This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
File:                     b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json)
Hash identifier:          I9tFRmxcVa7p5A60+QRd2/y0XwgkgjBkeJ7JdUZXrZM=
Subject key identifier:   69:DB:8A:BF:1D:13:30:DD:2C:F3:67:D1:D4:8C:81:E6:34:B8:8E:8F
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Certificate issuer:       /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
Manifest number:          DF
Signing time:             Sun 25 Jan 2026 04:46:41 +0000
Manifest this update:     Sun 25 Jan 2026 04:46:41 +0000
Manifest next update:     Sun 01 Feb 2026 04:46:41 +0000
Files and hashes:         1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: mdTRjAjK6PgZoR0B3nEg8OFB5oDjFMzbG0iCRqB5tns=)
                          2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: IayxZBY/Xkf1kXaHHDDbYWjMf86Yy+h9BTx5BmoHX4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
                          rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
        Validity
            Not Before: Jan 25 04:46:41 2026 GMT
            Not After : Feb  1 04:46:41 2026 GMT
        Subject: CN=6975a031-78e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:03:fa:4d:42:ee:58:03:78:2c:92:e5:e2:
                    51:11:fc:c6:c5:79:60:37:b0:89:e1:86:19:85:8f:
                    12:a0:5d:8b:9b:bc:21:0e:4f:d0:31:db:40:11:bd:
                    b7:83:40:d5:a6:10:c7:2f:3e:5b:72:dd:af:86:db:
                    5b:ad:58:c8:2f:4a:0a:2b:17:3d:eb:d1:f7:78:0f:
                    f9:ed:18:6f:c0:dd:36:88:7c:ca:78:0b:a9:3c:53:
                    6b:1d:c4:c5:57:81:2a:f3:93:b3:1b:1d:b4:24:b7:
                    c1:a0:00:14:31:6d:26:43:c6:ac:af:17:19:48:0c:
                    c7:bd:0e:33:a1:65:cb:1d:fa:49:f7:43:8b:39:27:
                    31:fa:b0:f9:3f:f7:2b:fb:37:bd:ad:48:6b:65:20:
                    8f:e8:43:09:1e:ca:97:20:0c:c4:f8:7b:a9:38:a2:
                    ea:15:99:20:0c:22:08:64:aa:93:4b:47:c2:95:62:
                    f2:1f:0e:ac:39:06:38:57:80:b2:e5:98:29:75:58:
                    f0:13:25:79:ee:14:50:b9:cb:ab:f9:a9:1b:e0:c5:
                    68:ce:fb:b8:02:76:28:bc:61:0a:96:ff:8f:3b:8e:
                    9e:38:34:11:bc:a5:af:1d:ae:e8:d9:91:f9:ff:4c:
                    4e:1a:c8:92:d1:ab:95:32:d7:ef:b2:0c:cb:aa:83:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:8A:BF:1D:13:30:DD:2C:F3:67:D1:D4:8C:81:E6:34:B8:8E:8F
            X509v3 Authority Key Identifier:
                keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:2c:f2:62:90:80:ee:23:67:76:bd:d1:7e:96:cb:48:64:
         04:bd:54:e2:3f:c8:7b:2d:88:69:61:b8:01:40:5a:a6:9d:a3:
         5f:58:05:e4:ee:08:fc:05:fd:14:7d:f8:82:7f:94:aa:3e:fa:
         0c:b9:ab:b4:4d:f4:05:d0:73:13:86:f1:c5:67:40:bf:87:cb:
         7b:8d:7b:ec:11:1b:be:98:25:23:7b:0a:41:2d:60:fb:4f:5d:
         e2:e3:c8:0f:15:7a:cb:cf:ce:fe:a3:7e:48:46:2b:32:7e:93:
         d5:f5:f4:3d:da:a2:b6:dc:0b:09:d5:d9:9a:50:ad:c1:f7:8f:
         f9:2e:e1:da:62:18:4f:4c:6c:cf:c7:64:df:67:e9:55:f4:3b:
         33:c1:da:d2:89:c5:30:77:3c:aa:34:57:aa:29:05:a6:8f:17:
         60:bb:b6:44:f7:bd:bf:f1:e9:e2:f7:2e:0e:72:2e:03:fd:53:
         50:d9:ce:df:7f:f3:7c:d5:7e:bc:e7:dd:b4:df:07:c0:2c:70:
         82:9d:10:3d:48:44:51:ee:ad:c1:f9:5b:29:41:96:eb:1d:a7:
         00:76:22:0f:b7:83:79:83:6b:4f:2d:22:b1:66:fd:26:ce:b2:
         02:5c:25:de:0a:66:ec:6c:35:01:c7:7f:a6:88:79:7f:f7:ac:
         66:4f:06:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NzA2RTQxMTAvBgNVBAUTKDZGN0U1OEQwODk2Mzg5RjdFN0ZFNEU4Nzk1QUE1NTVE
NUM1NTUxODgwHhcNMjYwMTI1MDQ0NjQxWhcNMjYwMjAxMDQ0NjQxWjAYMRYwFAYD
VQQDDA02OTc1YTAzMS03OGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqN4D+k1C7lgDeCyS5eJREfzGxXlgN7CJ4YYZhY8SoF2Lm7whDk/QMdtAEb23
g0DVphDHLz5bct2vhttbrVjIL0oKKxc969H3eA/57RhvwN02iHzKeAupPFNrHcTF
V4Eq85OzGx20JLfBoAAUMW0mQ8asrxcZSAzHvQ4zoWXLHfpJ90OLOScx+rD5P/cr
+ze9rUhrZSCP6EMJHsqXIAzE+HupOKLqFZkgDCIIZKqTS0fClWLyHw6sOQY4V4Cy
5ZgpdVjwEyV57hRQucur+akb4MVozvu4AnYovGEKlv+PO46eODQRvKWvHa7o2ZH5
/0xOGsiS0auVMtfvsgzLqoO69QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnbir8d
EzDdLPNn0dSMgeY0uI6PMB8GA1UdIwQYMBaAFG9+WNCJY4n35/5Oh5WqVV1cVVGI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zQUJBODBBQUE2
ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlmZm5fazZIbGFwVlhWeFZV
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDZFNC8zQUJBODBBQUE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9iMzVZMElsamlm
Zm5fazZIbGFwVlhWeFZVWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/yyzyYpCA7iNndr3RfpbLSGQEvVTiP8h7LYhpYbgBQFqmnaNfWAXk
7gj8Bf0UffiCf5SqPvoMuau0TfQF0HMThvHFZ0C/h8t7jXvsERu+mCUjewpBLWD7
T13i48gPFXrLz87+o35IRisyfpPV9fQ92qK23AsJ1dmaUK3B94/5LuHaYhhPTGzP
x2TfZ+lV9DszwdrSicUwdzyqNFeqKQWmjxdgu7ZE972/8eni9y4Oci4D/VNQ2c7f
f/N81X6859203wfALHCCnRA9SERR7q3B+VspQZbrHacAdiIPt4N5g2tPLSKxZv0m
zrICXCXeCmbsbDUBx3+miHl/96xmTwZJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:08 2026 by rpki-client