This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File:                     6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier:          P+itkswYUTj3TB7fTT9G9A2cdYuys7x5K2rxiBIKuiI=
Subject key identifier:   71:CB:A7:74:8C:F2:B4:FC:E8:0D:30:E4:91:66:4A:93:D4:88:AE:17
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer:       /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number:          013E
Signing time:             Sun 01 Feb 2026 03:55:50 +0000
Manifest this update:     Sun 01 Feb 2026 03:55:49 +0000
Manifest next update:     Sun 08 Feb 2026 03:55:49 +0000
Files and hashes:         1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: bMCYr4xxOoxKxysmoXOEqdqLromuFotxL/Sg9b6P6Ds=)
                          2: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=)
                          3: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
                          rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Feb 2026 03:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
        Validity
            Not Before: Feb  1 03:55:49 2026 GMT
            Not After : Feb  8 03:55:49 2026 GMT
        Subject: CN=697ecec5-8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:f4:3f:d8:2e:26:37:68:40:c7:7e:19:1d:
                    b6:c6:a2:42:b3:cd:c7:aa:24:f9:a4:d8:25:6c:94:
                    56:40:13:2a:6b:4b:9f:38:89:00:77:cb:a7:88:b3:
                    20:8e:1c:79:6e:9b:80:c9:77:84:8f:b5:14:31:6b:
                    26:57:7f:5a:d8:da:8b:1d:76:4a:f2:d1:05:87:c0:
                    ea:39:96:76:c2:bd:1c:0f:01:27:71:ba:78:b3:79:
                    52:47:26:53:55:32:00:a3:70:d4:f5:f0:26:14:ae:
                    ad:79:08:a5:f7:02:25:6c:9a:58:b4:27:a4:7e:76:
                    d8:72:3b:af:48:25:ac:1d:0b:bc:e1:ea:a2:31:3b:
                    0b:59:48:0a:49:a1:e4:2f:f6:ce:b4:82:39:a8:4d:
                    ee:61:6f:ea:f9:d8:70:85:7a:80:8b:07:5c:1a:5f:
                    55:5c:2a:ad:47:f4:fe:18:50:e4:aa:40:d7:da:f4:
                    6f:7a:0f:ff:1f:54:ac:d8:c0:d8:8b:72:13:7b:ae:
                    c7:3e:bb:36:51:52:5d:58:f9:5c:18:57:37:d9:15:
                    3d:6a:cd:b3:e6:d3:4f:10:53:67:44:e7:7e:21:3c:
                    02:3a:4b:9d:44:76:1a:05:1c:86:7b:09:4b:aa:fa:
                    ac:14:b0:1a:c7:4b:45:16:f7:f9:d8:de:2a:70:34:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CB:A7:74:8C:F2:B4:FC:E8:0D:30:E4:91:66:4A:93:D4:88:AE:17
            X509v3 Authority Key Identifier:
                keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:5a:80:bd:fb:d4:a8:52:aa:41:be:b4:6b:25:94:42:46:
         b6:0a:a3:ea:71:88:3e:44:57:1a:8e:6b:d8:f0:e8:1f:ea:9c:
         2d:2b:d5:00:1c:a6:f2:10:f4:1c:51:82:87:7e:c7:6e:6c:91:
         c5:72:b5:34:c0:9f:e3:d7:87:89:72:a6:38:d6:99:a0:f8:3a:
         7d:f3:aa:6b:bc:9a:d6:5c:fe:a6:91:b2:6d:88:ed:15:6f:39:
         ce:04:45:b4:fe:a1:6b:98:fd:c8:2a:50:d0:ea:98:4d:72:39:
         ee:1a:67:82:2e:de:ae:9f:f0:03:a8:72:81:21:93:3d:41:55:
         cb:9d:a1:94:cf:64:2d:94:a9:b9:0d:9e:97:f8:82:38:f8:e0:
         24:a7:40:c7:7d:04:8c:d4:d6:a6:82:62:84:25:43:37:f5:9c:
         d9:c8:60:a8:5b:0b:46:26:92:8b:ef:c2:63:29:5a:f8:1a:c6:
         3f:01:ca:1b:fa:f1:cd:40:45:1f:10:f6:09:6d:c1:cb:61:2e:
         5d:5e:fd:26:69:b1:f3:33:c4:d5:ce:89:10:6b:a6:02:ce:fe:
         ce:c6:89:f6:47:fc:a0:37:a2:85:9f:85:a9:dd:52:37:ec:17:
         5f:dc:84:39:54:58:40:8b:fb:1d:aa:0d:23:85:00:16:ce:c9:
         d5:a2:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:34 2026 by rpki-client