This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
File:                     y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json)
Hash identifier:          gOhJkZMoFZZI1xpLbwWic4BP5MhPxRga32pQrDg7vak=
Subject key identifier:   D1:7C:7C:7F:72:97:B7:49:27:59:65:39:68:5B:BA:3A:49:61:D3:66
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Certificate issuer:       /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
Manifest number:          03E9
Signing time:             Sat 31 Jan 2026 23:48:45 +0000
Manifest this update:     Sat 31 Jan 2026 23:48:44 +0000
Manifest next update:     Sat 07 Feb 2026 23:48:44 +0000
Files and hashes:         1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: D1RwTGMbfgCHx/X/jrkDRzo2R4Rs38c29aLkXGvkqSE=)
                          2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: ypeDdRgdlFu3mSiTJZgTSrGrzIisGsgwbRQwhsD5B0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 23:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
        Validity
            Not Before: Jan 31 23:48:44 2026 GMT
            Not After : Feb  7 23:48:44 2026 GMT
        Subject: CN=697e94dd-4142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:66:fa:1a:d6:3f:af:4e:39:da:d4:24:3b:
                    56:ec:fd:83:67:b3:cf:d5:dd:f5:bc:c0:72:4c:7e:
                    3d:7f:4c:9d:12:e4:7b:09:94:5a:40:8e:b4:d3:e4:
                    c1:67:75:49:50:be:31:73:d8:aa:04:e1:3e:57:04:
                    74:0b:8a:d7:64:cc:41:fb:71:22:ef:19:a5:2a:b1:
                    ee:23:1f:60:e3:c0:bd:bd:b3:c5:6f:7b:ae:b9:eb:
                    df:4e:00:df:17:ca:97:e7:b2:5b:b9:cd:11:10:f7:
                    de:f7:34:6c:53:68:45:82:88:c0:9a:d6:21:f8:6b:
                    74:6d:87:e1:eb:b7:52:bf:2b:43:34:fe:83:f5:f5:
                    26:8f:a2:19:00:27:1b:75:6a:2c:ef:80:67:57:d6:
                    b0:3f:93:99:b5:65:03:f7:a0:94:08:9b:eb:24:3c:
                    4e:4d:b6:61:ee:3f:bb:c9:58:12:12:d2:09:27:8d:
                    6e:dd:46:22:77:a7:f9:00:1c:d9:0a:1a:59:01:94:
                    df:75:e1:86:2c:6c:6d:38:b7:28:f8:12:83:2d:e0:
                    72:a4:6e:ac:32:a8:8e:39:cf:10:15:69:86:be:ab:
                    7c:68:f7:35:a2:04:f8:de:0b:b3:0c:29:bb:43:77:
                    af:59:7a:d2:fd:e9:06:2c:b6:11:b6:d9:d8:83:5e:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:7C:7F:72:97:B7:49:27:59:65:39:68:5B:BA:3A:49:61:D3:66
            X509v3 Authority Key Identifier:
                keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f3:af:12:40:83:6e:a7:77:93:dd:7c:9e:6b:2e:3f:62:6d:
         f5:ab:c9:60:1b:e3:67:a0:00:83:31:e4:86:0d:5e:b8:51:5e:
         c2:04:30:c6:25:34:8e:a0:4c:3e:4b:b3:eb:29:e1:b9:88:5d:
         39:eb:cc:66:07:9e:5c:81:a0:ad:c5:5d:b2:e5:20:04:99:4f:
         4a:67:17:8d:72:3c:0d:ff:f7:96:ed:0f:b9:4a:9f:4c:d3:66:
         20:ad:09:81:24:55:14:c7:c4:6f:1c:0f:42:25:37:55:cf:82:
         0b:e0:63:dd:f8:12:ea:f9:04:56:3d:1b:34:97:47:92:20:23:
         d1:a9:98:95:88:12:0e:35:c4:1e:ca:0f:c5:5c:08:bb:e8:f2:
         9d:86:b6:fb:27:df:ba:1f:c2:31:75:94:86:b2:34:47:61:24:
         f6:ff:ef:18:4f:89:06:53:d6:a1:56:37:7b:09:8d:52:8e:8f:
         f1:c7:29:cf:a5:37:cc:fb:ad:e1:a4:b4:98:ec:76:39:fd:cf:
         4c:35:80:8f:5b:93:52:9c:56:55:ae:e0:71:95:a8:a0:2b:4b:
         78:e2:22:0b:4d:e6:3b:3d:30:2d:bd:72:35:c2:78:a0:51:db:
         db:d6:0e:54:0e:ed:ed:aa:ee:15:f6:6b:dc:b5:97:72:92:61:
         ae:db:e8:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG
NUQzMEYxRjIwHhcNMjYwMTMxMjM0ODQ0WhcNMjYwMjA3MjM0ODQ0WjAYMRYwFAYD
VQQDDA02OTdlOTRkZC00MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk4lm+hrWP69OOdrUJDtW7P2DZ7PP1d31vMByTH49f0ydEuR7CZRaQI600+TB
Z3VJUL4xc9iqBOE+VwR0C4rXZMxB+3Ei7xmlKrHuIx9g48C9vbPFb3uuuevfTgDf
F8qX57Jbuc0REPfe9zRsU2hFgojAmtYh+Gt0bYfh67dSvytDNP6D9fUmj6IZACcb
dWos74BnV9awP5OZtWUD96CUCJvrJDxOTbZh7j+7yVgSEtIJJ41u3UYid6f5ABzZ
ChpZAZTfdeGGLGxtOLco+BKDLeBypG6sMqiOOc8QFWmGvqt8aPc1ogT43guzDCm7
Q3evWXrS/ekGLLYRttnYg14OFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF8fH9y
l7dJJ1llOWhbujpJYdNmMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF
NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG
WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2868SQINup3eT3Xyeay4/Ym31q8lgG+NnoACDMeSGDV64UV7CBDDG
JTSOoEw+S7PrKeG5iF0568xmB55cgaCtxV2y5SAEmU9KZxeNcjwN//eW7Q+5Sp9M
02YgrQmBJFUUx8RvHA9CJTdVz4IL4GPd+BLq+QRWPRs0l0eSICPRqZiViBIONcQe
yg/FXAi76PKdhrb7J9+6H8IxdZSGsjRHYST2/+8YT4kGU9ahVjd7CY1Sjo/xxynP
pTfM+63hpLSY7HY5/c9MNYCPW5NSnFZVruBxlaigK0t44iILTeY7PTAtvXI1wnig
Udvb1g5UDu3tqu4V9mvctZdykmGu2+i2
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:46:45 2026 by rpki-client