This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File:                     _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier:          AwTy/zu+V49oqm5ShuoURgjFC1ADpZWs+67JJfo+23E=
Subject key identifier:   48:92:A0:48:3E:50:77:97:86:C2:34:C0:9B:74:12:51:1D:F9:DF:2C
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer:       /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number:          010E
Signing time:             Sun 25 Jan 2026 04:11:44 +0000
Manifest this update:     Sun 25 Jan 2026 04:11:44 +0000
Manifest next update:     Sun 01 Feb 2026 04:11:44 +0000
Files and hashes:         1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: 1HvFAy8lbC74r4UK/I2K0Y7BDxApE8Bj7d5QEKSNbH0=)
                          2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: TNYuuYwAvBi+/pUa2qwV1wTrBwuN862kPVZbu/phpjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
        Validity
            Not Before: Jan 25 04:11:44 2026 GMT
            Not After : Feb  1 04:11:44 2026 GMT
        Subject: CN=69759800-51f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:8b:45:f2:20:8a:76:dd:84:df:61:46:13:
                    e3:0c:cd:94:f1:a4:4c:bd:30:4d:3b:2a:6b:fd:11:
                    fc:21:e6:11:f2:03:e1:aa:7e:ca:3c:1b:52:34:e3:
                    a2:31:70:20:21:46:26:c8:a9:db:52:6c:2b:63:18:
                    0d:e1:c6:1e:62:7d:84:55:0e:52:2e:a6:1b:12:29:
                    65:76:de:8a:42:e9:bc:6f:03:52:9c:90:69:15:fb:
                    78:c8:af:73:d7:94:bf:2f:2f:1a:66:c6:0c:ec:aa:
                    04:66:be:fb:b7:74:dc:54:dd:62:32:70:66:58:b7:
                    0b:6b:30:52:9e:a4:03:9d:69:89:3d:f0:6a:ae:30:
                    22:b2:98:c1:b1:63:34:84:04:87:a3:ec:ec:f9:10:
                    9c:83:0b:83:d1:43:bb:f7:66:48:5b:ba:22:18:a0:
                    b4:03:2f:ee:cf:d3:b5:60:26:b7:ca:0f:3b:de:a6:
                    75:89:c5:97:64:e8:ce:ec:b4:17:ac:4b:d6:62:08:
                    1d:8b:d8:cd:af:59:4e:da:ea:32:23:6d:53:77:72:
                    10:07:47:d0:d9:22:23:a6:29:af:f3:35:9f:e6:e5:
                    0b:04:bd:04:17:c5:4a:9c:d6:37:18:31:8a:42:5c:
                    f2:7f:32:73:cc:d7:da:6a:c9:57:39:52:6a:4e:c1:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:92:A0:48:3E:50:77:97:86:C2:34:C0:9B:74:12:51:1D:F9:DF:2C
            X509v3 Authority Key Identifier:
                keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:65:13:84:b1:be:ca:c4:24:e6:0b:8e:99:a8:ae:05:dd:
         c6:54:c1:62:ae:07:d5:67:16:20:4f:a2:43:4c:1b:58:dd:68:
         e8:bb:ec:9f:84:e6:c5:9d:9e:82:a3:d9:6a:b9:7e:9e:ac:a7:
         43:5a:95:63:36:f1:62:e0:8b:d7:f2:44:cb:37:24:3c:c6:f9:
         6c:4c:67:89:26:f3:99:d0:64:92:2e:2f:62:f7:23:27:6c:d1:
         83:a3:20:9c:53:f3:36:74:11:e9:23:48:62:b4:8e:7d:8d:2f:
         bf:c2:6c:f2:e7:3f:db:34:bb:e7:cb:1e:fb:e8:ef:f5:a1:9e:
         08:6d:5c:d7:a3:ff:35:df:09:97:36:ee:a6:fd:73:ab:40:0f:
         79:06:1f:bc:02:37:1b:c7:0d:b0:48:ec:26:72:2d:f1:0d:14:
         67:fe:f4:5c:f6:43:b1:e0:9f:0d:84:45:91:5b:b6:d3:4b:bc:
         cd:fd:06:9f:f2:9e:6b:ce:81:b3:26:6a:69:01:4b:e4:6e:15:
         a2:ee:85:bc:2d:2a:b3:26:2d:af:9b:28:b5:c7:15:fa:9f:04:
         bd:1e:be:3a:7a:9a:d2:26:03:95:4a:ea:07:fe:f0:c7:85:fe:
         f3:57:4a:2c:23:ae:da:75:b7:ba:74:fc:63:02:9b:fd:20:98:
         fb:24:71:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB
RENGOUEzQTkwHhcNMjYwMTI1MDQxMTQ0WhcNMjYwMjAxMDQxMTQ0WjAYMRYwFAYD
VQQDDA02OTc1OTgwMC01MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PSLRfIginbdhN9hRhPjDM2U8aRMvTBNOypr/RH8IeYR8gPhqn7KPBtSNOOi
MXAgIUYmyKnbUmwrYxgN4cYeYn2EVQ5SLqYbEilldt6KQum8bwNSnJBpFft4yK9z
15S/Ly8aZsYM7KoEZr77t3TcVN1iMnBmWLcLazBSnqQDnWmJPfBqrjAispjBsWM0
hASHo+zs+RCcgwuD0UO792ZIW7oiGKC0Ay/uz9O1YCa3yg873qZ1icWXZOjO7LQX
rEvWYggdi9jNr1lO2uoyI21Td3IQB0fQ2SIjpimv8zWf5uULBL0EF8VKnNY3GDGK
QlzyfzJzzNfaaslXOVJqTsH/iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiSoEg+
UHeXhsI0wJt0ElEd+d8sMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE
RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa
dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvZmUThLG+ysQk5guOmaiuBd3GVMFirgfVZxYgT6JDTBtY3Wjou+yf
hObFnZ6Co9lquX6erKdDWpVjNvFi4IvX8kTLNyQ8xvlsTGeJJvOZ0GSSLi9i9yMn
bNGDoyCcU/M2dBHpI0hitI59jS+/wmzy5z/bNLvnyx776O/1oZ4IbVzXo/813wmX
Nu6m/XOrQA95Bh+8Ajcbxw2wSOwmci3xDRRn/vRc9kOx4J8NhEWRW7bTS7zN/Qaf
8p5rzoGzJmppAUvkbhWi7oW8LSqzJi2vmyi1xxX6nwS9Hr46eprSJgOVSuoH/vDH
hf7zV0osI67adbe6dPxjApv9IJj7JHF8
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:48 2026 by rpki-client