This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
File:                     4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json)
Hash identifier:          zBpH4ULu07KO1qXpnpqPpiwr3EeaPGGZG7PWueOOSM4=
Subject key identifier:   BF:6F:BD:34:C6:F6:A5:99:DC:8A:B8:32:C6:57:52:4D:02:79:A3:AE
Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
Certificate issuer:       /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Certificate serial:       1C66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
Manifest number:          1C57
Signing time:             Sat 24 Jan 2026 16:00:08 +0000
Manifest this update:     Sat 24 Jan 2026 16:00:07 +0000
Manifest next update:     Sat 31 Jan 2026 16:00:07 +0000
Files and hashes:         1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: MzmCNVNhL2aTEnlH7ASbUWIr++D6lLpv6K+SWMYZz9g=)
                          2: 65D82706BACE11F0AAEC4611C4F9AE02.roa (hash: jRKCXjvvxz21yV0w47MZxjLNIbg9HlLS7JMeNrcmv0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
                          rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7270 (0x1c66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
        Validity
            Not Before: Jan 24 16:00:07 2026 GMT
            Not After : Jan 31 16:00:07 2026 GMT
        Subject: CN=6974ec87-177e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:fe:62:11:47:0d:f0:40:57:72:9e:69:5f:
                    7e:0b:0f:07:0f:ef:a5:04:4d:26:1e:f3:3a:39:9e:
                    70:d6:d9:13:83:8b:63:74:b2:aa:2c:82:97:c8:e1:
                    85:d9:bb:03:6e:d8:c1:42:46:60:6c:14:5e:15:95:
                    d4:05:e2:4f:94:83:7f:c3:99:bf:fc:92:87:7d:38:
                    09:46:9b:b9:89:62:fa:1f:39:ba:a7:07:01:73:c9:
                    e8:75:65:05:d2:c0:d4:fd:e5:de:78:b3:88:e3:e2:
                    da:51:6d:74:64:aa:8c:bc:6c:cd:b5:cf:1e:ed:b5:
                    7e:28:c8:63:60:11:30:46:c7:dc:fa:af:0b:f2:9c:
                    6f:ca:2f:62:2d:54:14:3e:3f:7d:84:71:db:48:21:
                    cd:ab:15:d0:09:2e:8a:05:01:53:4b:3d:02:6b:14:
                    7a:18:ea:92:5e:9c:6d:29:87:0d:c4:df:f3:57:93:
                    ad:34:66:43:ba:8b:b8:28:2a:9d:01:8e:1b:91:b4:
                    bd:58:33:61:06:22:0e:2a:b3:81:a1:8b:dc:1c:c6:
                    b6:e4:eb:c8:e2:f7:db:88:9d:3a:2c:7f:37:fa:f9:
                    bc:95:70:1b:c2:19:16:79:09:c2:29:68:91:61:5b:
                    39:1a:fd:6c:3f:64:be:01:72:af:c4:6e:12:42:a4:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:BD:34:C6:F6:A5:99:DC:8A:B8:32:C6:57:52:4D:02:79:A3:AE
            X509v3 Authority Key Identifier:
                keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:3c:f1:8a:e9:49:b1:83:1e:a3:cb:ea:10:d3:97:b0:9d:
         2b:26:3f:81:bf:5d:af:9b:c2:9b:e2:43:77:35:ee:78:2b:97:
         48:57:bc:d5:39:24:37:ea:28:74:77:c4:08:bd:aa:0d:bf:68:
         cb:ec:04:a7:01:13:28:61:b7:ae:2e:43:d0:98:9b:be:1a:67:
         a4:f8:c5:32:8a:9d:09:77:42:04:df:66:d8:22:47:73:fd:7d:
         90:37:df:6e:37:b0:b9:25:2d:02:14:88:ae:07:13:ed:83:38:
         29:1b:80:f7:a2:05:e8:c4:5c:5f:19:10:3c:33:7e:2c:17:54:
         65:e0:43:6f:a7:9e:b6:d6:9a:1e:d6:f5:51:08:ce:4e:7b:76:
         e5:0a:dd:73:1c:79:b6:aa:07:37:07:de:9b:44:66:06:9c:e7:
         9f:ad:23:79:98:fa:5f:66:b4:94:03:c4:b3:03:fb:99:a5:0c:
         4a:71:3a:3a:88:cc:c5:cb:6b:43:a5:74:89:92:0e:6a:e3:26:
         fd:4f:bf:91:cf:1d:24:e5:0e:bb:d6:7e:56:66:0c:63:bd:77:
         36:d5:c1:51:f4:c1:10:9e:fc:1b:7b:35:61:cc:b3:76:01:40:
         c1:f0:97:ce:c1:fd:15:1e:e5:f0:90:be:21:22:ed:bc:04:cc:
         f0:b5:9d:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0
REQ3NTc4NEIwHhcNMjYwMTI0MTYwMDA3WhcNMjYwMTMxMTYwMDA3WjAYMRYwFAYD
VQQDDA02OTc0ZWM4Ny0xNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA52T+YhFHDfBAV3KeaV9+Cw8HD++lBE0mHvM6OZ5w1tkTg4tjdLKqLIKXyOGF
2bsDbtjBQkZgbBReFZXUBeJPlIN/w5m//JKHfTgJRpu5iWL6Hzm6pwcBc8nodWUF
0sDU/eXeeLOI4+LaUW10ZKqMvGzNtc8e7bV+KMhjYBEwRsfc+q8L8pxvyi9iLVQU
Pj99hHHbSCHNqxXQCS6KBQFTSz0CaxR6GOqSXpxtKYcNxN/zV5OtNGZDuou4KCqd
AY4bkbS9WDNhBiIOKrOBoYvcHMa25OvI4vfbiJ06LH83+vm8lXAbwhkWeQnCKWiR
YVs5Gv1sP2S+AXKvxG4SQqQLowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9vvTTG
9qWZ3Iq4MsZXUk0CeaOuMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5
RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i
c29kUmhPNE4xZWxOMTFlRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAbjzxiulJsYMeo8vqENOXsJ0rJj+Bv12vm8Kb4kN3Ne54K5dIV7zV
OSQ36ih0d8QIvaoNv2jL7ASnARMoYbeuLkPQmJu+Gmek+MUyip0Jd0IE32bYIkdz
/X2QN99uN7C5JS0CFIiuBxPtgzgpG4D3ogXoxFxfGRA8M34sF1Rl4ENvp5621poe
1vVRCM5Oe3blCt1zHHm2qgc3B96bRGYGnOefrSN5mPpfZrSUA8SzA/uZpQxKcTo6
iMzFy2tDpXSJkg5q4yb9T7+Rzx0k5Q671n5WZgxjvXc21cFR9MEQnvwbezVhzLN2
AUDB8JfOwf0VHuXwkL4hIu28BMzwtZ2T
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:27 2026 by rpki-client