This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
File:                     Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json)
Hash identifier:          YBDtcE8X23xtHwtSm0j7eYqMnU+rcySRMG65TK3kKrE=
Subject key identifier:   9A:93:81:FE:C5:B2:AA:D6:D9:D1:D1:62:D5:53:52:B3:30:62:1A:AD
Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78
Certificate issuer:       /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
Manifest number:          01A6
Signing time:             Sun 25 Jan 2026 02:36:44 +0000
Manifest this update:     Sun 25 Jan 2026 02:36:44 +0000
Manifest next update:     Sun 01 Feb 2026 02:36:44 +0000
Files and hashes:         1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: jMa5lBkLT4R2zkSz6uFhFKHZ9/AXcUy7HS7pkSHuaWA=)
                          2: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: QQ1nvLzNS3HD5jlf0kpVNmen2iw89rXFQV6oEoTmCT0=)
                          3: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: CHOXnr1q1Ft+OfCJHHoV5TEgJwubnVFztuPcYTVOF9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl
                          rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778
        Validity
            Not Before: Jan 25 02:36:44 2026 GMT
            Not After : Feb  1 02:36:44 2026 GMT
        Subject: CN=697581bc-6f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:cd:d7:fb:1e:96:a6:42:97:e5:0b:3e:2f:
                    df:ef:17:fc:03:79:e0:6d:10:3f:a9:f4:6a:7b:89:
                    00:8f:52:fa:f3:71:55:5a:c9:d2:26:bc:fa:64:24:
                    99:11:34:c3:36:cc:0d:ad:98:3c:1a:c5:6d:4e:38:
                    62:5a:b4:5f:f3:90:f3:04:00:b3:33:07:8b:7d:fd:
                    b0:e5:a3:90:fc:ca:bd:1d:bd:4a:97:20:c7:60:26:
                    50:64:06:ce:e9:d5:0e:50:63:24:f3:6c:74:4e:3f:
                    e2:cf:1f:c6:c7:41:ae:00:16:49:dd:88:84:66:50:
                    ba:c4:22:ba:e0:38:64:b8:38:4b:dc:a1:64:5f:53:
                    ea:cc:4f:66:b4:7e:3a:98:50:68:7e:a0:5d:69:1a:
                    30:ea:a0:b0:4f:4c:e6:11:61:97:bf:f4:99:6a:b5:
                    40:45:f6:71:d1:3e:aa:9c:44:18:89:5e:58:ac:9b:
                    3f:43:88:1b:9f:78:d8:1e:91:16:df:7a:9f:d3:89:
                    ea:ff:7a:c5:a7:0a:7c:0c:c7:62:5d:8b:ce:d1:b0:
                    45:3a:e9:c0:24:24:be:1d:32:03:1a:b9:ce:df:c1:
                    6b:d4:71:aa:94:4f:50:7f:a1:b0:a4:9a:a3:1a:2f:
                    11:a9:e0:5f:ad:66:2d:7f:1b:83:2b:45:05:c8:f7:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:81:FE:C5:B2:AA:D6:D9:D1:D1:62:D5:53:52:B3:30:62:1A:AD
            X509v3 Authority Key Identifier:
                keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:c6:fa:80:b0:cd:9f:d1:e2:d0:e0:95:97:17:8a:4a:a0:
         fd:96:b8:80:21:bf:59:f4:16:2a:07:58:75:94:c0:c0:b4:28:
         ee:b8:79:2e:e8:b3:79:58:f7:ba:eb:ef:0b:cc:6d:c8:f6:50:
         45:af:7e:9f:bd:c5:71:59:c8:c4:72:bc:81:d4:b9:3c:9e:2a:
         44:b2:6e:05:33:40:98:95:7a:99:79:ec:61:78:15:5a:79:62:
         6a:fe:75:78:3b:6f:27:4b:be:8c:0e:65:67:ce:a4:19:49:84:
         54:cd:ea:49:86:57:6d:6b:3a:3e:ef:0f:21:5f:98:0d:0e:36:
         5a:fc:b2:62:40:d5:87:b3:b9:a6:b2:d3:41:e6:e1:d9:bc:4b:
         21:b4:6f:b9:35:96:7e:c5:d3:8c:63:ba:f3:76:53:df:ad:db:
         df:e6:49:b2:d1:6d:4f:e7:41:29:dc:27:72:39:5c:b8:4c:9f:
         c7:76:13:e6:ce:d1:40:46:d7:a5:81:dc:41:d8:01:13:71:4a:
         f6:09:7c:2c:02:e1:26:cd:cf:1f:69:f2:66:4b:08:f4:70:fa:
         8e:b9:2f:a5:09:b1:56:ed:7d:68:5b:74:d7:1c:fe:04:37:ef:
         3d:00:5f:d1:64:36:99:9d:c1:05:11:4d:d8:7a:25:76:7b:a3:
         ab:d4:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:14 2026 by rpki-client