This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
File:                     B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft (raw, json)
Hash identifier:          WqbQRUsCVXobHeK+Y17M999dcoXSDe+3Ys0czyMcba4=
Subject key identifier:   1E:C3:02:16:5D:3B:04:BC:36:22:63:60:CB:B4:A0:91:51:3F:5B:12
Authority key identifier: 07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3
Certificate issuer:       /CN=A91C13E1/serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
Manifest number:          0146
Signing time:             Sun 25 Jan 2026 03:34:43 +0000
Manifest this update:     Sun 25 Jan 2026 03:34:42 +0000
Manifest next update:     Sun 01 Feb 2026 03:34:42 +0000
Files and hashes:         1: B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl (hash: 5OfnPRYXtJ5epOashSTASoGFxoU3cklt38qIiIls43M=)
                          2: 5BFDCF8C05FE11EFA2A14B6DC4F9AE02.roa (hash: zw1ksNYvuYvz/L+PTYal5s6UlMhRxYj97KDb6gSbQJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl
                          rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C13E1, serialNumber=077BEA9BFE300646165C3436C7D4CC38346C6BA3
        Validity
            Not Before: Jan 25 03:34:42 2026 GMT
            Not After : Feb  1 03:34:42 2026 GMT
        Subject: CN=69758f52-f32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:65:37:6f:c8:5a:20:bf:63:42:15:46:cb:
                    8b:bc:f3:43:8f:07:18:93:ac:5b:b1:c1:12:d0:6b:
                    4e:b4:9b:81:75:99:72:87:66:82:20:82:10:7b:4c:
                    84:2a:ac:53:0b:c0:78:df:3d:cd:18:59:0c:5e:68:
                    98:38:c4:d9:13:42:7a:11:83:d6:25:f6:70:9d:62:
                    fe:bb:ac:af:7d:78:d7:23:d7:4c:39:41:24:19:3d:
                    15:45:e2:09:a9:96:0e:37:66:ac:ce:5c:36:b4:47:
                    50:26:f3:d2:bc:8a:13:54:ac:6e:45:70:f5:a5:bd:
                    b0:7f:08:ff:bf:26:59:c4:66:20:c7:6d:12:97:7e:
                    0d:17:fe:b2:a8:ed:87:80:30:98:56:b3:2e:52:55:
                    67:56:96:c9:16:fc:11:6b:e2:34:e0:8e:ca:8a:9b:
                    50:d4:98:7c:a6:7f:61:be:e5:3c:72:25:46:1d:2e:
                    09:80:51:cf:41:ee:d7:25:35:d8:71:3c:94:0c:5c:
                    00:68:d4:be:00:d0:1c:71:79:be:39:e0:ce:89:2b:
                    4b:db:cd:07:e3:bc:80:7b:05:ae:61:16:73:b2:66:
                    fd:92:f7:2b:f3:51:b8:0c:a0:e7:59:ea:b9:03:52:
                    fe:1e:1e:56:fd:8b:d7:3f:fb:fc:2e:8d:03:24:0a:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:02:16:5D:3B:04:BC:36:22:63:60:CB:B4:A0:91:51:3F:5B:12
            X509v3 Authority Key Identifier:
                keyid:07:7B:EA:9B:FE:30:06:46:16:5C:34:36:C7:D4:CC:38:34:6C:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B3vqm_4wBkYWXDQ2x9TMODRsa6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C13E1/82FDF91A05FC11EF8A5FC368C4F9AE02/B3vqm_4wBkYWXDQ2x9TMODRsa6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:35:e1:e1:fe:81:7e:bc:5a:38:41:c9:cb:7e:a1:6e:ef:
         7b:27:a8:20:9f:e2:dd:38:d4:b0:5b:2b:82:9d:44:bc:33:a2:
         21:9d:14:10:cf:da:c8:19:58:7d:b7:fd:9a:a7:ce:38:09:6c:
         b5:50:09:01:62:0f:36:9f:ef:fc:a1:ba:59:37:ff:a9:f6:78:
         e1:ed:95:64:89:9d:d7:b9:2a:96:d7:8e:e3:32:45:ab:33:53:
         1a:1e:c5:58:48:90:1a:88:96:7f:51:69:fe:31:da:97:2a:5c:
         60:6f:d4:0d:2f:f6:bc:5d:06:2b:97:3b:b7:48:45:02:62:cb:
         a8:5b:60:64:77:18:b3:9f:0a:6c:f5:aa:d4:05:db:48:46:7b:
         22:55:5d:c0:17:5c:55:7d:00:99:3f:87:50:da:8a:19:be:f1:
         10:a2:4e:dc:18:68:a0:7c:37:36:eb:3c:ae:94:2f:a6:fb:8d:
         a8:12:ee:9d:54:ae:28:3d:04:1d:1a:db:8a:81:5c:48:95:18:
         df:80:cd:24:ac:d6:d1:58:4e:e7:c1:5b:5e:fd:97:c1:3b:da:
         2d:78:19:f7:10:0b:82:2c:23:4a:2c:42:d4:e2:0f:33:6b:c1:
         41:d4:78:1e:f9:d8:f3:a6:9d:3f:50:e1:ac:0f:27:98:d6:83:
         b5:31:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:14 2026 by rpki-client