This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File:                     3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier:          PIPDM5cRDTKyzzRsofDoA2HtRKt3aw0AiZMhlmzRhE8=
Subject key identifier:   EA:10:94:64:B5:2C:5A:2C:E2:99:58:BF:47:64:89:53:99:DD:9B:59
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer:       /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number:          F5
Signing time:             Sun 25 Jan 2026 04:28:52 +0000
Manifest this update:     Sun 25 Jan 2026 04:28:51 +0000
Manifest next update:     Sun 01 Feb 2026 04:28:51 +0000
Files and hashes:         1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: WbmZt1HasIuxqsmzaZ4ZLeHrsUPa0bpEHYbSVb3A9gw=)
                          2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: sBDPY7rsFbT6fhu5rc+2MguV1coxbEaU8Tzb3L7ehlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
        Validity
            Not Before: Jan 25 04:28:51 2026 GMT
            Not After : Feb  1 04:28:51 2026 GMT
        Subject: CN=69759c04-19dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:2e:da:7e:28:76:42:31:22:10:f5:82:e6:
                    9f:7e:19:e8:b4:d2:81:c7:2b:86:c8:3c:72:36:89:
                    a5:47:db:bf:07:aa:e2:1d:0a:65:88:c3:80:a5:e3:
                    43:5f:dc:6d:c4:bd:5f:26:8c:c1:1b:5a:69:c7:63:
                    f2:a4:22:90:3f:08:5e:94:a8:34:01:aa:e9:df:86:
                    f2:dd:07:34:12:b3:21:ef:89:0b:0b:c1:07:13:f0:
                    cf:79:62:52:bb:3c:4a:ad:79:b3:8b:cf:02:50:e8:
                    32:9d:43:70:a9:b0:50:46:d3:c6:85:fe:2d:16:f7:
                    9f:8c:97:6f:a5:b4:b0:d9:3d:82:51:3b:54:01:e5:
                    57:df:fa:85:d4:7d:37:8d:eb:fb:5e:dc:92:77:5d:
                    2f:05:cd:b9:bc:4f:fe:ab:a2:8b:e7:70:e0:11:93:
                    b9:0f:a1:a1:6f:52:3d:38:ef:26:5b:c5:c3:eb:ab:
                    6a:a1:1c:37:f2:e1:47:1d:8d:d3:93:a1:74:52:9d:
                    ba:ff:31:fc:ec:b9:19:fe:4c:ee:65:20:b2:aa:f7:
                    e4:46:30:46:5b:8d:8b:86:ab:45:be:47:5d:8a:66:
                    f2:75:75:89:61:fa:1e:de:96:7e:e1:4e:df:b0:7b:
                    fb:91:68:64:38:22:8f:82:61:47:12:3b:23:79:75:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:94:64:B5:2C:5A:2C:E2:99:58:BF:47:64:89:53:99:DD:9B:59
            X509v3 Authority Key Identifier:
                keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:a2:4a:94:c7:89:12:af:6c:2c:9c:5b:d8:e2:e2:39:f7:
         8e:44:76:be:07:9a:e9:0a:3b:00:f1:bd:32:5c:1c:4b:b2:fc:
         c5:95:75:84:0c:3a:e2:a5:44:91:d5:06:7c:09:e6:82:06:a3:
         0d:61:4b:82:fa:ae:e4:cd:8f:25:39:8a:5e:68:b3:70:60:e4:
         75:af:17:72:d8:0c:cc:46:81:ad:67:10:82:a0:40:84:a0:d3:
         1b:89:da:51:ef:58:e5:61:83:51:30:02:4a:43:6f:52:3d:83:
         d7:af:e0:a8:8d:96:ad:03:7e:d4:86:7f:cf:2d:0a:84:d1:24:
         f2:2e:1a:f7:e4:be:c3:02:09:37:f5:e0:11:1c:4f:ee:06:fb:
         46:dd:26:1f:ac:0c:b6:42:ec:ad:59:b8:ef:b9:05:f7:80:6a:
         c3:aa:68:91:d5:2e:b3:c6:b8:17:b6:21:8e:fc:94:40:35:26:
         84:2b:9e:fe:7c:83:cd:24:af:a3:81:d6:58:a5:70:84:3c:7f:
         a2:6b:37:5a:08:2c:09:a4:9f:22:c5:f4:6b:8e:e9:29:b1:55:
         53:db:fc:6c:3e:8a:69:66:09:3f:75:0e:34:88:50:c7:ac:78:
         a1:3e:ad:ee:36:bf:9e:55:66:8a:cf:f8:8d:c2:cc:40:ac:44:
         fb:a7:a4:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE
QTU2ODdCRjAwHhcNMjYwMTI1MDQyODUxWhcNMjYwMjAxMDQyODUxWjAYMRYwFAYD
VQQDDA02OTc1OWMwNC0xOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosku2n4odkIxIhD1guaffhnotNKBxyuGyDxyNomlR9u/B6riHQpliMOApeND
X9xtxL1fJozBG1ppx2PypCKQPwhelKg0Aarp34by3Qc0ErMh74kLC8EHE/DPeWJS
uzxKrXmzi88CUOgynUNwqbBQRtPGhf4tFvefjJdvpbSw2T2CUTtUAeVX3/qF1H03
jev7XtySd10vBc25vE/+q6KL53DgEZO5D6Ghb1I9OO8mW8XD66tqoRw38uFHHY3T
k6F0Up26/zH87LkZ/kzuZSCyqvfkRjBGW42LhqtFvkddimbydXWJYfoe3pZ+4U7f
sHv7kWhkOCKPgmFHEjsjeXWXFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoQlGS1
LFos4plYv0dkiVOZ3ZtZMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1
MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn
VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdSqJKlMeJEq9sLJxb2OLiOfeORHa+B5rpCjsA8b0yXBxLsvzFlXWE
DDripUSR1QZ8CeaCBqMNYUuC+q7kzY8lOYpeaLNwYOR1rxdy2AzMRoGtZxCCoECE
oNMbidpR71jlYYNRMAJKQ29SPYPXr+CojZatA37Uhn/PLQqE0STyLhr35L7DAgk3
9eARHE/uBvtG3SYfrAy2QuytWbjvuQX3gGrDqmiR1S6zxrgXtiGO/JRANSaEK57+
fIPNJK+jgdZYpXCEPH+iazdaCCwJpJ8ixfRrjukpsVVT2/xsPoppZgk/dQ40iFDH
rHihPq3uNr+eVWaKz/iNwsxArET7p6TI
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:29 2026 by rpki-client