This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File:                     1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier:          /FX/SdFyhDwAwE1BW1DGe8No3b/ZMUyjjLF1Mh9Dllc=
Subject key identifier:   1D:54:B8:80:86:2A:38:1D:AB:F6:88:A9:03:0F:79:11:B6:C3:AE:96
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer:       /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number:          350E
Signing time:             Sat 24 Jan 2026 14:55:10 +0000
Manifest this update:     Sat 24 Jan 2026 14:55:10 +0000
Manifest next update:     Sat 31 Jan 2026 14:55:10 +0000
Files and hashes:         1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: b0kjMYGm2HmyONS2GHXS4jt+hSx+x3ov9osfYVYYVnY=)
                          2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=)
                          3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
                          rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
        Validity
            Not Before: Jan 24 14:55:10 2026 GMT
            Not After : Jan 31 14:55:10 2026 GMT
        Subject: CN=6974dd4e-ab75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:cf:8c:2e:a6:ee:3b:aa:11:6f:a2:30:58:
                    f9:2b:7a:f9:7f:f8:76:e4:5b:6e:37:83:9e:fe:b5:
                    79:81:eb:d1:6a:ea:37:08:43:99:06:be:8e:9e:82:
                    34:f0:0f:6d:e6:b6:1c:14:6d:37:e9:80:cb:d6:84:
                    bc:e7:2e:d5:61:ee:59:1f:27:01:11:47:c3:ce:71:
                    06:47:d5:89:71:5d:a8:b3:a4:37:25:17:a3:26:f6:
                    ac:94:e2:e2:b0:fd:0f:f5:a1:de:5f:f9:f4:c9:35:
                    cf:37:b7:1f:8f:2e:e2:f4:40:37:09:ba:c0:70:80:
                    cd:a2:ea:58:34:c3:91:d4:f3:c7:05:26:da:23:62:
                    35:29:e1:43:84:6c:a9:2c:f6:06:d6:81:5c:f0:aa:
                    52:26:ab:2d:9e:30:ab:ae:96:72:2b:27:75:29:01:
                    1c:96:c3:ad:f3:51:ad:b9:3c:b3:8e:6e:04:0f:c3:
                    67:7c:90:21:14:a2:f2:eb:85:0f:aa:26:9a:24:a6:
                    d5:33:1f:71:7d:82:e0:c3:b4:3e:9f:bd:d0:57:72:
                    2c:04:4b:e0:70:d6:45:ca:5b:73:dc:d2:a6:1e:b8:
                    b5:f7:89:8b:9f:0a:1a:8f:32:fa:0d:41:ba:e2:55:
                    03:86:79:fb:a8:eb:f3:f6:18:49:61:c2:55:e1:cc:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:B8:80:86:2A:38:1D:AB:F6:88:A9:03:0F:79:11:B6:C3:AE:96
            X509v3 Authority Key Identifier:
                keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d0:2a:56:49:21:87:d9:d9:fa:44:be:6e:b4:b7:d6:11:4b:
         e3:5a:d8:9e:6f:a3:ae:32:71:5c:41:bb:e0:f5:a1:38:df:4e:
         44:0b:24:b3:3b:fc:84:02:13:a2:25:0a:7a:48:c0:3b:fd:d6:
         a0:dc:16:55:fb:79:7e:64:68:d6:54:41:07:99:06:d8:3b:1f:
         d4:bc:92:c8:86:c7:cb:57:18:05:a2:04:ab:00:5f:fd:7e:7d:
         d9:f0:1d:ca:f1:4b:5d:15:e6:ea:44:20:85:ed:91:19:62:cc:
         00:a3:54:13:37:63:67:32:c1:58:85:d0:9d:85:18:cf:59:81:
         e2:1e:01:32:6c:06:c1:53:6e:a1:e8:ce:00:63:1c:b3:21:79:
         00:2e:07:29:ad:62:95:6d:56:8b:9a:bf:59:ce:3c:e9:2b:2f:
         ac:5a:b9:d5:95:c6:d3:04:39:a2:96:5d:dc:87:c3:88:d9:af:
         68:c9:64:39:ad:f9:a6:3d:c1:41:ee:bc:ec:8e:a3:c6:fc:f4:
         70:d1:e2:09:9f:2a:88:28:59:dd:ab:ab:42:f3:4b:94:9c:38:
         1b:81:ad:1a:f9:f7:df:c0:0a:68:c2:49:2c:44:82:78:87:ca:
         40:e3:ea:f4:c6:fe:44:e5:7b:a7:8b:4a:ec:01:81:53:84:ae:
         7b:d4:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:48 2026 by rpki-client