This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
File:                     r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json)
Hash identifier:          B5ZvZzxhWy0xNkAZEF7QRLB9lL+qM5GfQO31Ynx3uoo=
Subject key identifier:   C3:34:B9:90:29:96:C7:49:C6:DF:F3:F3:44:4E:5D:20:A9:66:5F:D8
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Certificate issuer:       /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial:       0650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
Manifest number:          064B
Signing time:             Sat 24 Jan 2026 21:56:57 +0000
Manifest this update:     Sat 24 Jan 2026 21:56:56 +0000
Manifest next update:     Sat 31 Jan 2026 21:56:56 +0000
Files and hashes:         1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: XKQPiHLhTNdowOk5mr2Zj+W1E8NIxVEBxxcF3c6+7TA=)
                          2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: LpIzyfQvDqArXC9hZJ5ZqGifDCSL9ldak3ZwH8S2NRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
        Validity
            Not Before: Jan 24 21:56:56 2026 GMT
            Not After : Jan 31 21:56:56 2026 GMT
        Subject: CN=69754028-d0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:a3:9c:fb:fd:6f:52:f2:d5:a5:78:a4:a5:
                    79:d6:59:93:f6:44:c4:5a:9b:2d:0b:2a:cc:e6:d3:
                    ac:dc:31:3a:39:30:11:70:01:f2:78:26:94:36:ea:
                    d5:30:b6:86:63:b4:3d:08:ca:6a:6a:2d:12:18:f0:
                    94:88:ae:af:23:8e:de:c1:b3:26:39:66:fa:7e:f4:
                    16:7d:01:72:be:c5:0b:75:92:47:cb:82:06:79:0a:
                    47:c5:e3:fd:2e:ff:28:9e:8d:dc:0c:7c:48:5b:c3:
                    b0:bf:fa:7d:92:fd:ee:97:e0:3d:97:22:9e:37:2c:
                    f3:76:ad:c1:29:52:82:30:fb:57:8b:b0:17:f0:1e:
                    67:ef:36:7f:2c:ae:5b:04:0a:80:93:3e:4c:cb:34:
                    98:a8:55:76:e8:d8:4f:c3:87:e5:60:95:30:1a:44:
                    c4:b3:a9:83:20:cb:9f:10:f6:bd:c8:f6:83:66:91:
                    1f:2d:95:b7:da:b1:0f:89:d1:aa:20:21:8f:95:53:
                    ee:a4:28:57:84:18:f2:20:0a:9d:0c:61:9f:ff:17:
                    b0:59:69:3b:05:76:83:44:47:de:c5:bd:17:63:ce:
                    13:64:ed:5a:91:2f:03:cf:4f:9c:23:fe:6a:a8:cc:
                    c1:28:19:45:0e:a1:13:61:96:4c:d8:c4:79:16:be:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:34:B9:90:29:96:C7:49:C6:DF:F3:F3:44:4E:5D:20:A9:66:5F:D8
            X509v3 Authority Key Identifier:
                keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:14:c8:cf:02:b2:52:87:b2:cc:13:5b:ab:2a:e5:02:af:
         03:45:fb:32:cd:c2:3c:8a:11:61:36:26:af:9e:dc:21:f8:04:
         53:c4:d8:ed:aa:70:2d:76:0e:3d:2d:90:71:f0:eb:9b:a5:71:
         6c:dc:66:7f:28:37:1c:33:dd:44:03:dc:b2:1e:81:1d:b4:30:
         f3:5c:f9:60:dc:c7:19:6d:45:cd:06:65:9f:a9:ea:6a:9e:0d:
         ef:a8:fa:1b:36:a1:fa:62:e8:13:b4:07:5d:1b:68:fb:9c:c5:
         68:26:7b:18:79:6c:0f:18:5c:a3:f9:ea:7f:43:43:2e:86:11:
         75:77:75:95:a8:2c:c3:76:24:37:da:d9:39:26:f0:c2:b9:57:
         d1:9f:81:21:cf:7f:4d:79:eb:ec:e6:3b:ce:0b:05:86:8a:a1:
         8a:01:3f:25:b7:83:14:88:4f:d8:bb:e0:45:a8:06:7f:ac:77:
         8a:f4:c7:24:99:12:2e:e9:14:b9:3e:18:0d:4b:3f:06:d4:90:
         58:30:f6:86:9a:9d:7d:6c:4a:cb:82:9c:e4:8b:e2:3d:b7:23:
         dc:9f:bb:24:f3:09:eb:85:32:d3:7c:0b:5a:61:4e:50:ab:5b:
         5a:22:08:6b:fa:3c:fb:df:e7:48:d0:57:57:64:f7:ea:09:20:
         33:f7:19:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE
ODFFOEE5RTgwHhcNMjYwMTI0MjE1NjU2WhcNMjYwMTMxMjE1NjU2WjAYMRYwFAYD
VQQDDA02OTc1NDAyOC1kMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMSjnPv9b1Ly1aV4pKV51lmT9kTEWpstCyrM5tOs3DE6OTARcAHyeCaUNurV
MLaGY7Q9CMpqai0SGPCUiK6vI47ewbMmOWb6fvQWfQFyvsULdZJHy4IGeQpHxeP9
Lv8ono3cDHxIW8Owv/p9kv3ul+A9lyKeNyzzdq3BKVKCMPtXi7AX8B5n7zZ/LK5b
BAqAkz5MyzSYqFV26NhPw4flYJUwGkTEs6mDIMufEPa9yPaDZpEfLZW32rEPidGq
ICGPlVPupChXhBjyIAqdDGGf/xewWWk7BXaDREfexb0XY84TZO1akS8Dz0+cI/5q
qMzBKBlFDqETYZZM2MR5Fr7gdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM0uZAp
lsdJxt/z80ROXSCpZl/YMB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD
NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY
VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuYBTIzwKyUoeyzBNbqyrlAq8DRfsyzcI8ihFhNiavntwh+ARTxNjt
qnAtdg49LZBx8OubpXFs3GZ/KDccM91EA9yyHoEdtDDzXPlg3McZbUXNBmWfqepq
ng3vqPobNqH6YugTtAddG2j7nMVoJnsYeWwPGFyj+ep/Q0MuhhF1d3WVqCzDdiQ3
2tk5JvDCuVfRn4Ehz39Neevs5jvOCwWGiqGKAT8lt4MUiE/Yu+BFqAZ/rHeK9Mck
mRIu6RS5PhgNSz8G1JBYMPaGmp19bErLgpzki+I9tyPcn7sk8wnrhTLTfAtaYU5Q
q1taIghr+jz73+dI0FdXZPfqCSAz9xny
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:37 2026 by rpki-client