This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
File:                     2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json)
Hash identifier:          dr8y4d/3wW6kqnsOQVa4JQE8lvcPn+UWy0FZzNHoxwI=
Subject key identifier:   46:68:E8:18:F9:76:CD:BA:53:A2:81:E8:51:2B:6A:B8:96:E4:1C:2E
Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17
Certificate issuer:       /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
Manifest number:          021E
Signing time:             Sun 25 Jan 2026 01:48:23 +0000
Manifest this update:     Sun 25 Jan 2026 01:48:22 +0000
Manifest next update:     Sun 01 Feb 2026 01:48:22 +0000
Files and hashes:         1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: 3a8ezlMe6BaVQGdMr1ZKyk+4r2StMAS5bs758aMU/Gc=)
                          2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: FLWPyCCdfmecVu0JHu1esGWqwLx8eepgbZ0pVH/wRzU=)
                          3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717
        Validity
            Not Before: Jan 25 01:48:22 2026 GMT
            Not After : Feb  1 01:48:22 2026 GMT
        Subject: CN=69757667-e1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:62:38:71:c9:38:fa:b6:4a:46:90:d3:71:
                    bb:e5:49:b1:44:fc:13:1c:8c:c7:1c:47:d7:2d:10:
                    94:2d:86:1c:56:bd:7c:dd:bb:d9:37:ab:59:b2:e5:
                    86:04:c2:ad:9e:5c:58:13:f9:e9:fa:a6:b2:b1:f1:
                    b0:24:90:86:f9:e3:51:64:4e:94:b6:a7:50:85:a5:
                    89:49:51:7b:92:68:0e:ba:99:c7:30:64:24:38:c2:
                    6f:47:f1:c5:54:45:fa:86:93:01:5f:91:43:35:20:
                    66:9f:35:da:5a:e8:13:c0:58:7b:81:6d:53:09:12:
                    dd:4a:18:f9:4b:87:ef:91:90:17:fd:6e:f8:64:c9:
                    f2:7c:b1:6f:5b:ec:e0:7b:02:18:a4:bb:8b:03:ef:
                    ae:5f:b3:fd:0f:35:7c:f3:53:4b:2d:36:a7:98:d0:
                    f9:49:8e:5c:4b:b3:8e:12:d0:22:91:db:3c:7b:54:
                    e0:33:2f:45:c6:88:66:16:c0:cf:03:0a:8d:b0:a5:
                    61:8f:f2:9e:cd:0e:ca:e5:35:8f:57:36:c9:c9:0e:
                    64:b0:da:53:b0:f2:73:72:d9:2a:35:b6:7d:e5:9e:
                    a6:7d:4a:94:02:95:ba:65:2f:eb:77:85:17:04:0e:
                    48:f4:c7:a7:82:c8:32:b7:64:26:3a:cd:7d:f0:98:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:E8:18:F9:76:CD:BA:53:A2:81:E8:51:2B:6A:B8:96:E4:1C:2E
            X509v3 Authority Key Identifier:
                keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:83:b3:30:52:bc:c9:28:34:5c:e7:4a:6c:e5:3e:94:3a:fc:
         23:06:09:93:c3:1b:7c:f4:f3:b3:af:4a:6a:45:62:77:20:5e:
         43:31:d7:24:da:bc:78:9c:48:a8:94:0a:2b:65:18:d6:5f:e4:
         33:e4:04:df:4b:dd:48:1b:ad:08:d6:e4:97:c8:59:63:e8:d6:
         40:9a:82:49:0e:ba:9a:1d:63:50:a0:fe:9c:d6:24:c8:e3:8e:
         df:e3:e8:5d:70:d7:28:c8:91:27:27:a9:3e:08:22:e6:b5:62:
         9f:45:97:cf:00:a9:39:d2:8c:e9:a4:87:5a:78:c5:75:6a:2b:
         8d:01:0f:e5:be:cb:a4:65:34:ba:e9:25:d0:3c:fb:ca:21:7f:
         f6:10:b4:66:39:b6:ae:cb:da:06:ac:15:22:a5:51:b8:2b:98:
         2f:37:35:c0:eb:35:13:5b:67:6f:5f:6d:7c:9c:b9:ce:96:16:
         c4:95:64:30:0a:7d:35:66:7f:bb:6d:6c:e9:aa:9f:28:ad:55:
         09:18:30:9c:a6:14:3c:27:7b:4e:96:e3:c2:ee:1c:5a:0d:74:
         9e:bc:2f:18:99:a8:60:9d:83:d1:dd:30:fa:65:10:07:08:8a:
         8b:1d:fd:35:02:b3:1f:32:6c:06:3b:dc:ff:b3:db:d2:64:2e:
         c1:11:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:27 2026 by rpki-client