This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File:                     25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier:          QD6TctFdZ0Gs3xi7M8ROIGVR/F+Kzm6FhgkLpUZ0G8U=
Subject key identifier:   15:68:9D:2D:21:95:7C:8E:BA:F7:78:18:F8:BE:8D:15:F7:E1:C3:32
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer:       /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial:       1D90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number:          1D84
Signing time:             Sat 24 Jan 2026 15:55:33 +0000
Manifest this update:     Sat 24 Jan 2026 15:55:33 +0000
Manifest next update:     Sat 31 Jan 2026 15:55:33 +0000
Files and hashes:         1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: Nm4UxzCnprNxl69XVqVF8XVJhfi5caj8qQYaq5z+ECk=)
                          2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: kiqsqwNMBPh3qwxfNJAfqtQq0GlxcHUCDHglujirUPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
                          rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7568 (0x1d90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
        Validity
            Not Before: Jan 24 15:55:33 2026 GMT
            Not After : Jan 31 15:55:33 2026 GMT
        Subject: CN=6974eb75-b644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:0d:35:dd:ea:c1:87:13:ec:b6:34:38:56:
                    7f:67:4d:e4:7e:09:32:11:d3:2f:93:16:b8:75:29:
                    51:bb:e8:7d:75:de:9d:c6:80:ff:73:13:87:6b:32:
                    ef:b2:79:80:58:30:94:a1:f0:94:ad:8d:68:f9:d4:
                    10:9e:42:2c:22:7d:fc:74:c1:65:f3:b0:66:c6:58:
                    11:cb:59:d0:93:e0:49:8f:bc:5e:1e:70:71:6e:c1:
                    0b:7d:75:2f:ae:1d:b0:3e:b9:ec:eb:20:1a:bf:9e:
                    64:0c:d6:0f:7e:34:49:15:0c:65:c6:e9:28:f4:df:
                    b8:29:53:b6:75:d7:bf:5c:5e:85:54:db:89:7c:7c:
                    28:44:dc:3c:c8:bf:72:a9:3f:37:1c:53:bc:70:4c:
                    82:77:8f:1f:9c:fc:ca:9f:e9:9a:c4:dc:37:10:86:
                    b6:34:c9:6b:07:a8:5c:3a:2b:8c:09:53:03:f7:37:
                    6e:ce:7e:a1:96:af:6a:ef:13:57:1a:43:93:7c:2f:
                    e5:ab:5e:71:df:8b:c7:e3:cd:b2:1e:81:65:60:4a:
                    1b:d3:b1:a6:8a:31:cc:4c:4e:0b:74:46:d2:af:73:
                    45:6b:4e:74:13:99:58:44:02:79:68:3b:10:98:75:
                    3f:13:00:85:3c:ad:80:9c:64:34:ef:92:c9:fe:03:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:9D:2D:21:95:7C:8E:BA:F7:78:18:F8:BE:8D:15:F7:E1:C3:32
            X509v3 Authority Key Identifier:
                keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:42:08:2a:1c:0c:a8:ae:93:b8:5a:07:85:8e:e4:3e:71:
         d3:eb:27:54:12:bc:57:36:2f:88:07:99:9b:6d:26:96:48:cd:
         ea:88:19:04:6f:91:e3:42:7b:4e:63:6d:d0:ef:4f:43:26:83:
         29:e1:ad:c7:e2:82:ed:7f:9d:a1:19:33:dd:58:25:ae:38:03:
         07:c5:28:d3:68:f1:a3:98:c4:e6:35:43:7a:7b:10:5b:90:f2:
         44:40:38:e3:66:ea:62:ae:27:41:49:51:a8:72:5e:82:2e:fc:
         ea:71:69:d0:00:61:2c:19:7b:f2:15:8b:45:09:b3:52:c8:bc:
         f6:75:bc:3e:20:7c:58:59:15:f7:f3:3c:37:d2:f6:53:78:a9:
         5d:c0:49:d1:92:0b:2b:68:bc:ab:3e:3b:91:b3:30:c6:54:0e:
         74:f4:c5:14:43:b0:4b:36:33:04:91:8d:da:df:27:0e:00:f6:
         cc:25:4b:c1:d4:3b:cd:23:15:bc:1b:bd:de:d8:52:87:95:20:
         52:ce:b5:ff:35:6c:d8:7a:bb:8f:88:b8:09:20:30:8d:c7:6e:
         48:12:0f:4d:f3:94:af:b8:1e:95:38:07:34:06:04:68:b3:b0:
         3e:b5:6e:eb:fc:93:67:bc:0a:61:5e:69:1c:52:b6:58:7e:67:
         3c:be:ff:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3
NTIyNjM1MTIwHhcNMjYwMTI0MTU1NTMzWhcNMjYwMTMxMTU1NTMzWjAYMRYwFAYD
VQQDDA02OTc0ZWI3NS1iNjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5wNNd3qwYcT7LY0OFZ/Z03kfgkyEdMvkxa4dSlRu+h9dd6dxoD/cxOHazLv
snmAWDCUofCUrY1o+dQQnkIsIn38dMFl87BmxlgRy1nQk+BJj7xeHnBxbsELfXUv
rh2wPrns6yAav55kDNYPfjRJFQxlxuko9N+4KVO2dde/XF6FVNuJfHwoRNw8yL9y
qT83HFO8cEyCd48fnPzKn+maxNw3EIa2NMlrB6hcOiuMCVMD9zduzn6hlq9q7xNX
GkOTfC/lq15x34vH482yHoFlYEob07GmijHMTE4LdEbSr3NFa050E5lYRAJ5aDsQ
mHU/EwCFPK2AnGQ075LJ/gOZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVonS0h
lXyOuvd4GPi+jRX34cMyMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC
NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE
a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvVUIIKhwMqK6TuFoHhY7kPnHT6ydUErxXNi+IB5mbbSaWSM3qiBkE
b5HjQntOY23Q709DJoMp4a3H4oLtf52hGTPdWCWuOAMHxSjTaPGjmMTmNUN6exBb
kPJEQDjjZupiridBSVGocl6CLvzqcWnQAGEsGXvyFYtFCbNSyLz2dbw+IHxYWRX3
8zw30vZTeKldwEnRkgsraLyrPjuRszDGVA509MUUQ7BLNjMEkY3a3ycOAPbMJUvB
1DvNIxW8G73e2FKHlSBSzrX/NWzYeruPiLgJIDCNx25IEg9N85SvuB6VOAc0BgRo
s7A+tW7r/JNnvAphXmkcUrZYfmc8vv9W
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:10 2026 by rpki-client