This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
File:                     cleSPWdwxWeJGbB8vPqK-LnFBT8.mft (raw, json)
Hash identifier:          YI8uTD8Bu9SO9bo1z4NCYg1tNYUY9+vhzUiL9hB2Sv0=
Subject key identifier:   FC:0C:5D:3C:58:06:FA:22:BA:4B:46:B8:8E:B5:41:80:A8:C6:6A:81
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Certificate issuer:       /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
Manifest number:          010A
Signing time:             Sat 17 Jan 2026 04:14:51 +0000
Manifest this update:     Sat 17 Jan 2026 04:14:51 +0000
Manifest next update:     Sat 24 Jan 2026 04:14:51 +0000
Files and hashes:         1: cleSPWdwxWeJGbB8vPqK-LnFBT8.crl (hash: FilnpGjOJoXtMM+8hZbWVcx/hKYk8XrCfSWn+qWfKXY=)
                          2: E0FC9A944D3111F08F258733C4F9AE02.roa (hash: 2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=)
                          3: 65783A3A68FE11EFB904E587C4F9AE02.roa (hash: 8BNbqhDSj5zwZRpetUourvgFN3LcAIxoiLxOQgq3beM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
        Validity
            Not Before: Jan 17 04:14:51 2026 GMT
            Not After : Jan 24 04:14:51 2026 GMT
        Subject: CN=696b0cbb-5ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:bb:2b:ab:7c:b9:6d:ab:7c:28:e8:54:8f:
                    b9:57:9a:77:24:97:09:77:55:72:c4:3c:b1:4e:07:
                    a9:fd:b5:9c:ab:46:06:6b:81:a7:25:7e:c9:e2:de:
                    e1:7c:d9:63:75:1c:56:49:0a:91:5d:36:03:89:a6:
                    af:b2:8b:0e:ee:9e:33:94:ae:2a:13:4e:43:3a:4a:
                    3f:a3:74:3f:b5:64:30:42:11:8e:06:f0:27:57:1a:
                    2b:2f:24:a5:88:df:81:8f:09:29:73:ed:d4:fa:d2:
                    6e:5c:57:99:21:18:57:31:24:8c:1d:d2:73:ee:60:
                    c1:d5:9d:f8:72:71:70:78:67:ae:3e:9e:44:52:84:
                    a0:e5:53:11:77:e4:c9:b2:eb:53:47:1c:fb:34:fa:
                    b7:a7:81:df:27:d3:b7:dd:47:56:23:40:77:30:59:
                    9d:6d:d0:6f:49:b0:a9:95:b5:ee:50:4f:53:28:70:
                    4a:01:96:fd:33:2f:82:02:99:ef:3d:bd:a5:01:25:
                    3d:ea:36:5f:63:84:3c:4e:d9:77:42:ec:54:c8:df:
                    d1:fd:12:4a:22:25:d7:87:74:55:c1:d9:aa:27:20:
                    02:09:1a:42:e0:f7:6e:c2:47:61:78:86:4d:4a:26:
                    4e:f0:ba:23:91:a6:bf:23:66:73:ae:50:77:50:06:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:5D:3C:58:06:FA:22:BA:4B:46:B8:8E:B5:41:80:A8:C6:6A:81
            X509v3 Authority Key Identifier:
                keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:cd:e0:5e:11:77:a4:9f:59:81:dc:97:16:19:96:be:c0:
         55:75:ff:3d:89:22:ac:9e:ed:74:68:72:ee:10:6c:50:b8:d8:
         9d:71:14:2d:0a:7a:de:c5:d0:7e:88:5f:fa:c8:2a:c4:34:ed:
         d7:59:1a:48:09:41:f0:64:f8:cb:e3:3d:03:1e:e9:ab:fd:8a:
         4a:58:ff:0e:ed:35:9e:bc:6a:1c:5d:ae:5b:25:c9:df:2f:73:
         0b:7e:83:52:7b:dc:62:ed:24:25:45:2e:f6:3e:96:f7:bf:51:
         6c:23:ec:58:f6:43:97:c3:34:8c:74:62:d5:70:c9:7e:9a:73:
         9b:50:41:3b:c2:d2:82:63:0e:13:27:26:05:3a:f1:79:d3:8b:
         9b:ff:79:77:1d:53:26:af:5a:32:64:b1:92:3f:43:ce:6d:c5:
         3a:22:e7:d2:59:a8:1e:5d:9f:20:3d:de:39:79:42:f2:f7:4a:
         1c:72:61:4b:3b:07:ee:fc:83:4f:c8:6a:85:a9:ba:b6:b2:d0:
         19:f7:f9:a7:62:69:74:0c:6f:d0:c1:a1:63:a9:3f:8c:a4:f3:
         92:42:da:b9:3c:8f:2a:08:39:3e:8e:ac:cd:ac:2f:2c:6c:be:
         02:ab:05:44:63:c0:dc:f5:f7:5a:df:ec:37:8d:08:72:f9:2f:
         10:3f:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:02:47 2026 by rpki-client