This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
File:                     REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json)
Hash identifier:          KTHPob+coLUbLR/70+lLTK3QHJ0zzQO8WRTdDY+grHY=
Subject key identifier:   B1:4F:35:A4:00:23:C1:94:02:BC:CC:6E:1B:96:DF:79:B6:B5:40:F1
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Certificate issuer:       /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial:       0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
Manifest number:          0CBF
Signing time:             Sat 24 Jan 2026 17:53:59 +0000
Manifest this update:     Sat 24 Jan 2026 17:53:58 +0000
Manifest next update:     Sat 31 Jan 2026 17:53:58 +0000
Files and hashes:         1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: j2V4DJD0pDwpO7kFsev5tYWdkoj1TVBOUx6cdTzx4HI=)
                          2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: M3bsS+Xk9LNsygw5XkjDTpnJwQmvk0v371BaGHqkpV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
        Validity
            Not Before: Jan 24 17:53:58 2026 GMT
            Not After : Jan 31 17:53:58 2026 GMT
        Subject: CN=69750737-026c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:b8:1f:a2:79:db:64:fd:08:40:d5:94:24:
                    e5:ed:2d:52:51:bb:e8:41:78:fe:bb:53:1e:07:0f:
                    4b:86:ab:13:96:21:8d:85:e7:18:83:5b:3b:d7:91:
                    85:d4:71:b1:ef:75:0f:d4:63:15:68:8e:00:ef:68:
                    8b:3f:7f:b6:11:bd:94:9a:44:c4:21:7c:d1:e5:26:
                    6f:a1:9a:75:5e:3d:ff:9c:97:6c:6d:b9:66:8f:14:
                    36:af:9d:26:18:87:44:d9:41:f3:8f:2f:f6:44:e3:
                    32:1e:db:7e:5b:83:49:7d:ea:17:14:4e:63:24:83:
                    55:d5:d2:2e:5b:7d:7f:57:51:f9:6d:71:f8:c8:5e:
                    69:68:3b:c4:6d:cb:c1:c5:ec:0c:90:25:49:0a:3d:
                    15:e5:90:40:5a:69:95:0a:e7:4d:54:7f:77:a6:e6:
                    3a:a2:a9:aa:1a:74:ae:cd:ab:f3:f9:61:ed:ae:7a:
                    9b:b2:ff:f3:70:aa:1c:0e:7f:59:6a:0b:fa:d4:fc:
                    14:fc:de:e6:3c:08:5a:8d:b8:66:0b:a1:0b:36:5e:
                    af:bd:d7:ed:2f:05:01:0f:79:de:5e:b2:48:8f:a0:
                    36:a5:d2:0d:87:46:94:b6:4d:62:97:5c:f8:05:83:
                    1e:cd:77:0a:5c:28:11:4f:51:b5:8f:34:9a:25:94:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:35:A4:00:23:C1:94:02:BC:CC:6E:1B:96:DF:79:B6:B5:40:F1
            X509v3 Authority Key Identifier:
                keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:bd:33:d6:ba:ec:8a:b2:3c:15:a0:50:c4:ff:d0:cc:8b:
         2e:b0:49:2d:1b:36:58:22:4f:f9:1b:a7:a9:c6:b7:83:a2:21:
         69:17:06:e5:29:35:01:8c:7f:86:d0:de:d8:e6:a0:8f:e9:08:
         71:62:20:f9:9a:f2:e4:1c:73:2c:a2:b5:46:a9:64:4c:51:3f:
         17:17:36:14:ab:8f:ce:43:5d:59:9b:5d:f0:05:8d:89:23:71:
         8e:f2:01:3f:89:ed:41:4a:25:01:60:cd:5c:4f:7e:14:87:a8:
         da:6a:43:c7:34:61:a0:90:11:bd:64:e7:51:1d:77:91:43:fd:
         b7:17:10:bb:9e:52:63:e5:36:24:95:c3:62:58:98:9c:f2:ee:
         be:e6:a8:d6:b1:fe:44:fe:16:1c:34:c6:8e:65:87:c8:92:54:
         07:1b:fd:f9:06:ac:24:ac:ef:07:54:5c:af:b5:7c:60:5d:1e:
         af:76:c8:57:7b:6a:10:7e:9c:7d:7c:0c:94:4c:6f:0e:b9:92:
         0d:19:e7:91:8a:67:5f:84:76:4f:c3:b5:9a:32:6c:96:ff:89:
         ec:2c:84:e8:23:c0:c0:b4:a6:34:52:e5:59:52:32:6c:88:43:
         51:30:f4:17:02:12:d3:f4:62:3d:ea:74:5b:0b:1c:27:ad:51:
         f3:1a:3f:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1
NzkyRUUwNEIwHhcNMjYwMTI0MTc1MzU4WhcNMjYwMTMxMTc1MzU4WjAYMRYwFAYD
VQQDDA02OTc1MDczNy0wMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGa4H6J522T9CEDVlCTl7S1SUbvoQXj+u1MeBw9LhqsTliGNhecYg1s715GF
1HGx73UP1GMVaI4A72iLP3+2Eb2UmkTEIXzR5SZvoZp1Xj3/nJdsbblmjxQ2r50m
GIdE2UHzjy/2ROMyHtt+W4NJfeoXFE5jJINV1dIuW31/V1H5bXH4yF5paDvEbcvB
xewMkCVJCj0V5ZBAWmmVCudNVH93puY6oqmqGnSuzavz+WHtrnqbsv/zcKocDn9Z
agv61PwU/N7mPAhajbhmC6ELNl6vvdftLwUBD3neXrJIj6A2pdINh0aUtk1il1z4
BYMezXcKXCgRT1G1jzSaJZRVsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFPNaQA
I8GUArzMbhuW33m2tUDxMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1
MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t
VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAk8L0z1rrsirI8FaBQxP/QzIsusEktGzZYIk/5G6epxreDoiFpFwbl
KTUBjH+G0N7Y5qCP6QhxYiD5mvLkHHMsorVGqWRMUT8XFzYUq4/OQ11Zm13wBY2J
I3GO8gE/ie1BSiUBYM1cT34Uh6jaakPHNGGgkBG9ZOdRHXeRQ/23FxC7nlJj5TYk
lcNiWJic8u6+5qjWsf5E/hYcNMaOZYfIklQHG/35BqwkrO8HVFyvtXxgXR6vdshX
e2oQfpx9fAyUTG8OuZINGeeRimdfhHZPw7WaMmyW/4nsLIToI8DAtKY0UuVZUjJs
iENRMPQXAhLT9GI96nRbCxwnrVHzGj+u
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:51:59 2026 by rpki-client