This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
File:                     1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json)
Hash identifier:          oqfax10iCTCwCE9T6uO2U3zb/TOD32ObJ4ABlKKEsTo=
Subject key identifier:   1C:90:C6:3D:94:05:9D:8C:E5:AF:C1:64:E6:DA:CD:50:79:64:2D:45
Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
Certificate issuer:       /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Certificate serial:       04E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
Manifest number:          04D3
Signing time:             Sat 24 Jan 2026 23:06:45 +0000
Manifest this update:     Sat 24 Jan 2026 23:06:45 +0000
Manifest next update:     Sat 31 Jan 2026 23:06:45 +0000
Files and hashes:         1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: n4uBy3h7KSoILON+kmS0xDkpS47BOKR+scTIAZ3kr7M=)
                          2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
        Validity
            Not Before: Jan 24 23:06:45 2026 GMT
            Not After : Jan 31 23:06:45 2026 GMT
        Subject: CN=69755085-d1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:12:37:3f:1b:50:a5:95:de:c1:5b:27:ad:
                    59:cc:80:67:23:14:be:1e:e3:2d:e9:0c:62:30:8a:
                    63:b1:34:a7:be:d6:9f:85:00:6d:1a:20:6e:c2:96:
                    2e:30:a3:41:17:f4:ff:b7:e3:ce:25:e4:37:cf:a8:
                    45:15:7f:ee:cc:a5:34:45:5c:a4:87:19:20:e8:49:
                    ae:97:68:c9:b3:32:a0:ec:ad:6b:50:40:95:86:55:
                    de:42:f1:c6:c3:8a:32:46:0d:98:e9:95:dc:a6:6c:
                    4a:7e:ee:d1:69:50:04:20:b3:52:26:08:fc:bd:86:
                    59:e6:84:c1:8d:31:ad:fd:50:af:e0:bf:d2:37:50:
                    31:df:76:4e:d1:18:f4:14:dd:ee:d4:37:5a:1d:9f:
                    03:fc:50:db:59:cf:31:29:d7:ef:ee:76:24:84:2e:
                    2e:bb:cc:f6:4b:ae:32:68:28:76:f9:f7:a7:b7:e6:
                    04:da:3a:c7:c3:3c:c4:b7:cd:e2:6c:44:3a:14:2f:
                    c4:c9:1f:4d:c8:2b:3c:02:bf:d5:bf:82:13:1c:d6:
                    0a:7c:a7:08:02:19:5c:42:c8:67:68:1a:b8:a9:25:
                    a9:81:15:20:8f:fb:ef:d6:e8:4c:60:29:12:1d:5f:
                    dd:16:ec:75:8c:83:71:c7:52:d2:e2:32:e7:ac:25:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:C6:3D:94:05:9D:8C:E5:AF:C1:64:E6:DA:CD:50:79:64:2D:45
            X509v3 Authority Key Identifier:
                keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9e:16:ee:ff:10:cb:cb:49:6c:03:87:b4:01:32:00:dd:47:
         30:60:77:f2:f0:21:93:09:4d:75:85:ce:c9:e1:80:a7:c4:79:
         1d:e8:44:92:7d:e1:f0:7b:ac:ec:01:9b:c5:74:de:a6:54:37:
         80:7b:95:8e:8f:ce:4f:e2:16:e1:f0:d1:81:81:65:52:bc:f7:
         fe:fe:4d:40:93:58:af:ae:85:6b:08:ba:5a:dd:13:ec:ed:79:
         bb:82:3d:67:91:c8:ad:81:28:d9:27:74:94:b9:28:8d:1a:ec:
         0e:28:3f:2b:9b:42:c6:58:de:1c:6f:5a:ba:b8:77:e4:c9:13:
         d2:f2:d4:c9:06:43:ce:e0:9e:2f:c8:9d:57:e2:a8:47:ae:a3:
         3d:37:30:c6:b4:0a:ae:cf:78:e1:ef:88:c6:9d:5d:db:ae:06:
         41:71:a6:84:a7:78:63:39:ee:eb:27:39:0c:41:b7:6d:68:02:
         96:49:9a:f4:75:c1:53:fb:5b:33:4b:38:f9:fa:f1:e8:f3:fc:
         fa:d8:a6:97:02:2e:46:76:24:22:31:30:47:08:c3:8c:2a:07:
         d5:26:79:d0:66:96:1a:af:b7:a6:53:5c:1a:4c:06:c0:47:13:
         5a:e7:76:d6:95:44:87:6b:fc:a8:12:48:47:2d:fb:f3:19:97:
         84:72:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:39 2026 by rpki-client