This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File:                     1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier:          cm8xEsttBsZJYCRwRTa3wuxYlC3/SAiEAhN+PqrD9oc=
Subject key identifier:   D2:59:A2:69:B8:D3:53:49:32:D1:A6:67:2D:C9:30:B9:47:31:C7:3B
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer:       /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number:          0134
Signing time:             Sun 25 Jan 2026 03:47:58 +0000
Manifest this update:     Sun 25 Jan 2026 03:47:57 +0000
Manifest next update:     Sun 01 Feb 2026 03:47:57 +0000
Files and hashes:         1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: CIOMyVM33pQOPO3qIvhTNS0aDFz6t38pqfi5ACtu1Fk=)
                          2: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: vjvAzTCHT28iPRQdCoJZnbSPvYtHv4wDBYZ54035Ceo=)
                          3: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: nAAKqeX52YyyXJwlWmzPJZzOWJlGdlFjHrIUMleQhJo=)
                          4: CCC81F9A703F11F0AD014F1AC4F9AE02.roa (hash: 5E8RDsoVjXmI/w7ZZOkVeITuRBDxCdB14YXNUGb/6bY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
        Validity
            Not Before: Jan 25 03:47:57 2026 GMT
            Not After : Feb  1 03:47:57 2026 GMT
        Subject: CN=6975926e-a9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:32:aa:6b:6b:db:17:1a:cc:5e:1b:21:66:
                    f2:60:37:a9:4e:bf:aa:b9:46:06:2d:38:d7:d2:75:
                    8d:01:0d:f1:84:f2:d2:40:ed:8d:0b:d3:33:1f:ef:
                    ea:78:dc:75:7c:1d:75:2f:11:f4:cc:67:6a:33:7a:
                    12:57:15:6b:72:ec:0a:15:d5:69:9d:d1:7c:1d:a2:
                    59:25:f3:cd:53:02:ca:4f:ac:01:50:f2:90:a0:c0:
                    3c:59:90:c1:ed:46:fe:f2:ca:fc:d1:c3:8b:ca:f0:
                    bf:82:42:a5:41:db:94:86:7c:02:a7:81:76:e3:02:
                    74:40:8c:90:d0:bb:aa:bb:74:41:6c:07:7d:10:03:
                    bf:14:06:b1:ad:cb:10:8f:e7:7a:1b:fc:51:f1:91:
                    fd:bc:18:55:01:d2:93:66:06:a3:81:ae:b7:3d:cb:
                    67:1c:a7:92:2b:5e:3c:76:5b:aa:07:77:b4:9e:18:
                    3d:28:65:4f:23:06:68:65:56:47:35:c7:9d:9d:2f:
                    c3:b1:b4:72:a7:c6:af:c5:9b:c3:22:9f:ba:ef:3d:
                    3b:d6:8c:f4:46:75:88:5e:4e:cf:2d:2e:15:24:2f:
                    64:b0:e6:e0:05:a7:a4:57:17:6d:0f:ff:0d:6d:6c:
                    c9:46:d9:be:c7:11:31:6b:9b:38:6c:5d:bc:1a:6b:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:59:A2:69:B8:D3:53:49:32:D1:A6:67:2D:C9:30:B9:47:31:C7:3B
            X509v3 Authority Key Identifier:
                keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:b8:55:63:13:81:2d:11:42:7c:98:b9:7c:b8:9f:db:1c:
         aa:89:fe:d4:03:b8:d6:2f:02:a2:b2:ca:03:b6:dc:ce:30:63:
         ef:0c:44:f6:c8:10:95:e2:a4:75:43:14:c2:9c:43:c5:2d:bc:
         b6:49:03:c4:1f:d5:ff:3f:89:b3:32:80:a9:29:72:a6:53:43:
         e5:9f:a3:44:34:98:b4:6f:55:f4:c2:8b:7f:98:f3:d8:b5:bc:
         18:fb:30:15:8a:3b:8f:cc:00:66:e0:95:55:94:0d:73:4f:46:
         16:5c:fb:47:b5:83:a5:02:ad:07:97:f1:65:6c:ff:7e:5f:3b:
         b3:e1:3c:a5:17:ed:28:7b:3c:37:10:c8:70:e9:41:8d:ed:43:
         7d:88:80:f4:ca:8f:d2:b9:d6:49:49:54:00:0c:4c:41:a0:90:
         cf:73:32:49:e9:f2:be:17:b1:31:03:3b:00:21:02:27:9a:f0:
         36:fd:05:36:0e:ed:41:9d:cf:95:1b:e1:87:51:86:f7:37:a4:
         4e:fe:41:17:8c:69:bd:da:aa:b6:f2:38:58:c1:a9:bc:c5:12:
         10:cd:03:e3:2a:6e:da:f8:4e:e8:56:f0:dd:d6:9d:fa:9c:62:
         cd:29:ec:34:36:d4:c8:30:67:f7:b5:86:84:36:ff:b0:9f:e4:
         e7:b8:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:09 2026 by rpki-client