This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
File:                     fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json)
Hash identifier:          bADhr7Jw7b3bkl8hQ/CnQh6MgSDLC8x/GuRBprliSu8=
Subject key identifier:   2B:35:15:FF:D6:FE:57:CD:1C:D9:10:34:F2:88:4D:F1:0C:45:ED:EB
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Certificate issuer:       /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial:       0329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
Manifest number:          0325
Signing time:             Sun 25 Jan 2026 00:14:50 +0000
Manifest this update:     Sun 25 Jan 2026 00:14:49 +0000
Manifest next update:     Sun 01 Feb 2026 00:14:49 +0000
Files and hashes:         1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: ubh9DvrCzIrVdW6Ya/tAtF6UWpHgB/HjcdFwAeihaZI=)
                          2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 42NoXRc68AJI33l+b1k0SiSR1RteYpJ6pHpYeUhh2BI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
                          rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
        Validity
            Not Before: Jan 25 00:14:49 2026 GMT
            Not After : Feb  1 00:14:49 2026 GMT
        Subject: CN=6975607a-fde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:82:52:c8:f0:5e:cb:69:08:16:b8:4b:03:
                    c0:9f:6b:99:2e:72:af:0b:c8:cd:75:f7:ec:69:e2:
                    07:21:67:be:8d:db:80:09:5a:bb:49:50:5f:6d:08:
                    67:3a:3f:36:1e:9f:82:7a:47:6a:9a:cc:fd:8b:a0:
                    3c:00:1e:69:b6:13:65:da:63:74:b7:35:1e:63:c2:
                    38:59:5a:42:b5:b3:14:29:bd:e1:d0:2c:1b:60:90:
                    78:45:5e:c5:8d:9d:5d:7a:c2:d5:a6:11:8f:d6:bb:
                    e8:c2:98:1d:e4:4c:69:d6:b7:2e:8d:3a:8c:a4:54:
                    23:1b:1a:11:e6:80:7a:f3:b7:74:e2:ff:16:00:93:
                    8b:d1:79:58:96:61:8c:b5:9f:9c:14:f8:08:e3:90:
                    c0:c2:b2:71:6f:7e:83:a5:5a:5a:d2:c5:e9:73:5f:
                    04:df:82:f2:30:13:b2:d7:6f:fe:87:1b:7f:e8:7d:
                    b0:7f:ad:d2:c5:7d:99:88:68:67:df:39:14:54:95:
                    e4:c2:f6:7a:a5:70:64:38:70:4d:7a:0b:f5:e1:48:
                    e4:f0:d3:c1:11:f8:00:d7:7f:7c:df:0c:ed:47:e4:
                    b2:62:23:2d:18:c3:cd:93:d8:d1:80:05:ce:c9:2a:
                    e7:0e:9e:ec:f9:3b:17:8f:41:5d:8b:14:ad:b5:c3:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:35:15:FF:D6:FE:57:CD:1C:D9:10:34:F2:88:4D:F1:0C:45:ED:EB
            X509v3 Authority Key Identifier:
                keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:0c:f7:f5:9d:3d:93:75:16:1f:3e:9b:7d:02:8a:43:be:
         18:95:2c:e4:76:9c:1a:3c:26:3f:af:54:39:b1:d7:b1:b8:17:
         fc:e8:0b:90:79:d5:1f:59:d1:81:92:c7:bb:7b:76:55:a9:6c:
         47:9a:6d:3c:41:2d:b3:4c:88:ca:fc:f5:ac:2a:ae:df:94:86:
         35:8e:b5:ef:ab:0c:80:42:8c:f4:54:b2:f4:e7:53:de:fa:a0:
         c4:33:0d:ee:a2:2a:58:7b:c6:99:56:ce:80:82:06:87:e6:ff:
         63:f0:93:55:d9:2e:2c:91:61:20:88:f8:a6:5a:60:73:58:cd:
         c9:d8:ee:a1:2e:a1:76:7e:de:54:12:a4:47:8d:33:8f:c7:33:
         aa:54:64:00:9c:0b:bc:a6:e0:85:5e:c0:74:f6:15:9b:0a:b9:
         ee:4c:7b:3d:83:34:8b:ec:06:c8:e9:b9:7f:35:b2:16:65:e5:
         39:d1:a8:28:92:e3:27:6d:bf:56:5a:a3:d5:40:58:32:34:dc:
         80:da:fd:5c:8f:d8:a5:55:1c:ca:fd:95:7d:17:91:97:35:86:
         c5:fd:69:73:e1:ea:18:61:fe:8d:bd:ec:4b:29:92:71:f8:88:
         02:74:63:14:14:4e:03:9a:3c:0a:b4:46:64:69:70:8e:63:02:
         f8:d2:2e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:38:39 2026 by rpki-client