This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File:                     O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier:          74kUl+5NMa0QGhy5K3EiuJlaoA0eZ6JsmtOPlwg0f10=
Subject key identifier:   AA:CD:D3:28:30:C3:85:66:B9:02:40:3C:16:A8:1D:30:AC:3D:48:7D
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number:          C2
Signing time:             Sun 25 Jan 2026 05:08:10 +0000
Manifest this update:     Sun 25 Jan 2026 05:08:09 +0000
Manifest next update:     Sun 01 Feb 2026 05:08:09 +0000
Files and hashes:         1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: Bl+wELJFVblbkME8Zspgrt/bStIaRWKAk/IJqXVizSk=)
                          2: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: AQ3RRlUnQ+bI7Mxuna8nU/0LJRi7LZKQd0nTc9fvglM=)
                          3: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: gno5W6OsNk9yV9Glt4IA06juipEOOOLdDDhIr5l7fds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Jan 25 05:08:09 2026 GMT
            Not After : Feb  1 05:08:09 2026 GMT
        Subject: CN=6975a539-19c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:5e:d4:e2:a4:e6:c8:47:f3:57:67:3f:d5:
                    8a:a8:72:6c:f5:bb:76:be:fa:e3:77:b1:ee:de:56:
                    df:8a:0e:7a:24:6f:aa:ec:1d:19:b9:23:d6:55:e7:
                    5a:86:2e:77:74:29:1f:c0:18:c7:3f:b8:33:de:6d:
                    28:3e:e6:67:65:b0:d7:db:fc:20:a3:63:60:97:ea:
                    31:1c:7e:ae:6f:9c:14:46:0d:01:bc:90:8d:53:9e:
                    13:32:af:aa:37:89:ad:b5:2c:e2:9c:e4:40:98:23:
                    24:98:f9:77:94:e3:62:64:e7:5d:69:13:59:89:6a:
                    6f:06:a8:5b:da:57:8f:e2:8b:3d:fc:45:92:f4:9b:
                    a8:cb:fb:ea:5d:8f:15:04:7a:75:a3:9e:08:4a:c2:
                    dd:30:90:53:71:4d:d2:36:bb:6a:6c:9f:ae:72:fd:
                    34:08:f4:a7:34:ba:be:04:04:84:b8:c1:cf:68:e3:
                    09:29:fa:0c:c1:99:68:0d:51:3c:c1:ea:b2:c4:17:
                    55:11:57:8b:8b:cc:9f:9c:72:2c:06:2f:70:96:b4:
                    62:ff:37:58:39:c1:b5:93:fb:84:43:32:09:a6:dd:
                    c1:c7:5d:88:61:c3:c9:e3:21:e6:d8:ef:c5:14:55:
                    34:57:1f:f9:50:72:ad:36:ba:81:a1:e1:6a:7e:6b:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:D3:28:30:C3:85:66:B9:02:40:3C:16:A8:1D:30:AC:3D:48:7D
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:30:c7:c0:0a:32:a9:2d:9d:0c:16:40:75:95:92:88:a8:4e:
         9c:02:d1:77:01:94:da:7c:3e:d9:4e:5d:a2:3e:8f:53:83:49:
         5e:0c:24:5e:3c:2f:f1:d2:ee:cd:8a:7d:dd:e0:39:c1:74:af:
         7f:1a:41:f7:cf:60:6b:45:2a:ef:1b:fd:97:76:cf:46:71:0a:
         84:9a:90:ca:51:c4:2a:46:2c:6a:ed:a3:56:34:04:b5:91:72:
         9c:5f:bb:3c:10:d2:b2:5e:28:fd:8b:19:95:b4:14:cb:48:1d:
         3a:5b:af:38:f7:f3:85:89:67:30:cd:ed:0a:2e:91:45:ae:76:
         be:e3:c7:13:29:68:37:e8:74:7f:08:62:07:32:7d:51:39:38:
         c2:6e:0d:b3:86:e8:30:33:71:20:7e:54:90:a9:99:34:ed:51:
         e7:60:37:d2:1f:f8:06:0d:cf:dc:3e:12:74:14:1a:4d:f6:78:
         bb:83:0f:cc:ec:ab:f2:d6:df:c9:d3:0e:e4:f9:10:18:72:c3:
         8a:00:03:a4:4f:d6:4b:c6:91:8a:f7:1e:f6:e2:be:3d:02:27:
         20:a7:98:07:22:93:aa:89:f1:4e:25:f3:73:60:02:9a:0a:fd:
         39:f9:92:11:e4:bb:36:6d:fd:6f:a2:ee:1b:3b:e2:18:8f:05:
         27:87:dc:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzAyMkMxMTAvBgNVBAUTKDNCQTI1NThDQTVGMUEwMzdEOTY5NkY1NjdBRTgxMzY3
QzZFRTM1RTYwHhcNMjYwMTI1MDUwODA5WhcNMjYwMjAxMDUwODA5WjAYMRYwFAYD
VQQDDA02OTc1YTUzOS0xOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSxe1OKk5shH81dnP9WKqHJs9bt2vvrjd7Hu3lbfig56JG+q7B0ZuSPWVeda
hi53dCkfwBjHP7gz3m0oPuZnZbDX2/wgo2Ngl+oxHH6ub5wURg0BvJCNU54TMq+q
N4mttSzinORAmCMkmPl3lONiZOddaRNZiWpvBqhb2leP4os9/EWS9Juoy/vqXY8V
BHp1o54ISsLdMJBTcU3SNrtqbJ+ucv00CPSnNLq+BASEuMHPaOMJKfoMwZloDVE8
weqyxBdVEVeLi8yfnHIsBi9wlrRi/zdYOcG1k/uEQzIJpt3Bx12IYcPJ4yHm2O/F
FFU0Vx/5UHKtNrqBoeFqfmv9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrN0ygw
w4VmuQJAPBaoHTCsPUh9MB8GA1UdIwQYMBaAFDuiVYyl8aA32WlvVnroE2fG7jXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDIyQy9CMUMxODIzMEQ0
QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi9PNkpWaktYeG9EZlphVzlXZXVnVFo4YnVO
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL082SlZqS1h4b0RmWmFXOVdldWdUWjhidU5lWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDIyQy9CMUMxODIzMEQ0QjkxMUVGOUZBOEUyNEZDNEY5QUUwMi9PNkpWaktYeG9E
ZlphVzlXZXVnVFo4YnVOZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBMMfACjKpLZ0MFkB1lZKIqE6cAtF3AZTafD7ZTl2iPo9Tg0leDCRe
PC/x0u7Nin3d4DnBdK9/GkH3z2BrRSrvG/2Xds9GcQqEmpDKUcQqRixq7aNWNAS1
kXKcX7s8ENKyXij9ixmVtBTLSB06W6849/OFiWcwze0KLpFFrna+48cTKWg36HR/
CGIHMn1ROTjCbg2zhugwM3EgflSQqZk07VHnYDfSH/gGDc/cPhJ0FBpN9ni7gw/M
7Kvy1t/J0w7k+RAYcsOKAAOkT9ZLxpGK9x724r49Aicgp5gHIpOqifFOJfNzYAKa
Cv05+ZIR5Ls2bf1vou4bO+IYjwUnh9zR
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:40 2026 by rpki-client