This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File:                     4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier:          Fl1ZgdPnvfl32lj1zqqU7+BIpDz4KyWwAC2aPd9tYME=
Subject key identifier:   B4:1D:91:5F:BB:30:96:11:42:C2:58:5A:B1:41:3C:4A:CF:E6:A2:31
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer:       /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial:       1F59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number:          1F52
Signing time:             Sat 24 Jan 2026 15:50:08 +0000
Manifest this update:     Sat 24 Jan 2026 15:50:07 +0000
Manifest next update:     Sat 31 Jan 2026 15:50:07 +0000
Files and hashes:         1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: UiEyVGheRBdwnV94k4tso3HNzZtUmMmgt7bGg5vqDz8=)
                          2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8025 (0x1f59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
        Validity
            Not Before: Jan 24 15:50:07 2026 GMT
            Not After : Jan 31 15:50:07 2026 GMT
        Subject: CN=6974ea30-1e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:28:83:1f:81:2f:bc:fa:2f:34:07:cb:56:
                    33:17:90:04:23:09:a3:8f:90:5e:1e:31:3e:67:b4:
                    a6:d2:23:0d:35:74:34:48:8d:56:1a:c6:17:18:b4:
                    d4:e5:9b:6a:35:a8:37:d6:19:2f:3e:3b:6f:a0:cd:
                    64:7a:3f:4f:31:a1:be:03:14:0d:ee:42:62:cb:ad:
                    50:2a:9e:bd:92:68:02:50:be:5a:50:3e:74:a3:05:
                    c4:1a:fe:db:3e:c3:14:d6:9e:01:3e:f9:76:3e:d9:
                    0a:40:3a:1e:19:04:04:e3:72:ee:f0:46:0b:9b:74:
                    f5:f0:a0:ad:6b:6d:ef:8c:a3:ee:1b:18:f5:88:a7:
                    06:07:f1:c9:f8:da:94:f7:3a:21:58:73:c3:e4:f3:
                    dd:72:d3:6e:67:52:e1:e0:77:d9:73:42:8e:ae:81:
                    9a:dc:f4:8c:7d:6f:ed:b8:32:e7:d8:b5:5a:25:d2:
                    a7:6a:70:1c:0f:52:76:08:07:1c:ca:6a:b3:91:5f:
                    d4:ea:0e:fc:e7:42:ad:e7:f9:ba:ad:bf:c8:b0:8b:
                    37:12:ea:60:fd:4e:58:f5:49:fd:73:6c:4f:df:1a:
                    8f:43:50:1c:78:b2:50:29:8a:98:47:ac:cc:37:05:
                    b2:df:1d:52:82:12:d1:6f:55:18:a6:f5:99:63:3c:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1D:91:5F:BB:30:96:11:42:C2:58:5A:B1:41:3C:4A:CF:E6:A2:31
            X509v3 Authority Key Identifier:
                keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a5:57:ed:13:b5:60:0e:dc:4a:87:65:29:c1:f7:ab:0a:3f:
         6a:6c:e5:69:f8:7c:17:cf:fd:29:15:4c:17:a8:e3:1e:fc:f9:
         7c:d5:e7:62:57:8d:01:58:2b:46:80:ae:cc:bf:e9:97:85:a9:
         ee:21:e3:01:72:90:5c:00:74:a0:4d:d1:64:f7:6c:6c:49:5b:
         32:af:5c:c7:92:12:ce:d1:be:9b:48:5a:75:ed:77:1a:73:d4:
         26:60:17:a4:4c:21:f1:e8:91:61:34:29:4b:ef:9a:66:be:d7:
         19:10:27:a4:5a:fd:10:0f:23:63:4e:a1:6a:e7:98:5e:61:33:
         95:55:9c:30:2e:20:74:c6:da:4e:5a:32:64:e1:f1:e1:08:b6:
         e1:ad:5b:7b:08:d7:cc:87:81:79:1d:51:11:5a:bc:d3:12:05:
         a5:9c:65:15:79:df:4f:8c:e1:e9:47:64:2b:fb:9a:ee:43:4a:
         b9:80:41:2c:50:85:9f:99:0a:f6:2e:1f:93:4a:28:0d:b8:d8:
         a5:4d:15:f8:9e:cc:db:fe:dd:49:8d:5a:02:b4:4d:51:81:6b:
         9a:83:c1:25:0b:b6:a2:12:1f:d1:a1:38:4c:0f:34:95:d3:90:
         2c:86:75:23:4b:27:85:c9:a8:b1:97:2d:70:a3:aa:b8:32:2e:
         29:df:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:09 2026 by rpki-client