This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
File:                     S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json)
Hash identifier:          3PlWDgNgwO7ugCUf5yfiuu5FynDHh4UZyA3yg+2uwtg=
Subject key identifier:   A3:61:AC:E2:30:AC:2B:17:54:E9:37:50:EC:FE:08:6D:78:D9:83:30
Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
Certificate issuer:       /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
Manifest number:          028B
Signing time:             Sun 25 Jan 2026 01:29:00 +0000
Manifest this update:     Sun 25 Jan 2026 01:28:59 +0000
Manifest next update:     Sun 01 Feb 2026 01:28:59 +0000
Files and hashes:         1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: ECAaimiQ1WQJ99CbOAb0vEFpcWuR8J0I6/NQtHj4V88=)
                          2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: m14z6Uh4ysiLxJ7zkokYHBwiwVXoe+55LfJcOc7XaG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
        Validity
            Not Before: Jan 25 01:28:59 2026 GMT
            Not After : Feb  1 01:28:59 2026 GMT
        Subject: CN=697571dc-3593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:33:8a:74:ff:1d:4a:e1:3b:eb:d4:26:a7:
                    23:cc:de:34:3e:71:b4:59:ab:47:4c:6b:3b:22:61:
                    7e:6a:ea:3f:ce:e7:c9:ee:c8:60:f0:79:54:e2:76:
                    dc:88:85:82:18:2f:f6:ef:d6:1a:26:8a:0d:f2:6b:
                    9b:38:aa:f6:e1:f8:ed:f4:2a:cc:07:7f:b3:74:94:
                    45:51:f4:d3:7c:4f:b6:f5:4b:0f:e2:ff:4b:4c:34:
                    0c:8e:34:b0:d8:6f:fc:23:94:8f:ef:19:d0:81:3f:
                    66:50:eb:24:5f:00:84:02:7a:f6:64:51:9b:10:f3:
                    a5:62:43:27:ce:c6:0d:fc:6c:b9:b3:f7:27:29:55:
                    9d:03:68:d9:78:34:e0:6e:94:af:ba:e1:ac:d2:18:
                    95:29:c7:9e:a9:dd:b8:71:25:ad:9c:38:bf:c2:cb:
                    82:08:79:7f:3f:59:f6:18:11:87:74:a7:eb:15:fa:
                    c4:a0:fe:1d:d3:1d:76:cd:54:ed:41:ad:78:08:2a:
                    d9:7f:ca:21:e0:eb:a5:6a:8b:bd:49:24:c9:f2:46:
                    50:4b:f2:f3:57:f8:77:1f:d3:25:90:17:4f:e3:f9:
                    31:23:a8:2d:4f:d1:4a:ed:a4:cc:00:ad:0b:f9:9c:
                    30:9b:7c:6c:3a:1f:d4:b3:d7:ba:f9:90:7a:cd:27:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:AC:E2:30:AC:2B:17:54:E9:37:50:EC:FE:08:6D:78:D9:83:30
            X509v3 Authority Key Identifier:
                keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:af:70:73:2d:df:c2:51:de:85:46:5f:64:90:9f:79:c6:
         f6:4b:3f:4c:45:e4:9a:fc:1b:95:8a:63:86:b6:00:1d:55:20:
         c4:d0:9a:08:54:0e:c8:41:76:2a:52:9c:f2:e0:5c:36:8e:c6:
         92:9c:c5:63:ff:a0:09:37:9a:02:a3:a5:e6:cf:b4:5b:89:50:
         bf:71:94:93:46:26:a3:da:89:46:a0:f2:62:b2:52:fe:27:07:
         43:f7:3f:11:30:be:16:ab:90:bc:b8:38:20:9a:41:42:4b:a7:
         bf:44:65:5c:40:f3:d1:80:88:9b:a3:73:5f:c6:68:b7:0f:c9:
         32:0a:52:10:a0:d1:35:46:59:a6:0f:6a:3f:16:a0:2f:83:9e:
         f3:14:ab:63:c1:c1:39:71:72:f7:ee:10:30:b1:af:8d:8d:79:
         ab:77:35:f0:9d:f7:86:fa:8c:ce:a5:65:12:93:34:f3:3c:3b:
         b2:aa:3e:35:78:b9:98:8d:e9:bb:8d:e2:86:3c:c4:89:f7:44:
         31:16:f0:c5:3b:4a:45:28:61:ae:cb:68:ee:c5:23:07:d1:a7:
         eb:31:7e:90:9b:2e:4c:ca:3a:33:6c:ca:fb:0f:d4:f5:e3:15:
         4d:3a:e6:49:1f:0b:f4:a1:3a:a1:ee:d5:ef:b8:6f:57:3a:d4:
         d3:d9:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:58 2026 by rpki-client