This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File:                     dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier:          PHdDVAmWs4vNF63QkqzK66JWqUCCh20xl4XeDwtXahc=
Subject key identifier:   6C:28:6D:0A:FA:98:58:3C:F4:A5:5F:BA:37:6F:8A:00:DA:C7:AA:FE
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number:          022B
Signing time:             Sun 25 Jan 2026 01:19:44 +0000
Manifest this update:     Sun 25 Jan 2026 01:19:43 +0000
Manifest next update:     Sun 01 Feb 2026 01:19:43 +0000
Files and hashes:         1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: e1BEJ6WgmaiX1hRUH7SzgY96q1GdFvQcADHfNQYQl2U=)
                          2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: DPyqPkT0neP2hvNy+hn6VREMN9M60vGzkrQgZGHU27c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Jan 25 01:19:43 2026 GMT
            Not After : Feb  1 01:19:43 2026 GMT
        Subject: CN=69756fb0-f63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:15:35:5d:ba:bc:7a:4b:97:b0:2a:d9:2e:
                    2b:ed:91:31:28:48:45:5f:40:a5:cd:e8:a7:32:e1:
                    32:34:bd:6f:51:0f:7c:f4:c3:3b:51:50:e0:b4:31:
                    39:50:d5:d9:e7:16:94:ed:d8:ec:51:bf:2f:3a:4d:
                    94:f5:73:20:06:25:ed:37:62:ba:02:08:2d:90:d3:
                    e0:5e:31:07:8a:a0:29:54:27:be:21:7c:03:d2:a2:
                    80:34:d5:e1:82:5a:bc:59:f4:a5:ab:52:73:38:a7:
                    5e:48:a7:bd:07:02:30:9a:c9:47:58:28:2b:99:76:
                    66:e4:90:42:96:2f:d6:e2:10:cb:06:c0:c1:51:c7:
                    10:93:5e:da:e3:83:37:3d:d1:cc:bd:81:bd:0c:26:
                    0a:fa:4e:fa:b5:e6:1f:3d:76:42:29:ee:a6:85:7a:
                    28:b7:58:92:74:12:0b:bf:d8:52:14:16:48:a0:ba:
                    b9:b7:58:74:dc:5e:88:40:16:30:dc:29:df:1a:6f:
                    fb:50:00:fd:83:9d:16:fb:3c:94:46:c4:59:4a:98:
                    c3:9a:0a:cb:e6:11:af:b2:35:27:7e:fd:97:29:d0:
                    0a:4a:60:78:1f:4d:f2:33:54:15:6e:68:c6:b7:a5:
                    06:de:07:42:93:98:77:2d:e0:15:94:61:51:b0:19:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:6D:0A:FA:98:58:3C:F4:A5:5F:BA:37:6F:8A:00:DA:C7:AA:FE
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f6:c4:95:5c:39:9b:c0:3e:0b:43:38:39:c8:4e:c8:c4:0e:
         ec:2e:2c:c8:82:5d:9e:7c:2d:5c:9b:11:76:a3:59:6d:93:08:
         d0:fe:3e:57:2d:dd:61:92:bb:57:24:6d:c2:59:62:62:a3:8f:
         a6:81:ee:52:0d:ba:80:c3:17:cf:24:f0:25:5d:98:ad:ea:86:
         86:8c:9e:6b:47:19:32:af:39:4e:10:27:5c:11:4e:9a:0f:89:
         26:09:e3:01:c8:c1:c5:40:e3:98:70:99:42:a0:41:a9:ed:44:
         0f:75:79:d0:27:52:19:63:cd:08:ee:e9:37:24:fe:32:e4:8b:
         1c:d1:ad:8b:3b:13:17:8e:e9:32:3b:ca:50:9c:66:85:b7:44:
         30:20:49:28:f7:09:4f:b8:4e:23:1b:5f:08:b4:32:4f:78:c9:
         6d:11:5e:8a:e7:19:34:73:97:c5:ac:19:d2:70:16:73:6d:9e:
         47:b5:ce:40:af:37:7f:f2:45:25:74:6c:55:90:85:e3:a4:19:
         4b:b8:00:91:74:29:db:54:d6:48:5c:da:e5:68:af:a7:cf:8d:
         3b:2b:24:5b:ee:84:e2:02:c4:03:a1:c0:b9:c5:6b:38:85:7d:
         ba:14:87:d5:f5:61:e6:bb:fe:08:ea:a0:2e:21:09:31:c4:ac:
         bb:77:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:33 2026 by rpki-client