This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File:                     C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier:          v8X1peUkYI4wiXEd2UWnJbmGdzQ0x3OjrIX/aa9LlLs=
Subject key identifier:   E2:A2:26:39:02:A9:7B:85:04:61:DF:B0:56:EF:87:DE:A5:A9:03:17
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer:       /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number:          019B
Signing time:             Tue 27 Jan 2026 02:36:23 +0000
Manifest this update:     Tue 27 Jan 2026 02:36:22 +0000
Manifest next update:     Tue 03 Feb 2026 02:36:22 +0000
Files and hashes:         1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: AhfogKCgnXmlHiXiVE55AqzU+KqdzJDbSbkaMIxfvb4=)
                          2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: cx4NJM0Y7SZj8EEEvHyi9w557IjmXY6kqlXUYi/Zo1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
                          rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 02:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
        Validity
            Not Before: Jan 27 02:36:22 2026 GMT
            Not After : Feb  3 02:36:22 2026 GMT
        Subject: CN=697824a6-e60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:11:db:36:7a:b7:26:4d:99:13:0a:71:45:
                    84:c7:f9:7b:a3:d8:2f:aa:35:ed:1f:02:b9:5c:23:
                    18:18:8c:da:0b:3d:3b:7b:3c:02:b1:85:4e:4c:26:
                    6b:d0:a5:a5:82:8b:41:e9:0b:fc:f0:aa:d9:ef:d1:
                    e0:42:08:d1:ba:e8:50:ab:5a:b6:29:25:4e:ff:4a:
                    ff:19:cb:32:31:f2:c1:57:ce:05:03:5f:6b:9f:b3:
                    9c:2d:f3:c9:15:fb:3f:b0:7a:73:ef:7a:2c:bc:04:
                    00:56:f7:6c:3f:a8:e8:4a:3c:e0:e1:c8:09:9c:4f:
                    81:1e:09:06:c1:5d:17:04:7e:58:b6:f8:01:60:6f:
                    5e:b5:57:f1:34:5d:ee:2f:3a:da:47:15:83:16:26:
                    34:c1:fc:24:3d:d8:b5:91:c3:d1:17:3a:ac:95:9e:
                    85:55:8d:20:4a:ad:d1:4d:a5:8a:c1:8b:0a:c9:cc:
                    d0:a4:d3:f9:89:66:1f:ea:c6:46:0c:1a:04:83:65:
                    7b:10:8a:d0:48:2f:78:08:59:06:22:8d:a9:72:d3:
                    d2:3a:fa:c4:27:24:71:65:ef:ea:51:e5:b4:14:b7:
                    18:a1:f5:ae:9b:3d:88:9f:cd:ca:26:30:98:11:b8:
                    ad:9b:26:90:43:2f:df:7d:13:f9:b9:b8:68:05:f8:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:26:39:02:A9:7B:85:04:61:DF:B0:56:EF:87:DE:A5:A9:03:17
            X509v3 Authority Key Identifier:
                keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:86:7d:69:51:2f:0d:f2:26:b3:56:9a:e1:0d:db:0c:59:51:
         75:ce:52:e9:59:39:6f:23:8f:35:d4:45:ab:72:57:aa:e2:69:
         d3:63:c9:ab:9c:78:93:c1:ed:7c:b0:c8:29:50:da:af:02:1e:
         50:d0:fe:c5:6a:c3:91:0e:8e:97:e2:3a:c9:b3:8e:e0:a9:22:
         f0:6c:6f:a9:e6:20:44:f4:96:d7:cd:29:73:b0:e7:89:bf:1c:
         f4:61:09:a9:28:6e:58:3e:69:84:01:2e:88:bd:8f:67:7a:e6:
         07:96:74:01:e3:a6:70:bb:70:80:76:7f:41:9a:b3:ca:96:64:
         79:88:33:cf:c2:04:c7:c3:a1:5e:ba:41:24:65:0c:fa:7e:5f:
         4f:3f:15:35:e7:03:79:6b:e2:cf:b1:d3:a9:27:d1:91:27:9e:
         ea:97:f5:4f:cf:68:66:09:ee:bf:4d:b7:25:1a:57:9b:99:23:
         3f:12:97:f7:c4:e7:c6:32:e8:95:68:f9:4e:e0:39:1b:23:9a:
         a5:3f:91:e5:dc:d2:5c:f3:8b:ab:e9:c9:0e:dc:ef:79:22:d1:
         71:c2:ef:23:c9:a1:70:b8:07:3f:d2:10:03:e7:6e:f5:76:1b:
         66:42:5c:a4:b9:80:b6:ff:48:47:1e:8d:19:11:7d:12:c2:07:
         e0:77:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:46:43 2026 by rpki-client