This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          sU3neb89OKkfV7NVpOiAmBeu7EiFdLXRHYBGtcLF2v4=
Subject key identifier:   4A:61:45:55:59:95:11:3A:A6:72:ED:5D:17:9C:0E:A6:88:B8:5B:17
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       1F9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          1F73
Signing time:             Sat 24 Jan 2026 15:49:46 +0000
Manifest this update:     Sat 24 Jan 2026 15:49:45 +0000
Manifest next update:     Sat 31 Jan 2026 15:49:45 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: UrpfOlhNkWbuQ4WJXFEi7Z9MbhyvD7uTI0033Y9p+f4=)
                          2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: zBjYJnHa1n009AI95wfFYThs3iAA9crPH92IoCYjy4g=)
                          3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: U+HOR1WWM3bWUanGm2xW2p0h9XaY3gPXOWuTGfO7XNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8090 (0x1f9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: Jan 24 15:49:45 2026 GMT
            Not After : Jan 31 15:49:45 2026 GMT
        Subject: CN=6974ea1a-d5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:d5:31:02:69:92:00:0c:14:6d:27:c2:9f:
                    ef:47:2c:16:6f:20:e2:02:ec:9c:15:6d:58:fc:12:
                    0b:45:4e:0f:df:6a:f2:3f:2b:bc:fa:1f:09:b9:33:
                    a6:7a:bd:2b:77:b1:19:a3:a0:d7:b3:5b:92:e8:72:
                    92:e9:d1:a0:53:78:c5:c1:db:4c:e4:bd:0e:e7:fd:
                    5a:f3:67:d9:75:a7:66:36:24:1b:aa:6c:43:55:9b:
                    1f:b9:ee:10:11:db:4f:b3:f4:57:91:bf:9b:84:cd:
                    03:d6:21:d4:fe:7a:45:ce:63:70:6d:82:8b:fa:33:
                    61:7f:d4:9f:05:32:c2:8c:c5:24:d5:19:ea:e9:87:
                    29:0f:14:ea:c4:d9:c8:b4:0e:72:e8:a9:9c:1c:82:
                    a8:d5:0d:2c:18:5e:a7:2a:ed:b3:db:f3:29:f4:4b:
                    24:d8:51:39:b5:a4:84:95:86:29:c8:b6:5f:61:21:
                    7e:14:1e:66:11:35:03:10:3c:ee:a7:f8:c4:fe:86:
                    93:1e:c7:6c:93:f5:9a:c8:53:64:17:b4:37:38:22:
                    75:80:d7:2e:5a:a5:b2:ed:06:64:6b:9a:9c:38:47:
                    ec:5a:9e:2b:c0:74:b9:8b:da:0f:66:73:c1:cf:1a:
                    9d:0d:1d:2b:da:3f:ae:ff:3a:79:b3:50:b7:05:29:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:61:45:55:59:95:11:3A:A6:72:ED:5D:17:9C:0E:A6:88:B8:5B:17
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3e:70:ad:96:27:e7:b8:17:ef:fa:84:41:6a:28:d7:77:77:
         80:a5:2d:c0:a1:43:f0:e4:15:fb:25:9b:ab:98:23:80:9f:e3:
         2b:68:28:da:b7:6c:7a:6d:54:8c:fb:49:f4:86:4a:ba:a5:6c:
         d5:13:58:38:e0:9d:df:14:8b:11:8c:6c:91:6c:9c:69:03:f5:
         76:d6:8d:28:de:18:97:3f:45:b4:ea:e8:36:e4:23:c5:34:6e:
         31:43:44:a8:7b:b7:1c:19:f7:cb:b1:03:27:5a:ff:06:2f:d0:
         33:4f:3d:c1:fc:d5:df:a6:32:30:b4:d6:03:61:19:fb:86:ef:
         25:26:32:38:a5:1e:f6:4a:ca:68:2d:55:44:06:be:d2:65:06:
         88:3f:01:5d:c8:82:2a:5c:07:01:94:f0:d1:3a:8c:09:00:87:
         3f:31:2e:fe:58:41:05:5c:2e:bf:cb:c8:c2:aa:96:79:ce:ce:
         c0:6b:d5:b3:53:07:2a:96:ae:52:74:10:42:5b:89:d9:6d:3a:
         f9:75:2b:7e:07:98:a0:90:57:ca:94:21:49:52:73:3b:3d:85:
         f3:7f:f4:51:6d:c1:7b:50:49:6c:a8:8c:e0:b3:80:22:e5:d0:
         92:c3:71:ea:e5:07:9a:2b:c2:2f:14:2f:4b:12:0d:85:86:02:
         c4:38:52:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:29 2026 by rpki-client