This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          cOAPsu1uqNJZVm7OtSz147JI9e3CSg0O3bfJUntONjc=
Subject key identifier:   65:42:F0:4D:53:F3:69:60:50:3C:FE:2A:DA:D3:C6:80:4C:91:D4:72
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0C8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0C87
Signing time:             Sat 10 Jan 2026 18:05:51 +0000
Manifest this update:     Sat 10 Jan 2026 18:05:51 +0000
Manifest next update:     Sat 17 Jan 2026 18:05:51 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: FAj9v6HD7YuAMFdPLm27+Y/QzXtc5erII3gPX4a4xys=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 18:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3214 (0xc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Jan 10 18:05:51 2026 GMT
            Not After : Jan 17 18:05:51 2026 GMT
        Subject: CN=696294ff-daad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:99:7f:d3:f1:fb:e7:64:d6:1d:c6:52:5f:
                    f3:aa:ec:06:a0:54:20:9f:cd:ef:21:2f:19:42:03:
                    b0:0b:8a:58:84:46:00:e3:cc:f3:8b:86:12:3b:b7:
                    39:22:37:03:bd:3e:be:e7:8a:08:25:a8:1c:39:9b:
                    3a:ca:32:91:ff:b7:1e:fd:61:b0:60:70:3d:3b:f7:
                    a2:d4:de:e2:e2:92:c1:2d:ae:05:b8:d0:4b:a0:5b:
                    a4:d2:cc:8a:f7:ec:17:7c:29:38:e5:67:36:34:5a:
                    67:07:a9:1c:10:7d:08:69:ef:50:ec:a8:c5:5c:56:
                    4e:24:b0:79:2c:b3:0f:c8:ad:71:21:d0:c5:aa:f3:
                    25:4b:ea:df:3d:64:75:34:a5:85:f8:c8:0a:b7:79:
                    bf:c1:e7:e9:9d:53:b7:ad:cc:bd:71:bd:d0:26:2e:
                    5a:c4:1c:ac:eb:3a:a2:0c:1f:2b:bc:d3:9b:9b:09:
                    1a:8d:35:75:7b:15:a0:d1:82:33:8c:76:c9:1f:07:
                    1f:d2:98:45:07:04:6d:62:ca:e1:b5:a8:a7:3b:95:
                    ab:92:cd:18:92:17:9a:85:d2:05:92:91:14:a3:4e:
                    d6:c1:9f:b0:52:64:c2:24:44:31:80:e2:bb:c0:a5:
                    3e:79:77:a1:c4:fd:05:90:59:2e:60:b4:ca:ef:27:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:42:F0:4D:53:F3:69:60:50:3C:FE:2A:DA:D3:C6:80:4C:91:D4:72
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:98:a1:b2:1a:b6:80:8b:9a:87:80:f7:0e:ee:47:1f:2a:
         d6:e6:a7:fd:8e:ed:0b:61:00:7b:6c:be:d9:bc:b3:d6:c2:24:
         ae:1d:11:5a:a8:a0:24:48:39:f1:9e:b2:a7:9c:67:99:08:73:
         e9:d3:f7:f6:bd:08:a5:d5:83:30:7e:72:9c:94:88:6d:d1:64:
         af:8d:07:1b:57:d2:33:a7:b9:ca:9d:bf:db:9b:2b:35:83:e3:
         6b:ce:77:e8:38:b1:71:ac:a1:7c:aa:0d:f3:3d:48:af:de:7b:
         e8:0b:aa:8b:e8:41:8d:35:0b:fb:30:45:2c:d3:d4:79:73:6b:
         1f:22:23:81:be:70:21:90:3d:cd:28:6e:cb:46:63:7f:51:28:
         1b:d6:1c:6b:17:32:8b:1c:47:3f:b0:28:56:4a:e8:85:b8:b8:
         f5:c1:75:f4:19:b3:48:79:18:e2:3f:a2:68:f1:c4:3f:b9:45:
         ab:02:36:c5:b6:49:39:22:51:d7:61:43:e9:1a:7e:5e:0b:ee:
         90:af:d5:65:ed:b5:08:c7:8a:c8:e3:6d:00:fa:d7:09:06:bc:
         f5:d6:64:7a:b6:04:ee:d8:00:7f:d9:51:a8:22:7d:8a:5b:20:
         b4:99:61:20:83:e4:43:12:98:67:8f:0f:cb:c9:09:71:e9:5b:
         c1:d6:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:18:21 2026 by rpki-client