This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File:                     1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier:          NzahQd6CYHDZ37OcWRxcPJqo01Fq83UlwwJpjVXv+qs=
Subject key identifier:   65:18:D5:AE:AD:DF:C8:88:C0:58:8E:67:47:8D:A6:18:15:08:E1:F4
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer:       /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number:          0157
Signing time:             Sun 25 Jan 2026 03:25:45 +0000
Manifest this update:     Sun 25 Jan 2026 03:25:44 +0000
Manifest next update:     Sun 01 Feb 2026 03:25:44 +0000
Files and hashes:         1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: AtAR58OrGkloKjUmAwTCV17YNPp50DRzg/JSPq/0zZo=)
                          2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=)
                          3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=)
                          4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
        Validity
            Not Before: Jan 25 03:25:44 2026 GMT
            Not After : Feb  1 03:25:44 2026 GMT
        Subject: CN=69758d39-785a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:1f:f0:1b:8f:72:4b:ff:84:00:f4:f1:5e:
                    38:31:11:21:61:d6:8e:13:57:da:41:11:70:86:2f:
                    02:6f:e9:f4:1b:bb:af:88:13:f4:9a:d9:f0:e8:36:
                    98:42:04:53:57:5b:e1:83:aa:46:68:77:6a:7d:ea:
                    cf:8d:97:ea:6e:cb:f9:6f:ee:40:de:0f:7c:8e:63:
                    db:d3:1f:68:71:49:d8:c6:1c:69:72:ea:34:46:67:
                    f6:24:30:25:f9:62:32:45:26:f7:10:96:1e:9c:1f:
                    f8:9b:40:3c:81:d0:ed:d3:8c:4f:9a:69:18:59:f4:
                    b2:7e:cf:96:f6:4a:3e:57:d2:06:c9:fa:a6:c5:14:
                    d9:a5:ea:df:94:8d:b3:42:3a:15:1c:c8:df:b1:3b:
                    8d:30:d1:5f:45:fe:71:0f:30:50:cf:5a:57:cd:3b:
                    60:c6:ab:4f:b1:7a:0a:34:d7:17:07:a2:fb:4e:92:
                    b0:33:4a:46:8d:09:4e:37:c0:14:75:4b:a4:26:8d:
                    95:c2:68:7b:b5:49:8a:1e:e9:b9:84:d6:32:de:49:
                    e6:42:8f:68:41:2e:8e:3e:35:97:a6:4b:1a:f4:9f:
                    82:58:b2:5b:9c:4f:1e:2e:aa:1d:aa:41:10:20:8e:
                    17:75:ff:af:78:2f:3b:b0:26:42:2d:54:81:36:dd:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:18:D5:AE:AD:DF:C8:88:C0:58:8E:67:47:8D:A6:18:15:08:E1:F4
            X509v3 Authority Key Identifier:
                keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:73:81:b1:c5:c2:dc:ff:fa:84:29:b1:df:51:21:57:e8:
         50:35:1a:80:47:a8:ed:41:d5:f0:f5:ea:93:a1:80:6a:97:d5:
         6a:1d:74:ff:57:94:bb:88:82:b8:c6:be:20:b9:7f:80:34:31:
         7b:c5:0a:e1:ca:7b:0f:b5:e6:d6:99:d8:79:c7:6d:39:2a:d4:
         48:ba:f3:0b:52:94:56:78:ff:1c:03:8a:7a:4e:e0:51:e2:b1:
         01:cc:77:90:ea:38:be:ad:cd:a2:f7:b4:fb:fb:10:ed:94:7f:
         a7:4a:2e:3e:6b:a9:80:8f:a0:ba:7b:c2:ca:37:5e:e6:7b:4d:
         e6:52:26:17:63:d9:f1:33:b7:7f:11:43:ba:50:83:f8:8e:a0:
         58:05:10:26:2f:44:9e:f7:78:c2:cf:9f:58:a5:d1:4c:cb:46:
         5e:32:4f:14:1b:61:a7:b4:dc:68:5c:1a:34:8b:6a:a2:9d:35:
         4f:65:7d:3a:70:b1:a1:0e:23:30:5a:59:20:a7:f5:b6:e3:7c:
         18:e2:32:f1:e9:a3:63:59:5b:20:14:6a:9f:d2:1d:f3:f0:40:
         39:59:52:8d:e2:8e:37:f9:53:28:6c:51:c6:1f:7d:80:3f:27:
         84:21:bb:ea:8c:5f:09:13:9a:33:df:30:cc:aa:c0:6e:3e:7d:
         dd:09:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:14:59 2026 by rpki-client