This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File:                     C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier:          eT8893aN59dALcMAJIjU2d7IUVaf4+kDquPvsTP+wa0=
Subject key identifier:   92:9A:46:6A:8F:AB:FE:49:CE:1D:1D:36:D0:7F:E3:2A:6E:C5:61:9D
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer:       /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial:       0D33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number:          0D1E
Signing time:             Sat 24 Jan 2026 17:41:20 +0000
Manifest this update:     Sat 24 Jan 2026 17:41:19 +0000
Manifest next update:     Sat 31 Jan 2026 17:41:19 +0000
Files and hashes:         1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: VRNHmXcr6t7Evjk+FjFE6TOs8ajXGTzemaD0BQE2Wb0=)
                          2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=)
                          3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
                          rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
        Validity
            Not Before: Jan 24 17:41:19 2026 GMT
            Not After : Jan 31 17:41:19 2026 GMT
        Subject: CN=69750440-7755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:3e:46:45:f0:77:c7:e6:da:4c:c8:42:9b:
                    bc:af:8e:8c:e1:87:5b:f5:c2:78:01:9b:22:c7:cd:
                    e5:36:f5:19:25:1a:af:75:1b:bb:7d:84:4a:7d:17:
                    55:28:b0:32:c2:5d:73:ba:4f:d5:5c:7b:88:a0:03:
                    36:16:c9:f7:b1:38:d9:da:b6:23:38:c7:41:4c:e9:
                    78:12:02:c2:5a:01:b1:a7:7b:ea:84:00:aa:49:bc:
                    b2:76:14:d1:ee:7a:7a:15:12:f5:b6:93:b1:5a:18:
                    9c:d1:ca:04:6d:dc:25:38:fc:7d:98:7b:54:25:39:
                    f1:2d:3f:9a:de:00:52:b4:16:b1:b5:8d:a9:56:6b:
                    eb:39:95:dd:35:32:cb:e8:c9:fc:09:e3:9a:9c:de:
                    11:e0:5b:f5:b8:ed:57:d4:c4:52:3a:c5:72:49:b4:
                    d5:ee:bd:96:e4:55:62:39:a9:00:95:a5:78:bf:5b:
                    d7:ad:a4:bd:87:45:a6:54:f9:9c:5a:3b:0f:6e:84:
                    5e:36:36:0e:43:de:a6:76:30:d8:9f:19:5f:62:4d:
                    b8:fa:ff:f2:d5:04:7d:83:f5:13:87:ea:5d:8e:47:
                    61:85:61:55:57:bc:91:0b:1e:9f:27:8b:02:cb:12:
                    a8:2e:e2:ea:14:1a:a2:c5:cd:f7:76:e9:a5:1b:99:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:46:6A:8F:AB:FE:49:CE:1D:1D:36:D0:7F:E3:2A:6E:C5:61:9D
            X509v3 Authority Key Identifier:
                keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:da:28:fe:c5:de:9b:2c:dd:ec:19:c5:1d:2d:e2:8a:18:39:
         e2:2d:49:ec:b2:12:ea:4c:d2:ae:1e:86:97:23:d2:4b:36:73:
         0a:1c:c6:44:4c:5f:3d:21:51:b3:be:cb:9b:b7:56:3e:5b:76:
         66:32:3a:2d:5f:74:36:f7:f2:b6:08:72:7d:1b:b8:83:9c:7b:
         9b:4b:bf:8c:9f:d8:bb:5b:0d:3d:3b:0b:eb:fd:05:1a:46:9d:
         77:6a:d1:1f:ab:ab:3e:44:00:ec:b0:fb:32:cc:3a:5e:bc:78:
         b6:bc:18:9a:7e:f9:84:75:c8:58:66:14:91:6a:c8:31:02:72:
         f9:c3:21:3c:b5:27:ba:f7:18:47:87:98:2b:a2:de:68:21:a2:
         fd:1e:bb:81:53:6f:a7:f9:e5:cd:cc:c1:25:8b:74:42:c7:a3:
         01:9b:e2:5b:c6:9f:ff:0c:74:1e:0d:dd:04:6f:05:94:bd:2b:
         77:ab:fd:ee:2d:45:ae:12:14:81:d7:f0:c4:88:a0:dc:ca:0f:
         63:44:85:55:c0:d4:87:a7:ff:ab:a0:d6:f9:6e:53:e6:1e:36:
         ac:fd:95:ae:78:3f:99:aa:7f:22:2d:08:9c:ce:6a:01:4d:51:
         9e:0a:60:dc:05:a6:f4:98:4b:9e:0a:47:c7:37:00:c9:ca:75:
         2a:14:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:59 2026 by rpki-client