This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
File:                     e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json)
Hash identifier:          HTRmqPWD217Lu5VwdwmAJsEbOI7zekXTJpts5AjOEbE=
Subject key identifier:   35:22:B5:A6:FB:7D:AF:7A:8F:88:61:65:09:E8:30:7B:4C:FA:F9:41
Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5
Certificate issuer:       /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
Certificate serial:       06C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
Manifest number:          06B6
Signing time:             Mon 26 Jan 2026 21:36:04 +0000
Manifest this update:     Mon 26 Jan 2026 21:36:04 +0000
Manifest next update:     Mon 02 Feb 2026 21:36:04 +0000
Files and hashes:         1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: 4YiyUyGNevzw4GS9I04cg89+04L0fLxW5G0exwSZFps=)
                          2: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=)
                          3: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: pAV7viUmTMcSFkdd1syyomDPDhx4ELAs+EsIzTR52gE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 21:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5
        Validity
            Not Before: Jan 26 21:36:04 2026 GMT
            Not After : Feb  2 21:36:04 2026 GMT
        Subject: CN=6977de44-434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:c5:a0:cb:87:69:c3:e8:35:32:f9:48:cf:
                    e5:29:7e:fb:57:8a:0c:a1:7a:df:6d:39:dc:18:1f:
                    1e:e8:c2:a3:b3:52:88:1c:3d:12:b2:36:42:04:be:
                    f9:8f:80:18:46:f6:d4:64:65:66:6c:cc:74:23:a7:
                    38:6b:d4:ef:34:d0:77:7e:01:1f:ce:a4:ce:86:43:
                    6b:a1:37:27:29:70:d4:f1:9b:97:d0:7e:d6:a3:89:
                    c7:df:88:53:86:c8:6e:73:95:6c:6c:f5:65:bd:16:
                    66:d4:3b:9a:b4:44:6a:27:49:df:80:6a:89:23:63:
                    6e:65:c7:c8:c1:30:00:e4:19:e8:9a:58:ae:3d:cb:
                    4d:2c:d7:20:25:fa:1b:53:8a:8a:3f:26:7b:c7:96:
                    9c:e9:8c:d1:12:62:4f:79:89:79:32:5e:50:c9:bc:
                    a8:1a:2e:20:84:e2:83:75:38:7f:6c:c7:db:cc:f7:
                    02:8b:0f:f9:33:a8:a2:26:ee:d0:9c:4c:fa:3e:40:
                    88:71:e3:a4:d6:aa:61:89:17:5a:78:35:bb:f7:39:
                    e3:13:d7:e9:97:20:b7:21:0b:ad:3d:62:49:2a:12:
                    b2:14:cb:e2:14:2f:d5:3c:c9:69:fc:83:df:75:ba:
                    9a:ed:b1:59:4b:93:54:8d:08:ca:47:6b:93:ac:22:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:B5:A6:FB:7D:AF:7A:8F:88:61:65:09:E8:30:7B:4C:FA:F9:41
            X509v3 Authority Key Identifier:
                keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:33:4d:f1:5a:6d:73:f8:80:fc:85:25:49:fc:99:3c:db:4f:
         4e:d9:fe:83:a4:ae:39:e6:52:29:09:04:e7:37:33:2e:88:5c:
         2a:28:53:a7:19:b0:f7:c8:fd:08:6e:5f:f9:f8:bd:4c:b3:9d:
         7b:73:d2:06:72:32:5e:27:a6:03:78:38:da:b7:87:3f:64:33:
         04:71:a3:c7:a9:3e:b4:e5:d1:b6:87:7f:09:91:20:3f:94:eb:
         e4:f0:16:22:5b:96:41:b1:10:18:ce:93:5e:b3:b5:9d:21:ef:
         fc:c7:ce:71:01:c3:89:60:85:79:8b:2a:bd:82:a6:d5:0d:86:
         9a:7e:b2:cc:69:37:ca:7d:eb:e8:83:11:17:e0:60:d1:09:ce:
         7c:7d:49:b8:b2:50:74:36:37:4a:32:7a:09:1a:e4:79:a8:79:
         38:92:0a:a6:79:fd:9f:aa:d9:cb:77:49:8c:c3:de:10:17:37:
         30:f9:9b:fb:7a:64:82:00:3f:da:10:cf:e4:33:b7:49:e2:15:
         d8:25:46:95:a9:37:86:b2:35:40:d2:69:28:6a:fc:ea:33:49:
         be:b1:2e:d1:2d:af:28:16:dc:9a:12:1d:77:5d:07:4a:41:36:
         fd:ab:65:ab:17:f0:a4:f9:29:20:98:46:00:35:62:bc:07:cb:
         6d:8d:7b:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVFRjIxMTAvBgNVBAUTKDdCRjE4MENFQUM0NzZEQkQxODM5MjkxMEZBMjJEQUEx
RUY1QkE2RDUwHhcNMjYwMTI2MjEzNjA0WhcNMjYwMjAyMjEzNjA0WjAYMRYwFAYD
VQQDDA02OTc3ZGU0NC00MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlbrFoMuHacPoNTL5SM/lKX77V4oMoXrfbTncGB8e6MKjs1KIHD0SsjZCBL75
j4AYRvbUZGVmbMx0I6c4a9TvNNB3fgEfzqTOhkNroTcnKXDU8ZuX0H7Wo4nH34hT
hshuc5VsbPVlvRZm1DuatERqJ0nfgGqJI2NuZcfIwTAA5BnomliuPctNLNcgJfob
U4qKPyZ7x5ac6YzREmJPeYl5Ml5QybyoGi4ghOKDdTh/bMfbzPcCiw/5M6iiJu7Q
nEz6PkCIceOk1qphiRdaeDW79znjE9fplyC3IQutPWJJKhKyFMviFC/VPMlp/IPf
dbqa7bFZS5NUjQjKR2uTrCIzoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUitab7
fa96j4hhZQnoMHtM+vlBMB8GA1UdIwQYMBaAFHvxgM6sR229GDkpEPoi2qHvW6bV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVGMi9EQTQ3RTU2MDk0
NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJiMFlPU2tRLWlMYW9lOWJw
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VfR0F6cXhIYmIwWU9Ta1EtaUxhb2U5YnB0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUVGMi9EQTQ3RTU2MDk0NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJi
MFlPU2tRLWlMYW9lOWJwdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEM03xWm1z+ID8hSVJ/Jk8209O2f6DpK455lIpCQTnNzMuiFwqKFOn
GbD3yP0Ibl/5+L1Ms517c9IGcjJeJ6YDeDjat4c/ZDMEcaPHqT605dG2h38JkSA/
lOvk8BYiW5ZBsRAYzpNes7WdIe/8x85xAcOJYIV5iyq9gqbVDYaafrLMaTfKfevo
gxEX4GDRCc58fUm4slB0NjdKMnoJGuR5qHk4kgqmef2fqtnLd0mMw94QFzcw+Zv7
emSCAD/aEM/kM7dJ4hXYJUaVqTeGsjVA0mkoavzqM0m+sS7RLa8oFtyaEh13XQdK
QTb9q2WrF/Ck+SkgmEYANWK8B8ttjXuG
-----END CERTIFICATE-----
Generated at Tue Jan 27 17:50:55 2026 by rpki-client