This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
File:                     I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json)
Hash identifier:          YKdea3Iduu5Tp7DOSyu/5/lx0MWAPw/cKgfmfih6pzo=
Subject key identifier:   FF:AB:F1:1B:B2:AA:CD:B7:18:BA:C6:CB:23:6E:3A:4F:F8:44:29:06
Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0
Certificate issuer:       /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0
Certificate serial:       031A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
Manifest number:          0312
Signing time:             Sun 25 Jan 2026 00:19:26 +0000
Manifest this update:     Sun 25 Jan 2026 00:19:26 +0000
Manifest next update:     Sun 01 Feb 2026 00:19:26 +0000
Files and hashes:         1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: lZjfINnMl4rNpDkjVWV/8Q/6Hu5we2tgZaf9017j/eQ=)
                          2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: LoYEejNqn6llhBwJ7xFsIlEEw1I815MKrVHi2CZC9n0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0
        Validity
            Not Before: Jan 25 00:19:26 2026 GMT
            Not After : Feb  1 00:19:26 2026 GMT
        Subject: CN=6975618e-767f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:f3:e0:c2:83:aa:ea:f4:2f:61:7f:6b:04:
                    7f:2e:a6:8d:7a:f1:42:80:21:d8:86:2d:ca:09:42:
                    7e:52:23:f2:a0:22:d8:55:20:a0:3b:83:fe:4f:96:
                    ff:d2:f9:ee:6d:12:fd:d3:64:ad:90:85:00:11:9a:
                    71:17:ed:08:0f:2b:29:ef:ce:c1:56:35:0b:8a:5d:
                    17:6a:2c:67:0c:ce:0c:5c:ea:b9:16:3b:49:60:a3:
                    2e:ef:80:6a:00:4a:ba:13:60:8b:dd:02:8a:25:30:
                    95:12:35:dd:ae:52:ae:a1:ba:3a:29:c7:f8:a6:f1:
                    24:87:35:85:fa:9e:95:62:19:34:a5:5d:bd:55:b1:
                    ef:8a:d7:46:f1:67:bd:4a:2a:1b:fa:60:1d:ac:b3:
                    d1:4f:c8:9b:4e:87:1c:7a:92:71:a9:f2:bc:81:51:
                    ce:78:8b:80:22:28:d4:84:09:fb:4a:75:19:6f:7e:
                    fc:28:37:97:3e:6f:14:2c:4c:03:83:d7:c7:22:2c:
                    58:7d:f3:c6:1f:94:3c:0c:9e:b4:85:55:d4:5e:c0:
                    06:18:ea:41:5f:d0:b6:f0:65:7c:f2:37:ef:ac:f3:
                    39:ba:83:9a:14:ef:e6:bb:17:cc:32:8f:b3:6a:2e:
                    ab:99:dd:fc:75:c6:3c:14:f3:2d:5a:7c:15:19:3a:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:F1:1B:B2:AA:CD:B7:18:BA:C6:CB:23:6E:3A:4F:F8:44:29:06
            X509v3 Authority Key Identifier:
                keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:db:34:75:3b:2c:69:4c:82:f3:95:74:7c:73:66:a1:df:
         35:67:6c:0e:80:3d:e9:15:fc:2d:a6:19:3a:6e:69:b0:fa:4e:
         a0:c2:8f:f2:48:f3:ce:f5:fc:df:b5:59:04:ee:9b:77:27:4d:
         a0:d5:af:84:41:14:5b:92:26:38:2f:35:d8:c5:55:73:c8:96:
         de:7c:43:86:24:79:5d:14:3c:ac:aa:49:af:6e:db:d7:0a:13:
         fb:85:92:e8:c0:88:7a:32:16:45:d1:c7:48:c1:de:dc:cb:89:
         7e:59:7f:be:0a:b0:63:62:c7:13:19:16:94:bc:88:c6:b7:e0:
         0c:1b:fa:97:ff:8e:e4:7f:85:89:36:1f:07:52:04:ae:53:34:
         2c:cf:2a:83:7a:a4:d8:f6:9d:78:22:30:08:5a:d4:77:d0:74:
         c3:d5:24:ac:4e:48:fc:c7:20:7f:a7:07:08:17:98:d4:74:25:
         d3:ff:5d:bc:a2:3e:11:b0:0f:26:78:62:98:ca:e4:83:24:44:
         77:27:85:11:e1:34:4e:3e:f8:33:48:02:45:8e:a0:f6:bb:1c:
         a0:cb:7d:43:8e:0f:3c:b1:f8:62:d3:c5:c6:5c:ec:26:11:ea:
         41:1a:77:2d:48:fa:97:1a:c4:00:6d:b3:c1:f8:e8:71:fe:f5:
         26:ad:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:27 2026 by rpki-client