This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
File:                     MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json)
Hash identifier:          mMVCcnNnPi5PNQ4yzI6+SO95W0m6wiMurSgrMvHxorw=
Subject key identifier:   C0:D7:26:E8:E5:18:31:10:1C:54:E4:A7:20:2D:AF:CE:D6:9C:8E:81
Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
Certificate issuer:       /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
Manifest number:          EC
Signing time:             Sun 25 Jan 2026 04:37:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:37:59 +0000
Manifest next update:     Sun 01 Feb 2026 04:37:59 +0000
Files and hashes:         1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: /zfZPDbEBt6PyVYLttFwSJpTI0vIfpr20ZYgS8ip4VU=)
                          2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: QPPTXA+ALXUhXbBS6N6EbcLL1inNfd3655N4UckWgIw=)
                          3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: qSH5h5rhfF2GxCdM6cfWpd9BiagkUdZKPfSn4h0sbnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
        Validity
            Not Before: Jan 25 04:37:59 2026 GMT
            Not After : Feb  1 04:37:59 2026 GMT
        Subject: CN=69759e27-8e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:b3:4f:4b:aa:4b:77:92:9b:9a:6d:57:77:
                    dd:d7:05:32:e9:59:ad:de:3b:7f:23:db:63:a2:ad:
                    38:a6:56:3d:f7:52:40:07:19:36:b4:64:88:33:96:
                    b8:f2:ca:7a:7e:eb:d0:ce:34:dc:7f:24:25:5e:fd:
                    ec:bc:a1:a6:07:f3:86:80:81:b5:39:b9:0c:3c:73:
                    96:55:29:a6:fc:b3:34:14:8f:9b:e7:2d:77:3f:25:
                    e5:0b:d2:eb:5c:05:fb:5e:55:23:6c:03:bd:90:23:
                    b0:6e:b2:71:91:81:5a:26:9c:8a:9b:3a:ae:79:43:
                    66:53:cf:ac:fe:95:35:01:bd:b8:2d:c6:80:58:5f:
                    15:fa:fd:9c:9e:ed:ba:16:b1:73:1e:be:f8:d0:4b:
                    a4:4a:ce:3c:c9:a0:ba:8e:02:e5:06:05:77:30:09:
                    eb:9b:1a:4c:3d:2b:87:95:e7:a8:05:9e:61:f2:61:
                    9a:09:67:08:e3:3b:84:e1:34:d1:34:b0:4e:26:82:
                    b5:4c:50:c9:3e:9a:1f:21:de:ab:e2:05:89:0c:bb:
                    69:cc:5f:68:62:4e:1b:63:c4:58:5e:7a:a4:31:11:
                    96:cc:c3:55:41:d5:a9:11:71:56:2c:6d:7c:b5:31:
                    53:75:07:e0:3a:6a:3a:04:4e:4b:f6:8d:41:bf:11:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D7:26:E8:E5:18:31:10:1C:54:E4:A7:20:2D:AF:CE:D6:9C:8E:81
            X509v3 Authority Key Identifier:
                keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:25:27:1d:bf:b3:e0:e3:df:3d:ee:0d:ba:2e:b3:a2:d7:be:
         42:5f:70:56:0f:cb:e8:c6:36:45:24:de:14:51:8a:a9:c2:2b:
         67:62:82:1d:9b:c3:5c:fc:3b:0e:13:02:d3:df:e7:33:47:65:
         75:f3:5f:98:74:87:a9:50:dd:69:38:6e:13:3a:36:ec:27:cc:
         02:39:b2:2c:11:c3:84:28:ed:ff:2c:e9:f1:6f:d1:af:fa:86:
         2d:d3:7e:92:cb:8a:91:ec:14:26:ff:45:dd:e2:8e:68:cf:40:
         06:2d:33:19:65:0e:59:ff:21:64:ff:de:f7:ef:43:57:90:9e:
         37:33:b8:1b:fd:45:1f:35:bd:20:f9:b2:91:ea:58:47:92:ef:
         47:3a:31:c2:38:56:2f:46:ca:b3:d1:6d:80:87:06:bc:3b:0b:
         2a:b8:2b:f2:21:1a:ef:77:63:0e:a3:8f:d3:0a:7f:e7:6c:93:
         21:53:f7:16:bd:fb:46:41:36:46:98:06:c3:6a:3f:37:21:31:
         cf:98:e3:33:c5:3a:1a:58:91:c6:73:c9:13:2d:20:f6:2c:ae:
         38:c5:47:b0:f1:68:56:6b:c2:8b:97:8a:db:c2:e6:11:4c:36:
         e3:64:6f:cc:3c:bd:4b:68:85:82:f8:0c:69:b7:cc:9c:bd:b7:
         69:03:9b:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx
RjlGNzNBRkYwHhcNMjYwMTI1MDQzNzU5WhcNMjYwMjAxMDQzNzU5WjAYMRYwFAYD
VQQDDA02OTc1OWUyNy04ZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlG+zT0uqS3eSm5ptV3fd1wUy6Vmt3jt/I9tjoq04plY991JABxk2tGSIM5a4
8sp6fuvQzjTcfyQlXv3svKGmB/OGgIG1ObkMPHOWVSmm/LM0FI+b5y13PyXlC9Lr
XAX7XlUjbAO9kCOwbrJxkYFaJpyKmzqueUNmU8+s/pU1Ab24LcaAWF8V+v2cnu26
FrFzHr740EukSs48yaC6jgLlBgV3MAnrmxpMPSuHleeoBZ5h8mGaCWcI4zuE4TTR
NLBOJoK1TFDJPpofId6r4gWJDLtpzF9oYk4bY8RYXnqkMRGWzMNVQdWpEXFWLG18
tTFTdQfgOmo6BE5L9o1BvxFL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDXJujl
GDEQHFTkpyAtr87WnI6BMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky
N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO
N3p5TUhJZlExemtmbjNPdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBJScdv7Pg49897g26LrOi175CX3BWD8voxjZFJN4UUYqpwitnYoId
m8Nc/DsOEwLT3+czR2V181+YdIepUN1pOG4TOjbsJ8wCObIsEcOEKO3/LOnxb9Gv
+oYt036Sy4qR7BQm/0Xd4o5oz0AGLTMZZQ5Z/yFk/97370NXkJ43M7gb/UUfNb0g
+bKR6lhHku9HOjHCOFYvRsqz0W2Ahwa8OwsquCvyIRrvd2MOo4/TCn/nbJMhU/cW
vftGQTZGmAbDaj83ITHPmOMzxToaWJHGc8kTLSD2LK44xUew8WhWa8KLl4rbwuYR
TDbjZG/MPL1LaIWC+Axpt8ycvbdpA5sr
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:35 2026 by rpki-client