG1NWJEqmCDNZvDij33C8ZcGITARVlHwODwXTU0VUztTZkn0NsGAWhupb/ed3ncG
4tqX6bV+jOrN0QkhiS8zP7OR3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQdZK8O
JDErxEsg5hftb7C9ydn9MB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC
QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w
eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFmu+r4briRvjUn+l59/rRjnddaZY57XmapPjWpUkw2gNc7Dnip5Ud
QdVr2NRF1AFRsPE8VBPmSvsrVvdjDxlTWNnKUpiRIkJYoogR22Fur5abWk2EcABn
yhxdiRFcFnkcCOac5xEXKBESPnAjS4CRJ/0DkdRwMjyCA+uhLgzqtg69ckeOatK8
7zPJDdbzNWafAEhxwUF1Xs+ThORTXcqYO9YyF9EB9/Ep+Z518nAbKDZCQamixW9d
qgVIch/F31fdSeUXrzjzS62Vb3KAyN9HG98/9RWqxQmgv7FHdWXogCjLEsltcwSZ
J4iwII5u7vpMD6HxmpKJei0DPnIDQfw9
-----END CERTIFICATE-----
Generated at Mon Jan 12 03:53:40 2026 by rpki-client