This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          d51YGhdlS22ynYAUpblk3rFHMBz2KEaM/Zk+QXdWoXk=
Subject key identifier:   9B:3F:07:E0:FB:92:08:2C:8F:B1:43:83:62:D8:33:66:86:60:90:E8
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          01A1
Signing time:             Sun 25 Jan 2026 02:42:52 +0000
Manifest this update:     Sun 25 Jan 2026 02:42:51 +0000
Manifest next update:     Sun 01 Feb 2026 02:42:51 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: WnlXxXY7qD2Csa38HFYjj2Pg7Pzw0wfqIYe4UzrPF4c=)
                          2: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: hpS0Rw4Hpsn18bTXeZcLgHqI4TGOF4pkI9VU9c22APE=)
                          3: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: lJL4OyQQvMn6qBDjsbTMOw2wH6AlTxIpAcNj3bDWVv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: Jan 25 02:42:51 2026 GMT
            Not After : Feb  1 02:42:51 2026 GMT
        Subject: CN=6975832c-f3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:93:3e:c8:b6:23:48:79:eb:77:73:63:c9:
                    a2:7c:43:7a:0d:50:d2:9f:e7:ae:cf:c7:55:83:a8:
                    8a:e8:9d:12:dd:e4:9e:a9:6d:5e:2b:fe:8d:1c:55:
                    a8:26:5e:9a:51:87:db:6b:4e:ca:99:f5:e8:72:92:
                    f1:4c:13:f6:8d:cd:aa:38:fb:e9:e8:e3:51:90:92:
                    19:db:e7:d1:c7:70:1a:74:6c:f5:b1:bc:56:4b:8c:
                    c7:0f:19:e9:24:1b:19:42:c9:59:de:bb:7b:d4:7a:
                    35:6b:79:47:cf:00:16:e7:4c:f4:3b:31:db:4e:d3:
                    fe:2e:5e:1e:c1:b1:b8:c1:00:18:63:8c:83:5d:cf:
                    31:28:00:23:58:9f:44:c8:1f:14:a0:75:9e:16:6b:
                    46:e2:5e:7c:a1:a3:54:4b:40:f2:9d:29:ea:77:8a:
                    c9:38:24:db:37:7b:9c:ec:c2:76:4d:22:d5:31:db:
                    b9:bc:dc:13:39:03:3b:ca:32:a4:66:89:82:d4:14:
                    cb:c6:8d:ee:49:49:0e:f9:c6:a1:5e:c5:8e:af:35:
                    dd:2a:bb:dc:28:71:33:3f:49:3a:df:e7:f2:62:d0:
                    2d:b3:52:fc:34:0f:69:a4:f0:41:f5:6e:76:22:3d:
                    22:57:f7:8e:d0:51:f0:84:fd:70:a9:a9:68:66:ba:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:07:E0:FB:92:08:2C:8F:B1:43:83:62:D8:33:66:86:60:90:E8
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:24:90:9f:fd:6f:8c:c5:58:57:02:ef:d4:f5:76:86:4e:0e:
         b9:a0:d2:8d:62:c9:ff:d6:3e:8b:8f:c4:82:53:cb:09:86:21:
         df:81:0f:47:cf:33:0a:21:4a:ba:80:41:80:88:3d:14:05:11:
         25:9b:79:16:b2:7a:60:5d:95:8e:2c:6b:34:be:a5:36:b4:fd:
         60:18:25:f2:b9:de:c8:19:80:f8:76:5a:60:77:e7:2b:c4:0a:
         ee:15:98:b6:9d:29:e5:b2:24:f2:30:40:51:fb:ae:b9:41:bd:
         b2:2e:8c:9d:2a:0c:b5:d3:d0:12:c0:02:c8:27:0a:4d:34:60:
         56:ed:08:fc:ae:b0:00:a0:9c:25:08:6b:e7:31:b1:ab:ce:92:
         f0:36:96:dd:59:a9:3b:35:1e:a7:40:06:52:89:fb:6d:ba:c4:
         d4:b3:ed:28:9a:55:19:9a:51:a7:be:f0:25:f8:63:4b:f5:be:
         b1:e3:d4:6d:5c:9b:26:a8:69:d0:99:51:80:f7:64:46:9e:71:
         92:f4:f2:ab:52:7b:f4:ab:1e:a6:1e:b3:04:8b:3d:0a:73:88:
         6d:15:83:c5:ba:c6:9f:87:aa:c1:26:0c:f9:01:72:f4:65:2d:
         f2:73:d1:c5:b5:1b:00:26:05:a4:79:d4:7c:c1:6e:81:72:75:
         8b:1c:41:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB
NTI4REYzQkUwHhcNMjYwMTI1MDI0MjUxWhcNMjYwMjAxMDI0MjUxWjAYMRYwFAYD
VQQDDA02OTc1ODMyYy1mM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDWTPsi2I0h563dzY8mifEN6DVDSn+euz8dVg6iK6J0S3eSeqW1eK/6NHFWo
Jl6aUYfba07KmfXocpLxTBP2jc2qOPvp6ONRkJIZ2+fRx3AadGz1sbxWS4zHDxnp
JBsZQslZ3rt71Ho1a3lHzwAW50z0OzHbTtP+Ll4ewbG4wQAYY4yDXc8xKAAjWJ9E
yB8UoHWeFmtG4l58oaNUS0DynSnqd4rJOCTbN3uc7MJ2TSLVMdu5vNwTOQM7yjKk
ZomC1BTLxo3uSUkO+cahXsWOrzXdKrvcKHEzP0k63+fyYtAts1L8NA9ppPBB9W52
Ij0iV/eO0FHwhP1wqaloZrrLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJs/B+D7
kggsj7FDg2LYM2aGYJDoMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3
OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJv
M0dRaXJqVVhBX0tsS044NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDOJJCf/W+MxVhXAu/U9XaGTg65oNKNYsn/1j6Lj8SCU8sJhiHfgQ9H
zzMKIUq6gEGAiD0UBRElm3kWsnpgXZWOLGs0vqU2tP1gGCXyud7IGYD4dlpgd+cr
xAruFZi2nSnlsiTyMEBR+665Qb2yLoydKgy109ASwALIJwpNNGBW7Qj8rrAAoJwl
CGvnMbGrzpLwNpbdWak7NR6nQAZSifttusTUs+0omlUZmlGnvvAl+GNL9b6x49Rt
XJsmqGnQmVGA92RGnnGS9PKrUnv0qx6mHrMEiz0Kc4htFYPFusafh6rBJgz5AXL0
ZS3yc9HFtRsAJgWkedR8wW6BcnWLHEFB
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:42 2026 by rpki-client