This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File:                     3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier:          l6SM33L3LsSh+1Cocc9Ndp72QI4dw+4k1A987tJ1OpY=
Subject key identifier:   E7:60:AF:DA:E9:05:D7:A2:09:45:FB:86:05:65:E1:B1:24:A6:07:89
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       1643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number:          163A
Signing time:             Sat 24 Jan 2026 16:28:47 +0000
Manifest this update:     Sat 24 Jan 2026 16:28:46 +0000
Manifest next update:     Sat 31 Jan 2026 16:28:46 +0000
Files and hashes:         1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: Zt6pSGCJGeopN0DQwR+dxZjH+9xPtUCQs9SOjdf1VoE=)
                          2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: yneq3VCU0xUuuWqz2yd6YieZf1M20T8Wk5aQncEi7bY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5699 (0x1643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Jan 24 16:28:46 2026 GMT
            Not After : Jan 31 16:28:46 2026 GMT
        Subject: CN=6974f33f-fd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:6e:d1:cf:83:3b:f8:a8:01:d9:19:56:36:
                    aa:15:d0:6f:e8:03:50:47:08:e2:c2:71:f2:e8:77:
                    41:3f:7a:be:68:b3:30:97:51:85:e6:af:39:54:e8:
                    30:79:c2:82:a0:f7:dd:72:d0:e9:1b:31:92:65:a7:
                    13:fd:4e:4a:3c:98:29:09:08:e9:33:a3:ea:80:99:
                    5f:64:ea:90:aa:8d:e6:ef:1a:85:d5:ba:6f:f6:2a:
                    4a:51:06:1a:df:d2:a2:d8:46:04:a7:29:16:70:5d:
                    3a:5f:1b:58:ef:2f:e0:ca:3e:23:a6:83:76:5b:86:
                    86:16:32:7d:86:0a:e0:79:f1:72:3d:9a:85:15:e9:
                    fa:0d:f7:0f:5d:fc:22:50:91:4e:f9:a1:b7:af:b2:
                    33:50:78:89:cf:80:12:75:ec:8a:5c:6a:eb:5c:4e:
                    f4:50:3f:e4:a6:c6:8d:ce:33:bd:35:78:42:ef:f2:
                    a3:75:be:8c:28:58:e3:8f:24:0c:fc:e4:df:d3:6f:
                    47:cd:e7:f7:ea:5d:5e:a5:3e:06:ed:8e:39:c3:71:
                    42:39:3b:9b:f2:0d:e6:c8:81:10:26:65:52:e9:ea:
                    e2:5d:dd:70:ce:ac:25:9d:c7:9b:0d:da:c2:4e:ba:
                    16:4e:51:dc:97:33:71:6d:cc:4a:7c:9b:79:98:e0:
                    a7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:60:AF:DA:E9:05:D7:A2:09:45:FB:86:05:65:E1:B1:24:A6:07:89
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:2f:aa:1b:f1:2b:00:eb:7e:67:10:71:9a:65:73:4b:51:
         87:ca:4e:54:7b:f9:99:6d:a5:8c:8b:e5:1b:5a:93:7a:13:e8:
         93:47:74:b6:e0:78:e5:b8:ef:81:12:9c:49:55:c8:de:2f:b6:
         bc:6a:5c:22:38:39:7c:c3:b2:fd:31:c3:6c:87:29:50:ae:29:
         c9:b3:1e:4f:78:6d:4f:71:3f:db:3a:35:56:5d:ac:58:c6:9b:
         3d:fd:c8:6a:33:36:89:2a:53:e9:4f:08:2d:f2:b8:29:ea:9f:
         72:ca:27:c9:c3:b0:e8:29:6d:65:f8:f9:6b:67:04:42:8a:14:
         7a:61:48:bc:db:c2:0b:f3:60:5e:da:b2:cb:7c:bd:70:41:95:
         b0:d1:8f:f4:1c:02:cf:01:3f:79:94:2a:13:6d:71:bc:eb:c6:
         82:3b:a2:3e:03:e3:e7:67:b0:16:c8:a6:de:0f:a3:1b:d7:cd:
         83:0b:74:3c:00:88:7f:c0:bf:f3:01:ac:5e:59:ed:e3:92:13:
         9b:b3:35:9e:58:6a:95:a4:8f:e7:f7:0d:2c:5e:a1:e3:f4:a0:
         e3:10:11:9b:4c:ef:a4:8f:0d:de:10:69:e0:93:0e:cd:33:58:
         8a:11:9b:2b:28:c1:f7:51:be:97:47:c1:8f:5e:a9:b3:42:5c:
         02:19:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:36 2026 by rpki-client