This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          iVSXol68TRz/xN/ltzzTaiHviP2Nfx7Iha5sjMI9C4A=
Subject key identifier:   B7:8D:0A:90:FE:4E:4D:78:FC:4F:63:BE:43:07:F7:EE:D6:41:06:63
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       03D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          03AA
Signing time:             Sun 25 Jan 2026 00:02:02 +0000
Manifest this update:     Sun 25 Jan 2026 00:02:02 +0000
Manifest next update:     Sun 01 Feb 2026 00:02:02 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: wMuh4TmYtNKcU7ODyVprYha2h7h3IqxkbML/9suofFk=)
                          2: A07DBC62B03911F083346261C4F9AE02.roa (hash: EDobCAZFBGKOU5DazXWApk+QjAwkkGRuH0JD5kFy8s4=)
                          3: 3CDB97F6B03911F09A54BE60C4F9AE02.roa (hash: 6SWqHXnqIzuEPf5esMyFHKpdKbE+6wQV4YrBSsNPMq0=)
                          4: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: ZYAh/gwuXCu7E/Q2FaIlQuRJqUbt0BTDxqZaA+sc86E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Jan 25 00:02:02 2026 GMT
            Not After : Feb  1 00:02:02 2026 GMT
        Subject: CN=69755d7a-ea33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:11:be:fe:b2:f6:d8:a0:a6:71:c8:9e:38:
                    6e:01:84:c4:b9:37:2f:9c:74:3e:21:7e:14:23:35:
                    cf:c8:e5:4f:dd:dd:4f:71:c9:bd:f2:a5:41:c0:73:
                    a3:9a:ab:ba:04:20:d2:27:78:54:3f:aa:d6:b4:a1:
                    4a:0e:4e:b9:61:22:72:f6:a7:cd:77:38:15:5d:5b:
                    99:7b:e6:5e:04:e8:80:d0:5b:bd:c8:4a:27:46:a5:
                    c1:35:89:e5:43:ab:f1:3b:9d:e8:2e:00:2c:28:a0:
                    00:c6:1f:60:2d:a0:af:4c:88:51:d5:fa:9e:df:63:
                    0f:fb:e6:7d:77:b5:6b:c6:38:58:c5:07:ab:cc:e4:
                    09:e3:16:82:86:5d:83:5d:62:b2:64:02:3c:de:df:
                    14:5b:66:fe:b3:74:8f:a5:19:ca:34:72:5f:ee:54:
                    b8:c3:be:0b:35:5a:d0:43:39:1e:e5:48:b0:7f:46:
                    7e:8f:cc:bb:60:1d:5b:58:66:bd:13:dd:b6:1a:75:
                    f3:96:2b:d9:b9:26:04:23:a2:88:7b:b1:4a:9a:58:
                    25:cd:8b:e3:34:18:43:55:e7:05:b4:6a:af:ed:50:
                    96:c0:06:06:4a:1f:a6:83:59:39:da:36:d1:ec:d2:
                    33:22:e0:8f:aa:46:69:e0:07:7b:35:4e:04:30:f5:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:0A:90:FE:4E:4D:78:FC:4F:63:BE:43:07:F7:EE:D6:41:06:63
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:2b:16:39:26:91:45:1e:fe:19:05:4a:06:bd:16:22:79:
         60:5c:57:58:60:17:b8:72:2e:b1:9f:1f:aa:e1:7d:68:ff:d1:
         d7:44:4c:34:2f:2d:84:bb:5b:5d:e6:22:e0:7d:5f:a2:e4:86:
         ac:f1:16:e8:31:ec:ab:42:91:f4:77:de:28:9a:9d:61:9b:ed:
         fc:f1:d7:b4:99:40:00:52:8b:5b:25:fa:8c:94:18:40:39:e8:
         f1:9a:f5:1d:b0:8c:a2:6b:33:c3:aa:bb:09:7f:ad:45:ca:45:
         2e:cd:64:96:ed:0f:b0:5a:42:40:74:95:34:2e:f1:13:c7:9d:
         53:73:40:8d:1d:ef:6a:ff:e2:29:38:bd:11:57:91:59:f1:cc:
         71:13:b6:32:74:f6:e0:0f:41:3c:c7:45:3e:68:ee:bb:b4:c7:
         cc:94:e1:40:27:a2:bf:67:d3:d5:29:17:bb:9f:a5:64:98:05:
         68:2d:8e:0d:c6:8d:72:d7:b9:3d:0e:68:ad:f6:9a:94:08:82:
         5d:a9:35:f0:10:9f:c2:b6:ff:1a:48:7f:d1:81:76:6e:8b:c7:
         86:da:ed:8e:32:d4:55:0f:87:5a:b2:5f:a3:e4:04:69:b3:78:
         56:a6:76:db:d3:6f:37:0b:5a:3f:3e:ac:f8:ba:f1:bb:94:ac:
         8e:e5:aa:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1
NkMwOEEyQjYwHhcNMjYwMTI1MDAwMjAyWhcNMjYwMjAxMDAwMjAyWjAYMRYwFAYD
VQQDDA02OTc1NWQ3YS1lYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDARvv6y9tigpnHInjhuAYTEuTcvnHQ+IX4UIzXPyOVP3d1Pccm98qVBwHOj
mqu6BCDSJ3hUP6rWtKFKDk65YSJy9qfNdzgVXVuZe+ZeBOiA0Fu9yEonRqXBNYnl
Q6vxO53oLgAsKKAAxh9gLaCvTIhR1fqe32MP++Z9d7VrxjhYxQerzOQJ4xaChl2D
XWKyZAI83t8UW2b+s3SPpRnKNHJf7lS4w74LNVrQQzke5Uiwf0Z+j8y7YB1bWGa9
E922GnXzlivZuSYEI6KIe7FKmlglzYvjNBhDVecFtGqv7VCWwAYGSh+mg1k52jbR
7NIzIuCPqkZp4Ad7NU4EMPUOlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeNCpD+
Tk14/E9jvkMH9+7WQQZjMB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3
RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjVCMS9FRDYyOUYwQ0Q3RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FG
a2UtdkozYkRzTVZXd0lvclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIDCsWOSaRRR7+GQVKBr0WInlgXFdYYBe4ci6xnx+q4X1o/9HXREw0
Ly2Eu1td5iLgfV+i5Ias8RboMeyrQpH0d94omp1hm+388de0mUAAUotbJfqMlBhA
OejxmvUdsIyiazPDqrsJf61FykUuzWSW7Q+wWkJAdJU0LvETx51Tc0CNHe9q/+Ip
OL0RV5FZ8cxxE7YydPbgD0E8x0U+aO67tMfMlOFAJ6K/Z9PVKRe7n6VkmAVoLY4N
xo1y17k9Dmit9pqUCIJdqTXwEJ/Ctv8aSH/RgXZui8eG2u2OMtRVD4dasl+j5ARp
s3hWpnbb0283C1o/Pqz4uvG7lKyO5aqP
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:44 2026 by rpki-client