This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier:          8OgA3F1dBdKF1NJY6uapU437Sr5KCPAcKaMP/U4WPtU=
Subject key identifier:   E4:54:2C:C9:53:B1:21:B7:BA:4E:E0:89:09:F1:55:B5:84:CD:C5:1A
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       04EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number:          0485
Signing time:             Sat 24 Jan 2026 23:27:50 +0000
Manifest this update:     Sat 24 Jan 2026 23:27:50 +0000
Manifest next update:     Sat 31 Jan 2026 23:27:50 +0000
Files and hashes:         1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: nA6cC4nhCbWxuwGT6944oCd/47tGE2btletufPxiTno=)
                          2: 1DFB74B4693511F098DA961FC4F9AE02.roa (hash: P1znYhl/eQ/i09BqcFgYUncqu9PsKuk8MGDDrGmikWA=)
                          3: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: xXSyKHJ3NBPSi2dne5M9cyAkwhzfAyBhVMB+xnu2wEw=)
                          4: F563D916248D11EF93237035C4F9AE02.roa (hash: VCFvtvA9YE6AwHB0R1pkgWrJ/+HVkrKuimdliRgUT8Y=)
                          5: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: 04IkSuQjN5iNoBHNEnhW0185UxD8n8l9rsTvIawl80g=)
                          6: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: BgivuTWWcRie0lYmhxh3s/YrP0g2TFS2K/lE49IhzlU=)
                          7: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: SFtqEei/cNuFxoRwcmV0ulAeh3eMTUDtIcuJGqQ9i50=)
                          8: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: +LYfza0pA5mBToccYjjpbZ76FKkIwdZ+QclyNNezPE8=)
                          9: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: JU4szI7h2fyO1JL8D+jKobys4IJjxvAjtFvc+97hytM=)
                          10: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: BGVu1jIpiElRBOykLyn1hbruAkUCwbhE94Wkt2miz84=)
                          11: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: ziC/UsLbhf5/G3tuI/q+osXhJiEj6DXrnZAE7DlftT0=)
                          12: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: BId9IUS1+4nSQcy9VYkqTv0EYMTtK2hCnt14fFjrgA0=)
                          13: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: abj/lLGFaHcnznksM80abqsRFzwo6V6mDWUcL5ZKF2Y=)
                          14: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: +3Z3o9JekC+LGEyEOl3WT5vRlSduXk5lWhpRA5yPV1E=)
                          15: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: kNSRGelQeR661p/seibqDgqqXH+dLwJkNc/ESxx+yZ8=)
                          16: B5036DB4694211F08D05BF0AC4F9AE02.roa (hash: Wpf+grxS494Kl48brRQfPg+4hbzaXuWnS4JVs5+US7M=)
                          17: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: sHzhZYgKFDSrJep2AA9b5WnbHJBUPXm7OpsiWNM3z8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jan 24 23:27:50 2026 GMT
            Not After : Jan 31 23:27:50 2026 GMT
        Subject: CN=69755576-f0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:bc:a1:9d:59:46:01:6e:b8:74:f2:d2:01:
                    e7:ee:c8:5b:f6:26:d1:4d:05:bc:a1:8f:a0:b1:ab:
                    e0:58:06:e9:6e:da:6f:fd:35:ce:27:5e:84:77:5e:
                    60:c0:8e:a9:83:1b:11:4d:47:e6:9d:c7:e0:dd:18:
                    91:2a:4a:dc:a1:f2:e4:47:a6:a0:00:d8:05:35:18:
                    35:31:a4:94:03:00:d8:35:6f:cf:cf:7f:f5:d5:46:
                    f9:68:e5:7a:69:aa:c0:21:5b:27:d2:c1:91:a7:af:
                    93:f7:58:ee:2d:fd:3a:56:ce:f6:33:9d:a6:94:6d:
                    35:f7:f0:d4:ff:d2:bb:aa:05:91:7b:1e:52:8b:de:
                    b8:52:04:36:35:29:9b:5b:98:e5:8f:cc:08:18:4d:
                    b6:68:de:b2:56:de:d5:38:f5:ea:9e:32:4d:57:5c:
                    94:cf:eb:23:68:31:84:f3:90:d4:41:69:00:f3:6e:
                    08:27:28:a4:2e:53:bb:6d:3f:cf:85:ca:d5:8f:76:
                    fe:7e:b0:f8:61:a7:d6:a1:09:a4:76:5f:5b:b1:22:
                    64:17:32:e2:11:4a:ee:20:4b:67:53:e5:5a:82:c6:
                    04:c7:ce:ac:ee:c3:a1:4a:dc:27:a7:cc:15:34:9b:
                    14:68:83:11:55:bc:c6:4e:26:a9:44:72:17:ae:01:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:54:2C:C9:53:B1:21:B7:BA:4E:E0:89:09:F1:55:B5:84:CD:C5:1A
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:94:69:c8:38:f2:88:ed:df:05:1f:ac:f3:a8:43:f7:ff:82:
         d6:82:d2:40:06:3b:51:2a:6e:70:a8:a2:53:f5:20:de:f0:5e:
         88:1a:40:bf:e2:a1:70:80:5c:63:67:d0:a2:1d:67:03:64:56:
         20:86:d7:fd:e2:0f:01:49:c0:99:a1:83:a4:be:8f:96:da:a3:
         4d:b1:98:92:4e:95:85:c2:d0:2f:cc:51:44:af:22:21:b9:c7:
         39:23:8f:8d:ab:b2:37:de:8c:e7:d6:0a:10:bc:85:9f:10:bc:
         90:42:4c:15:56:93:66:90:6c:3b:52:c4:f4:23:e8:5d:79:20:
         2d:d3:c5:f2:f2:be:ad:b2:48:68:21:5c:d6:78:ea:ac:33:fe:
         6e:dc:ac:90:a0:15:da:65:48:64:19:e8:32:2c:4a:d5:1a:bd:
         a5:6b:42:cb:f9:9d:ad:7f:14:84:d8:34:5f:8c:8f:27:b0:0f:
         ab:fd:d4:fd:64:3d:95:4b:8b:e8:fd:39:3e:28:5a:44:aa:9a:
         6c:bd:c1:78:20:45:b5:9e:77:5b:90:e0:ec:76:1d:e1:34:72:
         3d:d9:73:95:d3:1f:81:82:ce:2d:87:9e:a2:ae:fb:b8:bf:74:
         80:57:de:e2:db:10:f9:16:19:5b:4e:41:f1:91:fc:02:b9:8a:
         61:f1:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:29 2026 by rpki-client