This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File:                     1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier:          TOCiyH0yPwDd+gwH7iZLAtQq2oRRjLtM39sxHNCE3BM=
Subject key identifier:   C6:62:1D:A1:CE:FB:B8:0E:74:E2:8D:E4:53:C7:F3:AF:D5:6B:CB:82
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       03BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number:          03AD
Signing time:             Sat 24 Jan 2026 23:55:03 +0000
Manifest this update:     Sat 24 Jan 2026 23:55:03 +0000
Manifest next update:     Sat 31 Jan 2026 23:55:03 +0000
Files and hashes:         1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: ds8sVgXoFI2MEXrLJ7jsHFkxOGb7x72uPz2jTAmhb4M=)
                          2: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: RiHqUd66nfKg9bYuuoXV02nBPSlEq4ADYP42Ecnza24=)
                          3: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: fbrDSF5x4VvuEIAZikU3PfgDzKLrpZQ/e/7qrjWSoZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: Jan 24 23:55:03 2026 GMT
            Not After : Jan 31 23:55:03 2026 GMT
        Subject: CN=69755bd7-7756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:38:4b:21:66:0f:00:c3:d6:0a:76:15:43:
                    40:1a:87:01:da:c3:3d:38:52:4c:4e:3c:37:d2:50:
                    a9:55:ae:6e:7b:6e:88:a5:a5:fb:23:ba:05:07:64:
                    6c:35:e4:4d:1a:f2:d4:23:35:ec:8c:68:6f:94:78:
                    6b:84:27:52:76:46:a6:c1:6b:ab:e7:35:07:90:7b:
                    c1:7f:f0:38:cb:0a:02:d4:4c:92:9d:56:4f:af:b8:
                    eb:8c:2f:5a:b3:53:e9:f6:53:43:b2:01:3f:61:92:
                    93:3b:c9:eb:30:b9:e2:7c:a4:31:96:8c:c6:e3:f0:
                    ff:e2:d2:99:e6:b2:cd:8d:58:dc:b6:bb:2e:6c:2c:
                    8f:56:35:ae:6d:0b:0f:97:e3:53:50:39:16:7a:36:
                    ec:3c:e0:55:c8:bb:9d:2e:a2:7f:b1:18:44:41:65:
                    d6:de:73:41:9c:ef:14:33:1c:e7:ae:6a:57:bf:d5:
                    00:b5:e1:6b:98:bf:ec:32:58:ec:8e:53:bd:92:df:
                    54:98:32:f4:d5:8c:b3:6c:c8:fb:c5:a7:ea:2b:dd:
                    83:2f:d2:ae:52:5c:40:26:44:04:a8:b6:b0:cc:88:
                    8e:7d:01:e4:fa:c9:c9:6c:96:70:64:da:b9:ed:90:
                    84:e5:7f:e9:45:22:f3:89:51:99:ec:92:e0:89:b1:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:1D:A1:CE:FB:B8:0E:74:E2:8D:E4:53:C7:F3:AF:D5:6B:CB:82
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:9d:83:43:64:09:73:c0:4c:83:b7:0a:bf:51:50:ff:bb:
         4d:8f:d3:b9:6f:2a:f7:e2:0f:7c:6e:c1:83:18:55:02:3d:07:
         c0:6d:6a:6f:d4:2b:73:6f:c3:f1:97:24:ec:90:8b:82:66:a4:
         63:ef:eb:83:66:cd:c2:a5:02:0e:a5:92:ec:70:73:91:b0:b9:
         a9:fc:65:94:44:f6:11:66:5f:e3:31:d2:03:a0:5b:2b:c4:dd:
         d6:fe:23:9f:b0:c7:2d:20:c7:30:e9:cb:90:ef:5f:09:ef:83:
         0a:1b:ec:ca:7e:df:1c:e5:8b:84:4b:b4:89:d6:c7:a7:05:6c:
         8a:f0:26:16:22:47:76:02:f7:83:69:ef:a4:f4:db:84:01:19:
         87:dd:51:bc:ca:d2:98:01:89:1a:7d:2f:9c:cd:19:a3:b4:8a:
         35:71:df:80:eb:0a:54:0c:e9:de:b8:7e:c6:b1:50:3d:86:96:
         2d:13:b8:09:07:54:9c:a1:5a:b5:bf:1e:02:4c:d8:72:55:87:
         9e:1c:fd:b9:48:55:10:fa:69:f6:90:18:2c:dd:a5:71:16:34:
         78:b0:75:8c:42:98:8d:af:d4:2f:89:3b:20:2c:69:ed:a0:a8:
         6f:78:8d:ff:8e:1a:a2:9b:be:c9:b1:c0:1a:c8:6a:c7:53:2a:
         ee:7d:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:10 2026 by rpki-client