This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File:                     piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier:          TamWjlB+Fs+r1y48TQe63C7wyFNDlr8MVeO3pd9DEWY=
Subject key identifier:   B6:6B:9F:67:4A:58:9C:71:E6:4F:18:3E:14:C4:43:D3:C1:58:4A:FB
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer:       /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number:          1A
Signing time:             Sun 25 Jan 2026 06:56:45 +0000
Manifest this update:     Sun 25 Jan 2026 06:56:44 +0000
Manifest next update:     Sun 01 Feb 2026 06:56:44 +0000
Files and hashes:         1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: fzOOxrJMkiIONquWZl6YHdpS2o7ViG8VjNhmaeCUO94=)
                          2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: JplNXQO2Wx5ZVsUnY8QzEKP+B0R8iAE4R1iut1PwRdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
        Validity
            Not Before: Jan 25 06:56:44 2026 GMT
            Not After : Feb  1 06:56:44 2026 GMT
        Subject: CN=6975bead-d70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:f6:bc:fc:fe:7c:84:fc:3c:a3:31:51:d7:
                    37:64:c9:37:e4:76:08:25:80:28:8b:47:a6:d9:06:
                    27:ce:4b:a9:96:8b:97:2b:f7:80:5e:8b:d3:96:40:
                    26:eb:16:56:f5:47:bb:a7:4a:43:c4:5f:aa:1c:6c:
                    b0:b6:2a:8a:25:87:bd:69:c3:2b:03:e7:01:c7:74:
                    bf:85:0d:f8:bb:e5:a7:ef:e8:c4:cc:ed:d4:81:84:
                    07:2e:30:41:cf:d9:e4:f2:01:f8:c1:80:9a:f9:e4:
                    a7:61:a4:70:5d:5e:c1:fe:dc:55:92:8a:fb:e1:7a:
                    be:9b:8c:c0:8d:ce:c4:c7:4c:db:ca:be:2a:1f:67:
                    a1:34:ef:a9:7b:63:ad:e8:a3:c9:44:3a:d8:4a:66:
                    8d:c6:82:4e:cf:c8:90:59:c8:97:28:ac:47:12:53:
                    b5:72:51:5b:a5:16:ff:3b:a2:0f:50:55:4a:ef:83:
                    93:e8:61:86:0c:e8:f9:ac:d5:f7:d7:21:74:1d:c2:
                    0b:01:b4:58:a8:6d:8f:27:15:65:09:af:92:56:dd:
                    6f:b7:d1:ef:31:d3:29:f3:c2:0e:7a:4d:6a:82:11:
                    6f:23:81:f6:46:0b:19:b0:58:91:cf:91:07:a0:58:
                    0c:8a:ef:23:7b:ea:ad:de:64:c8:59:fd:1a:d1:4f:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6B:9F:67:4A:58:9C:71:E6:4F:18:3E:14:C4:43:D3:C1:58:4A:FB
            X509v3 Authority Key Identifier:
                keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:71:89:cc:2c:e1:72:7f:37:40:80:2f:2d:a6:e6:9c:d2:87:
         dd:fc:98:5d:0a:d4:08:81:40:a8:a4:89:d2:d8:6e:ab:65:85:
         0d:e9:1a:17:b7:28:bc:3c:d4:48:92:81:9f:06:24:e3:71:36:
         34:36:44:96:20:8c:87:b2:9f:19:6e:4f:b3:7a:25:81:11:78:
         a4:b3:ab:31:01:3d:69:df:3d:d9:86:f6:72:16:bb:da:2f:28:
         af:81:92:ee:5a:4e:71:ab:7c:39:27:c6:63:ce:8b:91:ea:e0:
         72:39:f2:af:20:e1:f9:94:e5:44:73:b9:85:8c:24:54:12:64:
         84:f4:11:1d:e3:cc:9b:54:5f:bf:c7:9d:d6:88:22:0d:f8:d2:
         a6:36:09:62:34:bc:e5:77:4e:1a:d8:56:dd:52:f7:76:73:fa:
         f7:8a:db:92:f8:bb:25:ea:bd:6a:1b:c7:13:23:83:0e:02:0b:
         49:ae:30:e0:f5:8c:84:71:c0:34:e6:29:dc:c4:44:98:75:60:
         d8:a1:13:33:44:60:82:c6:5b:20:3a:95:1d:59:84:78:4d:f1:
         da:6a:f7:a7:14:ff:ad:13:11:c7:5e:c9:1e:c8:ad:ca:92:cc:
         5d:34:90:57:80:51:67:c8:19:a3:73:c5:3b:51:a6:32:f1:45:
         d2:8a:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:40:34 2026 by rpki-client