This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File:                     3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier:          s0uvLhj3yMTqZvBs4I3hVx4pppSznTpPITTYqYGHJ/U=
Subject key identifier:   6E:82:DE:28:4D:DA:C0:6A:73:06:E9:C1:5A:06:B0:51:9A:1E:A5:0D
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer:       /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial:       08A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number:          089D
Signing time:             Sat 24 Jan 2026 19:55:03 +0000
Manifest this update:     Sat 24 Jan 2026 19:55:03 +0000
Manifest next update:     Sat 31 Jan 2026 19:55:03 +0000
Files and hashes:         1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: OMJYh3y+JEYRFGjM7AZLDVmbzlfSpoli3y/6NYf/eFk=)
                          2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: VQq/UvoPY3PzVTNf+ElhyuCuI9ySZEIWpztRGxnf5R4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
        Validity
            Not Before: Jan 24 19:55:03 2026 GMT
            Not After : Jan 31 19:55:03 2026 GMT
        Subject: CN=69752397-940b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:b2:23:29:ec:91:33:2f:1b:67:a5:c9:48:
                    eb:88:de:32:a8:00:49:7f:d4:22:8b:4a:8a:b2:e6:
                    0a:91:59:4f:cf:22:aa:8e:b2:e0:8d:e9:67:97:ba:
                    80:a2:b7:bb:18:64:33:bb:8b:8e:e6:10:92:3e:3b:
                    66:c6:e3:2e:a6:f3:f5:a5:f1:e9:49:cd:75:48:06:
                    cf:96:54:7a:9a:43:73:54:60:30:f6:74:04:7a:80:
                    13:5f:93:ce:d1:20:4d:cc:8b:2a:b3:07:cf:5f:6a:
                    71:7d:47:03:22:6c:35:37:87:c8:8c:66:d8:7f:24:
                    76:cc:94:c1:ab:7f:a4:3f:ad:5d:7c:b9:51:10:28:
                    15:69:9d:9f:ac:56:b0:31:16:de:66:6e:51:cd:fb:
                    05:ac:50:ec:d7:bd:d0:f1:0c:74:e5:55:4b:bd:ee:
                    7c:97:73:b0:a4:fc:be:68:00:d2:40:66:02:bd:b1:
                    18:a8:2f:e0:68:1e:5b:2b:51:0d:c8:26:4c:fe:bd:
                    00:02:47:6a:3b:71:73:2b:c1:86:77:ed:f6:fa:b5:
                    82:64:5c:0a:51:2c:98:47:d5:2b:8d:09:b9:2b:af:
                    9b:df:8f:70:7f:2a:e6:9f:a1:9c:70:67:f4:12:ba:
                    42:8a:03:3f:2d:49:f9:04:e1:19:6b:d6:c5:b1:42:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:DE:28:4D:DA:C0:6A:73:06:E9:C1:5A:06:B0:51:9A:1E:A5:0D
            X509v3 Authority Key Identifier:
                keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:a9:20:b7:ef:fc:85:d4:a6:ff:12:c9:54:da:d1:52:6c:
         40:d4:3b:37:ca:7c:55:52:c0:a7:70:30:0c:64:7f:16:23:ee:
         e1:10:98:9a:79:21:c0:fd:b0:ab:e0:ff:f9:c1:cb:03:ab:7f:
         a8:0d:c3:39:a7:b8:50:be:40:27:19:12:9e:e3:01:63:c7:dd:
         d5:25:38:1c:ca:2f:2c:bc:0a:3f:71:f9:5a:3d:ca:ef:52:d2:
         07:76:5b:ea:f6:fb:61:28:06:35:95:6a:6b:0e:e6:8c:c5:1d:
         f8:e3:d1:01:b3:f0:74:22:8b:a9:8e:c7:b3:a0:5a:f8:dc:34:
         18:92:a5:01:a7:07:ce:b8:77:8f:4f:e7:1f:00:63:ae:cb:36:
         db:ae:7d:66:03:a1:95:2e:5e:ec:fb:34:c1:cc:99:3c:db:63:
         e6:2b:72:97:f7:d5:1b:88:95:4c:76:08:4a:c9:8f:ca:3c:0e:
         24:a4:8e:7a:38:65:3a:aa:e0:22:52:42:b5:ae:7a:82:97:62:
         0c:aa:b4:0e:19:f9:df:f5:73:8c:1a:59:af:ae:3e:63:a1:0a:
         10:5e:08:f9:05:05:7a:72:aa:64:0a:7a:e9:f9:49:43:f1:c8:
         44:9d:2d:7c:08:80:f3:fe:69:3b:59:12:e7:4d:a0:26:80:18:
         95:8d:e6:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4
RjhBMjA2QzYwHhcNMjYwMTI0MTk1NTAzWhcNMjYwMTMxMTk1NTAzWjAYMRYwFAYD
VQQDDA02OTc1MjM5Ny05NDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8MCyIynskTMvG2elyUjriN4yqABJf9Qii0qKsuYKkVlPzyKqjrLgjelnl7qA
ore7GGQzu4uO5hCSPjtmxuMupvP1pfHpSc11SAbPllR6mkNzVGAw9nQEeoATX5PO
0SBNzIsqswfPX2pxfUcDImw1N4fIjGbYfyR2zJTBq3+kP61dfLlRECgVaZ2frFaw
MRbeZm5RzfsFrFDs173Q8Qx05VVLve58l3OwpPy+aADSQGYCvbEYqC/gaB5bK1EN
yCZM/r0AAkdqO3FzK8GGd+32+rWCZFwKUSyYR9UrjQm5K6+b349wfyrmn6GccGf0
ErpCigM/LUn5BOEZa9bFsUIhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6C3ihN
2sBqcwbpwVoGsFGaHqUNMB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0
RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3
M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARrakgt+/8hdSm/xLJVNrRUmxA1Ds3ynxVUsCncDAMZH8WI+7hEJia
eSHA/bCr4P/5wcsDq3+oDcM5p7hQvkAnGRKe4wFjx93VJTgcyi8svAo/cflaPcrv
UtIHdlvq9vthKAY1lWprDuaMxR3449EBs/B0IoupjsezoFr43DQYkqUBpwfOuHeP
T+cfAGOuyzbbrn1mA6GVLl7s+zTBzJk822PmK3KX99UbiJVMdghKyY/KPA4kpI56
OGU6quAiUkK1rnqCl2IMqrQOGfnf9XOMGlmvrj5joQoQXgj5BQV6cqpkCnrp+UlD
8chEnS18CIDz/mk7WRLnTaAmgBiVjeaQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:58 2026 by rpki-client