This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File:                     CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier:          AulyLDa/e2s3eKMpc+lms/za53uH3ksr0rpItmb65G4=
Subject key identifier:   46:1D:3B:2D:35:1D:42:7D:33:54:4A:81:00:1D:48:6F:FF:14:E2:5B
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer:       /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number:          0755
Signing time:             Mon 02 Feb 2026 21:21:26 +0000
Manifest this update:     Mon 02 Feb 2026 21:21:25 +0000
Manifest next update:     Mon 09 Feb 2026 21:21:25 +0000
Files and hashes:         1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: 47ndg8rWAWsfIi30OLjtQ9fdr0noXnlYZbDM1N0Dz7Y=)
                          2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: KFUQZMe5qLV6EEHqsboBmZ+XKCmzmQL5IdQuKz2/1pM=)
                          3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: CBAyva7dqI+RQTwKgqBd2Ik2cx8Z7eAggotY6PPN4YM=)
                          4: F6AFB162F66B11F08367D08E6F6F56BC.roa (hash: 8IwfdEW0gmmGKirqwDRNXzlEC+Tm1Fkp0zM1X2OOvAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 21:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
        Validity
            Not Before: Feb  2 21:21:25 2026 GMT
            Not After : Feb  9 21:21:25 2026 GMT
        Subject: CN=69811556-4f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:11:42:43:23:52:e9:98:7f:11:36:63:db:
                    b3:7e:50:63:f5:cf:52:73:08:d6:b5:22:54:05:ea:
                    f1:43:a7:0a:06:81:4f:66:4d:1c:22:96:b7:3c:6d:
                    32:c8:10:48:e8:3e:5c:6a:b9:77:b6:f8:98:d9:37:
                    e6:86:2b:31:79:ae:1c:8a:bc:8e:e6:a5:cb:d1:6e:
                    25:21:c6:fe:32:3d:c6:63:ab:9d:7c:56:bd:96:fe:
                    39:02:5d:9a:89:3c:3a:d5:ae:a3:4f:75:d7:85:1e:
                    03:ba:d2:77:d6:d4:7a:d7:ac:11:66:9e:d3:ac:ae:
                    95:e8:83:e5:06:f3:96:c9:15:3c:a5:b4:9d:05:60:
                    6d:b1:17:34:5f:c4:4c:47:13:f0:d5:c6:ea:43:c8:
                    30:be:c0:88:6b:82:d5:b9:44:a5:72:c1:4c:8c:e3:
                    95:8c:58:ca:b2:2f:52:32:f0:69:f2:08:21:3a:98:
                    6c:12:02:b1:24:b8:b4:69:25:06:ad:e3:fd:ad:52:
                    e7:90:c6:3f:8f:34:6f:ef:47:b8:0f:35:5f:5a:99:
                    76:23:e8:31:3c:74:81:cb:fd:c1:82:19:c2:d1:ec:
                    26:74:34:ca:88:80:d4:98:0d:22:e9:69:80:3c:f6:
                    9f:54:13:36:2a:05:8a:b8:d1:1d:6a:44:61:9b:c5:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:3B:2D:35:1D:42:7D:33:54:4A:81:00:1D:48:6F:FF:14:E2:5B
            X509v3 Authority Key Identifier:
                keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:f9:91:bf:45:32:88:eb:8b:14:86:ad:de:ee:ea:92:6b:
         48:fa:c6:40:03:1b:6a:9b:33:1b:25:e4:15:3f:ac:a0:cd:c4:
         12:d5:97:d3:cb:86:93:e0:f6:4c:63:87:a1:49:e6:24:0c:16:
         2b:7a:b7:0e:ca:df:45:74:0d:b0:ba:04:6e:04:9e:c2:bc:71:
         d3:17:c7:f3:44:29:62:81:d6:ca:db:44:1c:0c:16:14:48:cd:
         ad:38:51:48:15:24:e3:35:3c:2d:ea:39:4a:c2:84:2f:a7:a5:
         43:b9:d0:81:04:c1:e7:2d:f7:ac:ca:fb:c0:76:bc:25:ef:0c:
         b6:86:27:c0:ec:b0:1e:42:5a:2f:82:41:44:4a:94:4c:ac:6c:
         55:d4:4a:7d:fe:a1:a0:17:30:ef:d7:ee:46:d5:02:f4:29:89:
         9e:4d:28:ae:48:8d:cc:4f:e4:75:ea:a5:88:ed:36:08:e3:43:
         40:e0:63:67:c9:b9:38:7a:81:90:ba:0f:87:32:38:c0:fd:91:
         d3:d0:33:df:7c:8a:b9:62:d6:bc:0d:4c:9f:f2:cd:78:a8:4f:
         8f:91:af:5f:4e:23:6e:b0:99:07:f9:69:5b:75:13:0e:24:da:
         0c:3b:bd:c4:9d:69:94:cb:3f:0f:9d:a2:d0:8d:7c:f5:e1:cc:
         bf:f6:fb:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz
MzJEQTQzQ0IwHhcNMjYwMjAyMjEyMTI1WhcNMjYwMjA5MjEyMTI1WjAYMRYwFAYD
VQQDDA02OTgxMTU1Ni00ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5wRQkMjUumYfxE2Y9uzflBj9c9ScwjWtSJUBerxQ6cKBoFPZk0cIpa3PG0y
yBBI6D5carl3tviY2Tfmhisxea4ciryO5qXL0W4lIcb+Mj3GY6udfFa9lv45Al2a
iTw61a6jT3XXhR4DutJ31tR616wRZp7TrK6V6IPlBvOWyRU8pbSdBWBtsRc0X8RM
RxPw1cbqQ8gwvsCIa4LVuUSlcsFMjOOVjFjKsi9SMvBp8gghOphsEgKxJLi0aSUG
reP9rVLnkMY/jzRv70e4DzVfWpl2I+gxPHSBy/3BghnC0ewmdDTKiIDUmA0i6WmA
PPafVBM2KgWKuNEdakRhm8VUnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYdOy01
HUJ9M1RKgQAdSG//FOJbMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG
QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1
WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA25PmRv0UyiOuLFIat3u7qkmtI+sZAAxtqmzMbJeQVP6ygzcQS1ZfT
y4aT4PZMY4ehSeYkDBYrercOyt9FdA2wugRuBJ7CvHHTF8fzRCligdbK20QcDBYU
SM2tOFFIFSTjNTwt6jlKwoQvp6VDudCBBMHnLfesyvvAdrwl7wy2hifA7LAeQlov
gkFESpRMrGxV1Ep9/qGgFzDv1+5G1QL0KYmeTSiuSI3MT+R16qWI7TYI40NA4GNn
ybk4eoGQug+HMjjA/ZHT0DPffIq5Yta8DUyf8s14qE+Pka9fTiNusJkH+WlbdRMO
JNoMO73EnWmUyz8PnaLQjXz14cy/9vtM
-----END CERTIFICATE-----
Generated at Wed Feb 4 15:14:47 2026 by rpki-client