This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          Cwj1VRHEu5XDLWJO2WnW7tDrBpfZUWuL5iG8+QYBweY=
Subject key identifier:   A9:2C:75:51:3D:AE:2E:26:09:06:9F:55:DF:7C:95:CE:E6:A4:15:57
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          01E1
Signing time:             Sun 25 Jan 2026 02:00:08 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:07 +0000
Manifest next update:     Sun 01 Feb 2026 02:00:07 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: +Olc0qfvbS/swrL3Mg23XJU+Zj5A+TCCLSC3NGP6RHU=)
                          2: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
                          4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Jan 25 02:00:07 2026 GMT
            Not After : Feb  1 02:00:07 2026 GMT
        Subject: CN=69757928-6259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:3d:3b:dd:3a:bf:e2:e9:53:3c:bb:c6:d2:
                    aa:35:bf:d2:12:1f:23:af:c7:e6:1c:70:0f:21:73:
                    68:b3:69:a5:29:61:27:b9:30:5e:63:38:4d:bf:f9:
                    de:6d:ec:f9:78:3c:c8:03:f2:16:2f:79:9d:40:e7:
                    b2:31:09:c1:76:9a:6e:09:e7:a1:a4:4c:8c:60:b0:
                    a4:da:6c:a5:c0:60:f4:87:9f:7c:4c:ad:2f:54:20:
                    33:b5:3b:86:9c:0c:6c:50:13:d3:6d:52:58:b9:d1:
                    cd:a2:c9:83:8d:3f:fc:b1:4d:18:21:1e:30:78:f2:
                    3e:11:5d:1a:86:bf:25:f2:ca:b1:d4:f2:cc:2c:63:
                    24:bc:1e:90:5e:2e:07:54:91:8e:4d:2d:23:9a:64:
                    a5:0e:58:bb:9e:52:9f:0d:2f:13:c0:13:32:36:c8:
                    b4:33:52:fb:c9:ee:56:44:1d:8e:69:64:4c:b3:a4:
                    fa:83:73:bc:67:4d:be:a2:8a:bc:ac:31:37:b3:93:
                    b6:c5:65:7e:07:d4:a4:8c:ac:76:2a:18:1e:a6:dc:
                    97:7c:b9:19:83:8b:d5:07:5d:26:15:54:f2:a4:7d:
                    31:f4:ee:95:03:3f:11:eb:2c:38:f8:ca:32:5c:1e:
                    23:c9:36:34:71:fa:1d:33:37:23:1b:e5:e3:3a:0e:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2C:75:51:3D:AE:2E:26:09:06:9F:55:DF:7C:95:CE:E6:A4:15:57
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:7a:c8:bd:2e:4f:a2:15:87:fa:45:c4:b6:af:96:83:62:cb:
         f7:79:96:00:bd:60:67:16:0b:8d:bb:1d:19:6c:cd:d1:f2:bc:
         59:7d:fc:25:17:01:7b:32:5a:26:b2:3a:3b:43:3b:6f:77:39:
         98:24:6c:0e:29:18:9b:ca:7b:58:75:56:c3:e7:8e:77:23:f7:
         da:72:f7:bb:ba:e2:a7:80:8a:3c:6c:0f:7b:4c:47:58:ce:14:
         8e:8c:5b:4d:ae:c6:b4:82:3b:e9:e3:f5:8f:b1:1e:4c:35:96:
         56:0a:43:6a:a8:8c:9b:d4:d4:9c:32:82:fe:c6:12:bd:5c:f1:
         ee:48:b7:41:0c:b7:94:d3:4d:19:e4:bc:03:ed:fd:37:e7:e5:
         0b:90:2b:ae:be:59:12:41:5d:86:76:b2:d4:0b:3e:9a:b2:d5:
         70:e2:e1:ef:78:c6:d2:42:01:1d:64:61:f4:c8:d7:cb:47:5f:
         3b:66:e2:ae:a4:5c:1c:f4:2c:72:cd:fc:1e:2d:0f:46:f5:37:
         0e:72:d9:5f:30:05:42:21:4d:bf:94:f3:c5:fb:3e:6a:ec:02:
         73:09:7f:91:7d:61:69:0a:fb:c9:f6:3d:d7:95:65:ce:b5:a3:
         be:92:e9:97:c1:e3:82:79:64:98:2e:53:e9:fc:7a:42:21:19:
         6c:07:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:22:03 2026 by rpki-client