This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
File:                     McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json)
Hash identifier:          Mn27xcMMalayDS9yOQjIs2pDOslWuQoh8azbchnl04s=
Subject key identifier:   18:57:A1:EE:FF:34:98:1F:2B:67:71:06:C1:D3:59:C2:55:7A:C4:64
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Certificate issuer:       /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
Manifest number:          01A6
Signing time:             Thu 01 Jan 2026 02:52:57 +0000
Manifest this update:     Thu 01 Jan 2026 02:52:57 +0000
Manifest next update:     Thu 08 Jan 2026 02:52:57 +0000
Files and hashes:         1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: AAJ1fG6J7aqhvKYXBVgoNOPltf6z+DdEVr29v4nPbOo=)
                          2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 02:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
        Validity
            Not Before: Jan  1 02:52:57 2026 GMT
            Not After : Jan  8 02:52:57 2026 GMT
        Subject: CN=6955e189-929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:02:3e:ac:16:dc:4b:b4:af:59:f2:dd:17:
                    97:17:30:58:cf:b1:4b:24:2d:08:98:4c:9e:cd:b1:
                    63:93:09:88:68:da:6f:28:e9:52:e6:a4:2c:98:4c:
                    04:60:64:8c:00:57:c6:83:62:ef:e4:94:50:6d:11:
                    77:c6:a6:e4:ad:b9:c5:21:9f:33:ad:fe:5d:68:1e:
                    d6:f2:7f:8a:b5:83:cc:14:3a:95:bd:5e:64:8e:65:
                    57:d0:66:73:94:9a:bd:c5:ac:76:34:e8:90:ce:25:
                    95:0d:cc:81:13:88:fc:ac:a2:34:33:5d:7f:ee:c0:
                    30:d5:1b:6d:1e:41:4c:69:4b:79:4e:49:2f:f9:49:
                    cc:85:7d:37:d8:8d:3b:5a:14:1e:a7:94:ff:23:c6:
                    f9:de:8b:26:f0:57:0d:3e:1a:72:cd:10:6b:cf:09:
                    62:5d:6a:5f:ed:42:0e:0c:3d:d4:e4:cc:8e:1d:e0:
                    43:22:d5:3c:b0:f4:e8:85:9e:bd:67:31:a8:7b:00:
                    44:51:97:93:9b:7b:55:3c:54:8b:01:e4:f2:aa:50:
                    69:53:72:a1:3f:7c:71:bd:54:8c:af:23:aa:92:19:
                    11:14:4a:1b:f5:b9:87:fa:1b:a3:73:d7:ee:23:f7:
                    ac:e1:ee:54:a0:ea:e5:07:45:33:16:61:80:9b:3a:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:A1:EE:FF:34:98:1F:2B:67:71:06:C1:D3:59:C2:55:7A:C4:64
            X509v3 Authority Key Identifier:
                keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:15:56:95:d4:f9:66:db:98:35:d7:14:37:dc:ce:47:ca:f1:
         4d:2c:b7:2c:c3:0a:1e:71:2e:00:a0:f4:11:d6:73:cc:02:da:
         db:d3:50:b3:08:64:6b:1f:d2:4c:90:7b:d0:e2:5d:07:3e:50:
         a9:47:35:7d:fb:c4:3d:37:e0:48:d7:4f:11:a7:f4:aa:35:41:
         c3:0b:1e:6f:64:84:94:c3:bc:27:23:53:e5:38:9c:d9:ef:88:
         a0:48:ad:2d:66:66:e9:2a:f5:2d:a2:8c:0e:cd:88:90:be:ef:
         07:71:c9:41:b5:7f:ef:92:73:e0:bd:97:15:34:4b:74:4f:be:
         b5:63:e0:65:e4:53:5e:d9:a9:61:b0:cd:54:17:21:c9:08:78:
         4b:98:56:3c:cb:56:8c:94:44:00:78:a4:65:df:5f:24:e4:21:
         49:41:2c:5f:ab:75:e9:e7:4f:8a:9b:bb:3b:07:3f:9a:34:22:
         97:bc:bf:53:ec:9e:09:92:e6:ff:e0:82:fa:20:75:94:5f:c5:
         c9:a8:51:f8:f9:dd:31:00:76:4a:27:87:0f:63:fb:60:41:be:
         ee:83:e1:5f:77:a6:ed:ca:b2:96:09:74:82:58:26:7f:f6:ae:
         91:32:bc:64:00:73:34:d9:80:64:80:f5:49:54:7a:10:c1:13:
         f0:5b:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:03:40 2026 by rpki-client