This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File:                     j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier:          YE2ixbW4JAJCrFrJhph3IrhKeCW5yAQ+T6AqkSynZSY=
Subject key identifier:   09:9E:77:07:EB:86:3A:0F:AB:D2:C5:C8:92:DB:9E:18:43:7A:A6:8A
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer:       /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number:          031D
Signing time:             Sun 25 Jan 2026 00:16:32 +0000
Manifest this update:     Sun 25 Jan 2026 00:16:31 +0000
Manifest next update:     Sun 01 Feb 2026 00:16:31 +0000
Files and hashes:         1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: nx0o9mn06HQIZH/iJ8yDalsUKXhOPQSYYAKoh/opHc4=)
                          2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: vsUIy1tbHWL8V/egiXCJ22jgmvrNd5Q4mwZ6W3OeA1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
                          rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
        Validity
            Not Before: Jan 25 00:16:31 2026 GMT
            Not After : Feb  1 00:16:31 2026 GMT
        Subject: CN=697560df-99d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:e0:98:7a:5d:d4:40:37:1a:70:58:b2:e2:
                    f0:60:fb:5f:fd:9c:ea:8d:63:3b:68:5f:e3:b1:8e:
                    3e:fd:03:46:8c:7f:2c:e9:13:64:a6:8b:77:31:23:
                    8c:0d:d6:e3:45:2a:ed:67:6d:0c:60:65:cc:ce:6a:
                    95:f6:a5:82:33:29:32:1c:f3:e9:35:33:4c:ea:c6:
                    38:9a:aa:22:60:9d:d1:fb:63:49:1f:42:6b:98:22:
                    6b:1e:ce:3c:3e:19:80:05:ab:62:d9:37:af:00:1d:
                    25:37:64:98:ac:5b:93:d5:6c:31:70:59:2c:77:71:
                    5d:91:2d:d7:f2:75:fc:46:b5:f0:10:55:76:9b:d2:
                    2c:ec:75:db:19:04:08:b1:53:58:1d:8c:35:96:70:
                    b0:ee:5c:3e:f8:26:30:7a:b6:bc:d1:d0:fd:48:e1:
                    7d:f4:48:39:88:f8:fc:0e:63:4e:f7:83:11:de:c9:
                    94:99:21:60:70:dc:db:99:18:4a:5e:e9:6c:fa:a9:
                    e3:f6:84:57:04:f4:a7:d3:64:61:d7:10:dc:39:88:
                    b8:5d:a1:97:36:02:ec:8e:b2:67:0c:5d:ef:63:d6:
                    77:ab:dc:6d:aa:55:76:18:af:1a:72:38:15:74:1f:
                    14:7d:c2:3c:2e:63:e7:8c:56:d7:56:3d:66:32:ae:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9E:77:07:EB:86:3A:0F:AB:D2:C5:C8:92:DB:9E:18:43:7A:A6:8A
            X509v3 Authority Key Identifier:
                keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:e8:cb:83:f7:73:8d:1d:27:0d:aa:96:5f:da:37:e3:cf:
         5c:89:36:eb:13:72:35:74:ca:a1:09:f8:b4:8a:ff:b5:57:30:
         34:8a:62:99:b5:c7:b9:04:c1:78:76:5d:b2:c3:6e:43:73:2a:
         56:1c:2a:96:2f:ca:09:57:a8:9e:2b:08:72:a8:57:4f:c5:ad:
         81:9d:73:8c:75:42:ad:04:af:12:26:1c:00:b1:a9:51:75:b8:
         76:bb:16:61:87:f3:59:fa:66:0e:4b:ec:a9:d6:a5:03:f4:c2:
         3c:c0:d3:a7:a7:d6:11:4f:c7:e3:ac:e7:02:ad:e9:7b:4c:e7:
         57:c7:c9:72:f4:7f:88:e1:50:c4:8c:24:ed:a0:4b:8f:b9:0a:
         08:0b:f0:0c:9b:35:67:bb:a3:c6:f8:ea:2f:2b:07:92:66:b4:
         bb:93:48:75:18:bd:a8:ef:10:a7:bd:e5:75:5b:c5:3d:3c:b9:
         65:31:8b:1a:27:de:32:51:aa:75:f6:2f:56:a7:6d:cd:bf:a1:
         cb:fc:18:30:9e:f6:9b:0e:fd:cf:56:6b:46:ed:de:5f:30:23:
         d1:63:b4:b4:6d:51:af:d4:f5:f4:a9:b8:26:8e:df:02:f5:31:
         60:6c:0d:aa:80:c5:f4:d7:4e:26:ab:2e:6e:f3:d3:0b:7b:7b:
         a2:0e:81:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx
Rjk3NDE4M0YwHhcNMjYwMTI1MDAxNjMxWhcNMjYwMjAxMDAxNjMxWjAYMRYwFAYD
VQQDDA02OTc1NjBkZi05OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkuDgmHpd1EA3GnBYsuLwYPtf/ZzqjWM7aF/jsY4+/QNGjH8s6RNkpot3MSOM
DdbjRSrtZ20MYGXMzmqV9qWCMykyHPPpNTNM6sY4mqoiYJ3R+2NJH0JrmCJrHs48
PhmABati2TevAB0lN2SYrFuT1WwxcFksd3FdkS3X8nX8RrXwEFV2m9Is7HXbGQQI
sVNYHYw1lnCw7lw++CYwera80dD9SOF99Eg5iPj8DmNO94MR3smUmSFgcNzbmRhK
Xuls+qnj9oRXBPSn02Rh1xDcOYi4XaGXNgLsjrJnDF3vY9Z3q9xtqlV2GK8acjgV
dB8UfcI8LmPnjFbXVj1mMq7uQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmedwfr
hjoPq9LFyJLbnhhDeqaKMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE
MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW
anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbxujLg/dzjR0nDaqWX9o3489ciTbrE3I1dMqhCfi0iv+1VzA0imKZ
tce5BMF4dl2yw25DcypWHCqWL8oJV6ieKwhyqFdPxa2BnXOMdUKtBK8SJhwAsalR
dbh2uxZhh/NZ+mYOS+yp1qUD9MI8wNOnp9YRT8fjrOcCrel7TOdXx8ly9H+I4VDE
jCTtoEuPuQoIC/AMmzVnu6PG+OovKweSZrS7k0h1GL2o7xCnveV1W8U9PLllMYsa
J94yUap19i9Wp23Nv6HL/BgwnvabDv3PVmtG7d5fMCPRY7S0bVGv1PX0qbgmjt8C
9TFgbA2qgMX0104mqy5u89MLe3uiDoGz
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:51 2026 by rpki-client