This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
File:                     elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json)
Hash identifier:          dLfTS7nupt2bBm0i105PRdCqxlFIrTxCSuz/M8MZ8rs=
Subject key identifier:   5D:3F:2B:07:C2:A1:06:7E:AA:24:53:C1:7A:0D:A3:6A:69:C2:CD:AA
Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
Certificate issuer:       /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Certificate serial:       07EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
Manifest number:          07DB
Signing time:             Tue 06 Jan 2026 20:44:19 +0000
Manifest this update:     Tue 06 Jan 2026 20:44:18 +0000
Manifest next update:     Tue 13 Jan 2026 20:44:18 +0000
Files and hashes:         1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: /2MRf/tKmvi0LEGGRsfuC71SlT0Jw0DIOOia84eNIc8=)
                          2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: dk2P7YS4UEzdhYSweMgpjO1Pw3svDbIzP68IGqk5fxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 20:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031 (0x7ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
        Validity
            Not Before: Jan  6 20:44:18 2026 GMT
            Not After : Jan 13 20:44:18 2026 GMT
        Subject: CN=695d7422-4eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:13:8b:ac:76:c6:b8:b5:3a:5a:a8:96:9f:
                    bf:0d:f4:8e:69:26:3a:ad:47:87:f4:b8:8a:86:8b:
                    73:b5:9f:10:9c:12:b9:91:2c:a8:1d:dd:e4:c7:45:
                    a9:d9:2d:86:8b:e3:83:3c:10:e0:32:b6:5f:e0:da:
                    64:a8:c8:3b:8a:2e:c1:29:a2:70:0b:b6:0c:c0:60:
                    fb:ab:f4:30:e2:67:05:cb:4c:d7:24:f3:8c:35:12:
                    6c:45:77:d5:9e:d3:c0:a1:9f:5a:4c:39:2b:a1:7f:
                    52:5b:b3:6a:71:02:43:d8:6c:14:42:77:c1:43:85:
                    2c:a6:86:2e:ed:9e:34:fe:58:cf:52:2e:6d:1c:21:
                    45:79:45:5d:df:f2:fa:5d:74:15:5e:96:db:c0:c0:
                    68:3c:fb:5c:cd:ab:a8:56:17:32:01:a6:e2:63:26:
                    15:67:d7:e2:cd:fa:1c:05:2b:09:d2:24:43:fc:28:
                    de:0d:2d:ee:1d:7a:ec:27:a3:31:49:cc:03:b2:da:
                    d4:e4:02:4a:19:64:d3:db:de:42:7f:7f:d3:fa:12:
                    f0:78:b7:21:52:a4:3b:90:ae:85:ae:18:c0:c5:bc:
                    a6:d6:3d:8c:d7:22:00:e6:65:6f:c6:f5:09:ce:43:
                    40:52:9c:9c:de:05:37:58:b6:db:19:fd:51:9b:7e:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3F:2B:07:C2:A1:06:7E:AA:24:53:C1:7A:0D:A3:6A:69:C2:CD:AA
            X509v3 Authority Key Identifier:
                keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:30:a5:6a:07:79:39:6e:88:24:da:7d:9d:56:26:80:dc:
         49:a8:ca:f3:71:c3:d2:78:bc:a3:2e:d7:dd:58:34:63:21:0d:
         1d:b7:52:59:f2:85:e8:1e:86:7e:60:61:77:60:78:64:02:f2:
         af:b9:6c:c6:12:e7:bd:60:04:b0:fb:ce:30:fe:ee:44:de:18:
         85:70:c4:e5:38:ab:2d:af:b3:b2:20:e6:d7:0b:26:47:bd:73:
         26:e9:54:43:5a:71:3e:9e:cc:64:ed:76:cf:c0:24:b8:6c:e5:
         a4:8a:5e:44:95:06:b9:21:9d:4c:bb:43:2d:55:b3:d1:da:0c:
         b5:dd:f1:55:54:65:7b:93:f3:62:93:8f:cf:e1:17:40:be:8f:
         cd:a8:12:bb:40:e5:30:33:fc:e8:26:91:e1:ac:8d:5e:9b:1e:
         13:d0:1e:f4:8c:5a:73:d0:5c:b1:95:44:fa:a2:af:57:38:81:
         e9:19:f4:15:f0:6e:85:90:ac:9d:2f:5f:c6:5f:1e:3f:69:1f:
         f2:d4:4b:f6:89:8e:9f:3b:b8:e8:5b:f8:75:7a:60:0f:79:da:
         64:86:a5:64:93:ed:b9:d6:54:0c:0c:75:48:6d:74:00:2f:a2:
         0e:b0:c5:63:85:bc:a1:30:40:49:5c:6c:ca:d8:4f:cc:7d:e0:
         24:43:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:24:57 2026 by rpki-client