This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File:                     ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier:          scOx6yF27iP/Aj74wTjU93CXY+WebplkaQz7MCJPk7g=
Subject key identifier:   CC:63:BF:69:E6:04:E6:19:49:03:87:19:08:EA:B6:38:40:C8:32:9B
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer:       /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial:       036B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number:          031C
Signing time:             Tue 27 Jan 2026 00:35:53 +0000
Manifest this update:     Tue 27 Jan 2026 00:35:53 +0000
Manifest next update:     Tue 03 Feb 2026 00:35:53 +0000
Files and hashes:         1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: rQN1ycJZV1b63G+i7hboe/EBx7noCzSuI/H+Vv0BEoY=)
                          2: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=)
                          3: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=)
                          4: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=)
                          5: 20978DD270E411F08F40242AC4F9AE02.roa (hash: Xywp8ZPlZw5lHn8S1gza1fHTHQ7Q5agAOBQDfYDUkqA=)
                          6: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 00:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
        Validity
            Not Before: Jan 27 00:35:53 2026 GMT
            Not After : Feb  3 00:35:53 2026 GMT
        Subject: CN=69780869-0741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:49:6b:86:32:00:2a:ca:64:a0:df:c1:71:
                    02:7e:12:db:3d:08:dc:65:b8:8e:3a:61:f3:6d:e6:
                    35:42:9d:29:59:d1:96:92:4a:61:fb:be:47:bc:14:
                    7a:2c:bd:e9:f3:aa:00:fb:5d:29:bf:c9:aa:71:4f:
                    e5:02:c0:39:02:ed:49:09:67:19:52:3d:71:c7:68:
                    2e:a2:db:7c:04:cb:52:bb:46:77:8b:39:9b:c2:ca:
                    6e:7d:02:aa:25:39:27:7b:37:2d:1a:af:9b:70:0f:
                    2f:40:36:01:f7:2e:bf:45:cc:32:8e:7c:a1:d9:42:
                    ab:a5:1d:eb:f1:4c:a6:7c:4c:7c:ac:05:a2:1d:6d:
                    9a:ff:00:0b:e2:87:40:aa:00:7b:a4:da:3d:ea:75:
                    cc:28:95:db:3d:1e:8b:a6:28:32:4c:fa:2d:5f:f7:
                    64:ba:72:04:4b:85:52:35:ae:94:17:1a:50:9d:62:
                    0a:cf:ab:8d:06:97:d7:2c:4b:e1:be:64:a7:a9:c7:
                    b3:3f:20:1e:9f:1d:48:30:c2:03:91:69:8b:76:92:
                    8f:fb:a0:3c:a7:a3:b1:bc:c0:7d:7a:2e:8d:47:08:
                    dc:9e:d1:18:6e:85:bf:b4:65:f1:fe:c6:3a:d0:cb:
                    d0:72:65:ac:6d:3e:14:74:7f:ff:4d:f3:cc:96:6a:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:63:BF:69:E6:04:E6:19:49:03:87:19:08:EA:B6:38:40:C8:32:9B
            X509v3 Authority Key Identifier:
                keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:ca:3d:f0:b7:bb:35:b4:86:5d:03:23:ed:84:84:02:25:
         10:54:f1:a6:20:f8:5c:7a:0f:b8:98:fd:6d:4e:f3:b7:ec:28:
         34:e4:0b:20:89:67:33:ed:07:0f:b6:ca:ad:f3:2f:7a:e1:cf:
         eb:68:b5:8c:ae:d0:7a:5e:fd:30:ed:a9:b3:67:51:f7:50:58:
         96:d5:92:00:76:36:da:9d:a2:93:9d:ec:c0:6c:f3:78:c1:de:
         24:9d:8e:1b:29:68:2b:1f:ab:ac:81:ab:d2:a1:11:45:f8:43:
         e8:0a:82:a7:34:f8:8e:13:44:1a:e5:ee:0e:c3:6c:9a:52:d1:
         2b:c7:13:30:7d:6b:90:21:56:8e:3a:a4:f5:9d:7a:39:ce:c5:
         fa:26:be:b9:7f:f3:70:8f:a8:71:23:c6:88:c4:68:13:4c:54:
         86:10:c5:b2:3b:22:84:65:4f:b0:1e:b9:59:50:a0:f7:e7:8c:
         94:ba:a1:80:75:30:51:9b:ec:ba:ad:aa:b3:ad:4f:72:2d:c8:
         70:62:a5:01:37:fa:b6:e2:e4:d8:10:6f:83:bd:7c:f9:d1:30:
         59:ce:27:ec:75:95:3c:4c:9e:dc:9d:6b:96:42:78:24:58:1c:
         39:37:63:f1:d8:1d:55:e3:ab:b3:ba:43:1d:3c:1b:4c:fe:09:
         e7:a1:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:14:08 2026 by rpki-client