This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File:                     MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier:          VnjocJ9I1h6Wr+fmghBBrQYy+oFkNyN0PY87+aulm7M=
Subject key identifier:   B1:34:5B:86:19:DF:07:B7:BE:BF:27:B4:08:C6:78:05:40:58:9A:5D
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number:          01D6
Signing time:             Mon 19 Jan 2026 02:03:26 +0000
Manifest this update:     Mon 19 Jan 2026 02:03:26 +0000
Manifest next update:     Mon 26 Jan 2026 02:03:26 +0000
Files and hashes:         1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: giu2N+qfE6ICDJMWiW5R+HeZ9At3oO+Yptn1BL+FvDs=)
                          2: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=)
                          3: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=)
                          4: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=)
                          5: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=)
                          6: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=)
                          7: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: AVbE1i7Oy7wljsn75aLM04CYS65KFNSXwAhksX6zM28=)
                          8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=)
                          9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=)
                          10: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=)
                          11: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: XA94zE/GSTC30ijakEZif+bTFdWzgCRzrcitaE/Y5Hg=)
                          12: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 02:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jan 19 02:03:26 2026 GMT
            Not After : Jan 26 02:03:26 2026 GMT
        Subject: CN=696d90ee-9f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:91:e6:bf:8b:55:53:99:e4:a3:5d:55:ab:
                    d9:59:66:0b:59:d7:bd:2a:fd:32:ec:f3:14:f3:65:
                    7f:33:93:dc:62:d2:17:b2:74:9e:70:31:d8:68:05:
                    03:71:11:51:02:fd:1a:fb:0b:56:2d:ad:be:ab:52:
                    f3:3f:43:19:f5:ac:37:fb:0c:77:8f:c2:c0:e9:7b:
                    01:b6:31:30:68:1f:97:ac:30:33:08:e0:5b:37:4a:
                    87:b8:c9:d0:a5:c2:07:13:92:69:b4:f0:07:43:1c:
                    15:ce:46:07:21:0b:1b:dc:5a:5e:e5:e4:ff:0f:15:
                    6e:10:27:17:c6:43:bd:8b:4a:cc:e8:75:ad:3e:6f:
                    45:29:a0:60:7f:57:96:1a:ee:7c:39:dd:7f:f9:0e:
                    ce:6c:5f:e1:ff:53:42:46:a8:c9:d8:81:fe:04:d5:
                    56:68:dd:07:59:61:21:e0:5a:da:e2:08:be:33:2b:
                    e3:96:91:96:b0:95:07:81:f5:5e:7a:c7:30:1d:e5:
                    02:97:a5:f2:9d:47:70:fd:7c:fc:68:da:1e:bc:bc:
                    51:0e:63:9d:cf:2e:1b:45:46:50:4b:aa:0b:5d:6b:
                    7e:8e:f0:bc:7b:67:bf:e6:df:83:72:5d:0c:0f:ab:
                    2a:5d:e4:2b:e9:7a:37:88:97:c3:b5:e4:55:71:25:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:34:5B:86:19:DF:07:B7:BE:BF:27:B4:08:C6:78:05:40:58:9A:5D
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:70:1f:67:00:dc:77:a2:05:62:a2:33:43:0b:79:97:6e:5e:
         ef:fa:a0:bd:87:57:6e:87:00:31:ba:b6:13:b2:d5:4f:f5:55:
         af:b6:dc:db:bb:fb:c3:7d:8b:2d:7a:fb:58:29:3c:e4:cc:8e:
         09:52:03:ce:f0:ea:c4:65:95:9a:03:2d:ec:71:f8:7f:e9:20:
         32:06:23:50:74:62:33:0f:79:4b:ad:e9:12:98:32:16:df:84:
         3a:fb:22:82:80:3a:2e:c6:1b:98:af:a6:99:3e:fb:07:22:eb:
         ce:4e:26:20:51:77:a1:a6:34:b1:71:c5:3c:70:dd:e4:0f:45:
         e7:ed:18:60:1e:b6:18:47:0e:e3:4c:e1:df:6f:29:18:a1:4f:
         83:11:b2:1a:2d:26:bd:89:91:df:f1:7a:28:d2:a6:50:14:2f:
         2c:76:1b:81:46:b2:56:85:d3:fb:17:54:98:92:c1:cd:9a:36:
         a8:6e:82:cb:47:50:a3:b5:fc:b6:ff:ad:a4:cc:0a:a8:36:45:
         74:4f:0d:94:37:c7:7c:ac:79:39:50:e7:f8:d2:51:21:f1:83:
         c1:b0:d4:b6:8f:b2:05:a7:0b:14:33:22:74:88:86:1d:e5:6d:
         29:b0:6e:9d:be:cd:6f:ec:f6:6d:0d:51:26:a9:a6:01:be:ba:
         00:60:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 19:48:16 2026 by rpki-client