This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
File:                     7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json)
Hash identifier:          GMq/2G1H702NE7p5uJUL8OF6jQE7LOnIqjGRooG4Hl8=
Subject key identifier:   EE:1E:72:A2:1C:8B:BF:51:E3:5F:EC:B7:79:53:BC:BD:CE:3D:A4:D9
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Certificate issuer:       /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
Manifest number:          0164
Signing time:             Tue 13 Jan 2026 03:12:36 +0000
Manifest this update:     Tue 13 Jan 2026 03:12:36 +0000
Manifest next update:     Tue 20 Jan 2026 03:12:36 +0000
Files and hashes:         1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: p/FPFm3xw6eG0UKOF9rN+e5MZhjNt2sp+cPNW8n68uU=)
                          2: 905F46DEE05A11EFA20EC133C4F9AE02.roa (hash: NVqWotupuz8BWtoYreL5BX+y3xeJG+CMVF0kE4qkEmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
                          rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 03:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
        Validity
            Not Before: Jan 13 03:12:36 2026 GMT
            Not After : Jan 20 03:12:36 2026 GMT
        Subject: CN=6965b824-d9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:5f:b8:88:e4:58:7a:0e:1c:cd:2a:b4:c9:
                    94:1a:12:60:34:d9:bd:bd:32:db:61:d6:5d:db:16:
                    14:26:99:3b:5f:57:cc:c3:e9:04:22:d6:56:7d:c6:
                    db:b2:68:64:e8:94:06:5b:ad:db:b2:cf:81:b5:36:
                    c3:14:52:91:66:b3:62:79:23:45:b0:07:d2:7a:21:
                    57:4e:5a:44:77:ad:a4:99:5f:65:91:5c:5b:5a:4d:
                    2e:f0:df:6d:8f:96:68:3a:3f:94:3b:a0:f7:37:af:
                    df:e1:c3:b8:b8:64:15:5b:ca:56:50:49:3e:7a:7e:
                    f6:26:c2:af:53:b5:a9:75:ec:46:85:13:9c:06:e7:
                    88:82:c1:5d:1b:c6:2e:90:34:40:c0:67:02:a7:32:
                    2a:a1:b0:1e:ae:fc:be:b8:20:11:ea:16:a7:aa:1b:
                    e8:3c:29:8b:44:8a:9d:dc:2a:e7:db:08:4f:1c:ff:
                    63:c8:9b:68:6f:6e:86:bd:d2:89:d6:76:90:90:b6:
                    30:ff:77:d0:38:d9:08:ef:bd:76:1f:6e:14:34:3a:
                    5f:07:36:4d:7b:fd:6c:e6:bb:a9:48:4a:24:66:b0:
                    4b:79:27:6e:6a:36:60:08:df:36:46:6a:e7:b7:4b:
                    ca:bd:55:c8:a1:44:28:0f:cb:70:2e:67:dd:a3:f8:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:72:A2:1C:8B:BF:51:E3:5F:EC:B7:79:53:BC:BD:CE:3D:A4:D9
            X509v3 Authority Key Identifier:
                keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:3e:13:14:54:68:5b:18:23:39:f9:4a:d7:03:0b:6a:86:
         f7:c7:20:eb:c4:88:e1:a1:f4:2d:cd:bf:77:1a:54:cc:cb:a1:
         e3:32:c9:bd:ba:c7:fe:96:c3:94:2a:11:cb:c6:c6:54:91:9d:
         6f:c1:a1:e6:97:a3:f3:00:f5:5d:c2:9c:fa:4d:b1:51:6e:4b:
         0b:72:ae:65:a1:a1:f7:49:3d:c0:78:70:be:9d:1f:51:64:7a:
         d8:2d:f0:68:f2:34:85:49:f9:54:46:47:61:aa:ee:8a:78:61:
         13:aa:a8:36:b0:32:63:48:08:1f:93:d4:24:f2:6c:40:39:fc:
         ae:21:82:50:df:c8:2c:b5:06:30:65:52:86:b2:af:00:d2:e3:
         c9:70:d2:57:d2:95:ea:6f:7b:f7:66:57:9f:9a:c9:88:89:e1:
         30:22:cc:06:87:27:ca:f0:6f:62:4b:ad:e3:a3:b2:0a:93:7b:
         4c:4b:09:8e:08:0a:62:8b:35:3d:f5:22:53:8b:51:5e:56:fc:
         04:a3:02:9b:04:53:b1:a4:b8:1e:36:38:7d:14:55:2f:06:0d:
         de:37:29:f0:a9:ae:80:b6:35:2e:4a:1f:52:d0:e9:3d:75:c7:
         c1:64:fd:4c:e4:5d:23:62:bb:d4:b5:5d:4b:74:5b:f6:1c:eb:
         da:3c:32:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg4MDYxMTAvBgNVBAUTKEVEMUU2M0M0Q0E4NTIwNEVDQkFEMjZDRTJDOTQ2MjY0
NUUwQjFDQUQwHhcNMjYwMTEzMDMxMjM2WhcNMjYwMTIwMDMxMjM2WjAYMRYwFAYD
VQQDDA02OTY1YjgyNC1kOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtR1fuIjkWHoOHM0qtMmUGhJgNNm9vTLbYdZd2xYUJpk7X1fMw+kEItZWfcbb
smhk6JQGW63bss+BtTbDFFKRZrNieSNFsAfSeiFXTlpEd62kmV9lkVxbWk0u8N9t
j5ZoOj+UO6D3N6/f4cO4uGQVW8pWUEk+en72JsKvU7WpdexGhROcBueIgsFdG8Yu
kDRAwGcCpzIqobAervy+uCAR6hanqhvoPCmLRIqd3Crn2whPHP9jyJtob26GvdKJ
1naQkLYw/3fQONkI7712H24UNDpfBzZNe/1s5rupSEokZrBLeSduajZgCN82Rmrn
t0vKvVXIoUQoD8twLmfdo/g53wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4ecqIc
i79R41/st3lTvL3OPaTZMB8GA1UdIwQYMBaAFO0eY8TKhSBOy60mziyUYmReCxyt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODgwNi8zOUQwODdBQUQ2
OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklFN0xyU2JPTEpSaVpGNExI
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODgwNi8zOUQwODdBQUQ2OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklF
N0xyU2JPTEpSaVpGNExISzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtOD4TFFRoWxgjOflK1wMLaob3xyDrxIjhofQtzb93GlTMy6HjMsm9
usf+lsOUKhHLxsZUkZ1vwaHml6PzAPVdwpz6TbFRbksLcq5loaH3ST3AeHC+nR9R
ZHrYLfBo8jSFSflURkdhqu6KeGETqqg2sDJjSAgfk9Qk8mxAOfyuIYJQ38gstQYw
ZVKGsq8A0uPJcNJX0pXqb3v3ZlefmsmIieEwIswGhyfK8G9iS63jo7IKk3tMSwmO
CApiizU99SJTi1FeVvwEowKbBFOxpLgeNjh9FFUvBg3eNynwqa6AtjUuSh9S0Ok9
dcfBZP1M5F0jYrvUtV1LdFv2HOvaPDIy
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:40:41 2026 by rpki-client