This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
File:                     8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json)
Hash identifier:          MksZnvlz8NBbGJdw8WcWCzF7EDM5WN2hgA3Qveygge0=
Subject key identifier:   D3:FB:68:B3:E7:36:25:7A:FF:58:D2:B7:6E:33:B7:DC:B2:D7:86:6C
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Certificate issuer:       /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
Manifest number:          05
Signing time:             Tue 27 Jan 2026 07:23:09 +0000
Manifest this update:     Tue 27 Jan 2026 07:23:09 +0000
Manifest next update:     Tue 03 Feb 2026 07:23:09 +0000
Files and hashes:         1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: HEmXDrE7pnUN/RwRGFUzSHXnVr/WIlWkQfgLq/G4SW8=)
                          2: 9A084BBCF86A11F098E22A404A6F56BC.roa (hash: +lAlL7Cv2EfgtjGoVqEkKqM1JuOyfGTEtlZcd1zcqHE=)
                          3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: /Mawuqcu13jJfA7gdT/LNV8vB1ks+7WTyRxpwb7mJZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 07:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
        Validity
            Not Before: Jan 27 07:23:09 2026 GMT
            Not After : Feb  3 07:23:09 2026 GMT
        Subject: CN=697867dd-51aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:15:d6:24:ed:64:af:10:67:e4:18:f1:fb:
                    86:dc:3b:87:e5:26:e5:a1:8d:82:d1:08:cb:ee:55:
                    63:83:9c:b5:5a:0b:cb:f8:d5:60:b1:20:d9:08:bb:
                    00:bf:64:8c:be:84:33:91:37:eb:f4:53:f2:a9:44:
                    0a:8b:1e:c7:b4:ba:c4:6b:91:a8:d7:9c:04:79:6b:
                    24:e1:e6:1f:b5:7a:c3:49:f3:59:b9:f3:76:37:1b:
                    8a:2b:54:bb:2b:6b:b0:84:51:48:e2:0e:14:1f:5b:
                    60:8e:27:4c:30:c5:0e:18:7a:d5:c4:c9:df:46:e3:
                    fe:74:45:44:f1:51:90:b3:1c:cc:85:cb:20:27:96:
                    45:25:2c:4a:ff:90:ad:02:e4:b9:2f:e9:5e:ec:c5:
                    2f:af:2a:2f:4b:04:52:e2:d1:f9:20:9f:5a:52:fd:
                    a8:1e:39:fc:ff:1a:66:c1:18:a3:1a:8c:3c:0b:48:
                    fd:0a:19:66:31:0e:11:94:90:dc:df:29:8d:07:92:
                    2e:61:f6:46:b6:33:ec:31:7b:11:ac:f7:8e:d4:8c:
                    5e:f8:b4:1a:a0:10:ae:20:18:60:ab:75:86:27:9b:
                    ad:7f:10:2d:c8:06:ba:4c:1f:30:bd:0a:e8:aa:77:
                    ec:ad:87:07:00:c4:ed:14:68:89:88:76:4f:68:91:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:68:B3:E7:36:25:7A:FF:58:D2:B7:6E:33:B7:DC:B2:D7:86:6C
            X509v3 Authority Key Identifier:
                keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:b5:8c:7b:05:03:ad:82:6e:ba:d3:58:ae:50:46:56:82:
         ff:28:46:07:a0:38:3d:20:d4:e7:04:60:4e:e2:f9:70:bb:d4:
         ab:ec:3a:56:c3:6f:99:5c:b3:5c:29:1b:2c:17:13:cd:ab:69:
         f8:86:99:71:80:cd:de:80:2d:fc:cc:f9:59:8c:be:0a:dd:4b:
         3c:dd:39:dd:4f:c1:7b:d3:89:45:78:3b:6f:72:81:e7:1e:40:
         58:81:c3:81:0e:30:f0:2d:36:dc:54:8b:37:b7:d2:21:f9:17:
         2e:8d:78:c0:24:c0:ee:c1:71:37:20:ff:85:97:da:59:5f:91:
         ac:1e:95:93:9b:d7:c7:73:72:43:6b:8a:6d:27:b5:44:60:e4:
         4f:89:70:4c:3b:02:a2:68:79:d6:2f:34:5a:1b:0c:8b:df:a5:
         69:62:13:0d:11:a8:a9:81:2a:92:2e:12:ca:92:10:dc:6d:4d:
         06:b2:cc:fb:c2:86:b6:b6:28:e8:d4:cb:c7:c1:af:3d:47:b6:
         37:b0:4b:08:8d:3a:4b:81:4d:3f:b1:c0:9a:a3:44:96:39:c5:
         31:bf:05:7d:74:56:36:05:24:08:4d:76:c3:76:a7:20:6f:fb:
         bc:6d:c5:b3:d5:3c:87:1a:02:1c:c7:30:61:de:7d:b1:2c:55:
         22:49:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:34:00 2026 by rpki-client