This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
File:                     S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json)
Hash identifier:          Ynpx2lmKb07qC+lNgXhvsWzGeuHGHS2DZN1KwJZ/Du8=
Subject key identifier:   5C:7F:6C:01:2F:93:D9:AE:5D:A2:40:43:B7:25:E5:5A:84:61:35:BE
Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19
Certificate issuer:       /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
Manifest number:          01E2
Signing time:             Sun 25 Jan 2026 02:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:39 +0000
Manifest next update:     Sun 01 Feb 2026 02:00:39 +0000
Files and hashes:         1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: tmWY5ybisEq5uzqCpJ/DbULD40+kK0LPKjRSV0BQWqQ=)
                          2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: sLVF2uLBYBc6LDSXH2VUz3ksriL+t2pMsQjafYLst9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl
                          rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319
        Validity
            Not Before: Jan 25 02:00:39 2026 GMT
            Not After : Feb  1 02:00:39 2026 GMT
        Subject: CN=69757948-6c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:a4:f5:63:f4:f4:46:30:05:39:13:54:74:
                    f4:e7:59:fe:52:90:d3:a4:0d:e8:5c:d2:fc:a5:83:
                    41:fc:9b:ae:22:e3:51:90:36:7f:2e:3a:49:5d:cc:
                    4f:95:87:79:99:ad:d2:17:d0:b7:9b:a5:29:66:61:
                    8c:d2:69:36:8e:3f:17:a7:3a:1e:67:84:c6:a2:e7:
                    3c:82:34:fb:ae:0b:c9:83:a2:c4:4f:bb:e8:b2:15:
                    8c:4b:2e:df:88:fb:3a:60:c9:e4:a5:1a:24:7b:f2:
                    03:b4:b6:88:74:3a:8f:30:bf:65:77:ea:41:85:24:
                    82:07:fd:ae:88:f9:49:31:27:d9:aa:32:04:f5:d4:
                    86:b7:13:bd:64:e9:9f:fb:53:9d:e8:6f:f1:2b:02:
                    39:5d:90:91:63:32:1f:0d:73:a5:b8:8e:4d:3b:49:
                    8c:71:98:1f:a1:db:b0:c8:10:cc:8c:43:43:6c:d3:
                    72:ee:88:f6:ae:78:4f:81:2b:f8:d9:cc:30:db:20:
                    08:1a:19:0c:b3:75:c3:8c:89:c6:c5:ca:c7:99:ca:
                    44:fc:ef:44:cb:64:32:73:8a:86:1a:ef:d0:44:40:
                    d9:b2:8d:6f:f3:fa:49:47:a3:8b:22:fe:65:14:45:
                    94:aa:81:ea:e9:03:6e:ff:8c:1c:b6:9b:00:39:a6:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:6C:01:2F:93:D9:AE:5D:A2:40:43:B7:25:E5:5A:84:61:35:BE
            X509v3 Authority Key Identifier:
                keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:18:12:b7:35:6c:ff:de:c6:70:43:f9:57:bf:48:75:ba:
         9d:ac:54:b3:6a:ed:e5:84:13:db:28:2f:65:8b:a9:f5:de:c3:
         27:b5:d5:29:d0:77:16:85:60:2c:36:a4:8a:4d:85:46:41:af:
         a4:d0:67:3c:9e:b4:a7:cf:2d:c0:d2:d1:63:f6:7c:3f:e1:ad:
         51:e5:37:a9:76:01:6b:2e:3e:6e:b3:72:58:82:ab:bc:fc:6a:
         2d:01:b7:f0:bc:9a:c0:8a:21:33:b4:a3:c7:d9:5b:53:70:b3:
         9f:1c:4d:c3:85:6c:74:0e:1f:48:4d:0d:62:65:1c:a3:12:d4:
         4c:be:01:7f:f4:85:a0:8d:af:6d:56:14:ba:19:c7:16:17:22:
         f8:44:62:28:b1:e0:8c:ae:5e:99:81:c0:64:24:35:d5:c1:90:
         5b:17:2b:ba:dc:af:9b:34:15:11:a3:2c:6c:c2:3d:bf:18:bc:
         b3:d4:e0:c3:0c:39:68:3a:75:74:4e:70:e2:e3:e4:c5:51:e7:
         02:a2:de:67:4d:26:d1:55:9f:12:98:26:16:14:2d:46:47:8c:
         19:e4:38:8a:25:82:2c:18:78:70:74:72:d4:96:59:04:1a:39:
         4e:32:b1:8f:8b:77:55:77:af:b1:9f:40:82:a5:c2:71:ba:37:
         be:f0:92:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB
NkYzQTYzMTkwHhcNMjYwMTI1MDIwMDM5WhcNMjYwMjAxMDIwMDM5WjAYMRYwFAYD
VQQDDA02OTc1Nzk0OC02YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYKk9WP09EYwBTkTVHT051n+UpDTpA3oXNL8pYNB/JuuIuNRkDZ/LjpJXcxP
lYd5ma3SF9C3m6UpZmGM0mk2jj8XpzoeZ4TGouc8gjT7rgvJg6LET7voshWMSy7f
iPs6YMnkpRoke/IDtLaIdDqPML9ld+pBhSSCB/2uiPlJMSfZqjIE9dSGtxO9ZOmf
+1Od6G/xKwI5XZCRYzIfDXOluI5NO0mMcZgfoduwyBDMjENDbNNy7oj2rnhPgSv4
2cww2yAIGhkMs3XDjInGxcrHmcpE/O9Ey2Qyc4qGGu/QREDZso1v8/pJR6OLIv5l
FEWUqoHq6QNu/4wctpsAOaaIRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx/bAEv
k9muXaJAQ7cl5VqEYTW+MB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC
RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6
TEp2UFV1VG5jdUNtODZZeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7QBgStzVs/97GcEP5V79IdbqdrFSzau3lhBPbKC9li6n13sMntdUp
0HcWhWAsNqSKTYVGQa+k0Gc8nrSnzy3A0tFj9nw/4a1R5TepdgFrLj5us3JYgqu8
/GotAbfwvJrAiiEztKPH2VtTcLOfHE3DhWx0Dh9ITQ1iZRyjEtRMvgF/9IWgja9t
VhS6GccWFyL4RGIoseCMrl6ZgcBkJDXVwZBbFyu63K+bNBURoyxswj2/GLyz1ODD
DDloOnV0TnDi4+TFUecCot5nTSbRVZ8SmCYWFC1GR4wZ5DiKJYIsGHhwdHLUllkE
GjlOMrGPi3dVd6+xn0CCpcJxuje+8JJj
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:57:16 2026 by rpki-client