This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File:                     WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier:          eA2c0IlXXAIRAiPme+MaCmmUkrK4TNTN6P1WCpGIrPA=
Subject key identifier:   03:6B:63:19:01:C9:EA:75:9F:67:FD:F9:5A:83:14:9A:0A:7B:31:C2
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number:          01B7
Signing time:             Sun 25 Jan 2026 02:28:11 +0000
Manifest this update:     Sun 25 Jan 2026 02:28:11 +0000
Manifest next update:     Sun 01 Feb 2026 02:28:11 +0000
Files and hashes:         1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: /n11n16RpaZ9qviZKaRZKO/CKrAfa0u+jRRmHLl7tSM=)
                          2: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=)
                          3: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=)
                          4: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=)
                          5: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=)
                          6: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Jan 25 02:28:11 2026 GMT
            Not After : Feb  1 02:28:11 2026 GMT
        Subject: CN=69757fbb-983e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:19:a0:a8:ca:bb:67:a6:7c:53:5b:7d:df:
                    32:d5:58:5a:62:e0:1a:5e:f4:3e:1a:be:12:18:58:
                    cd:de:66:02:8a:70:e7:03:bb:64:c9:00:fc:4f:8c:
                    c0:73:02:8f:9b:13:18:39:25:2f:02:79:b9:13:01:
                    00:b4:64:7a:ef:7e:26:db:c9:96:4d:0e:b4:41:f0:
                    ea:18:3a:9f:8b:70:68:14:a6:dd:ad:7c:43:b1:cd:
                    d2:db:f7:49:01:58:32:b1:da:23:6c:24:b0:cf:e0:
                    a5:6c:f2:9b:98:3a:8c:b2:a2:9a:fd:50:86:49:1f:
                    15:f9:56:6d:a4:af:b4:77:bb:86:87:6e:ef:fc:6b:
                    1a:c9:b2:28:c5:ce:42:39:a1:17:08:29:15:60:4a:
                    98:7e:ec:e0:6c:b3:40:ee:60:ac:c1:d3:8e:fb:e8:
                    e7:da:2b:87:7f:20:c3:86:8c:2d:76:21:e6:f6:80:
                    c8:71:0e:32:ec:2e:05:1d:ea:62:2b:08:06:b9:fe:
                    1a:1a:a0:d5:00:f6:3f:96:6a:1a:f3:e0:17:1c:a9:
                    78:c1:42:72:05:1a:33:6c:46:86:fb:21:cf:4f:64:
                    8f:9a:76:63:48:5b:eb:de:76:d9:3e:e1:7b:72:ec:
                    a7:b0:87:f1:6f:a7:d5:ec:a2:e1:10:91:15:ee:a0:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:63:19:01:C9:EA:75:9F:67:FD:F9:5A:83:14:9A:0A:7B:31:C2
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:04:a5:df:c7:46:7f:a9:ac:6a:f9:c9:81:a2:20:85:1b:
         bd:14:fb:99:12:4f:d5:e6:80:cf:ee:e1:f1:64:16:e4:3c:4a:
         3b:64:ac:25:6b:8f:5f:bc:0c:f6:3d:22:02:22:c2:a7:63:2c:
         a5:30:a5:f5:14:5a:20:f7:2f:8c:d3:be:80:bc:30:43:9c:3a:
         c6:ac:61:76:dc:32:04:9e:d2:1f:09:19:7a:c7:ed:d9:bf:ce:
         33:c7:f3:bd:40:e4:ae:72:67:74:09:62:d4:1d:cd:67:ab:bc:
         39:b5:c5:7e:a6:20:5f:67:ab:c9:70:14:ff:b0:5f:f7:72:d1:
         71:62:b6:f3:4d:6e:7f:21:ce:5c:4c:88:eb:60:79:82:da:25:
         ec:7a:ec:ca:e1:ca:0c:9f:da:4b:6d:18:86:cb:80:0b:2f:d0:
         4b:51:0c:3c:34:a0:68:81:ed:c2:fe:1d:45:38:70:0a:71:31:
         70:72:91:cb:26:76:83:dd:57:12:06:08:7b:97:d9:43:92:16:
         4f:6b:62:82:0b:56:62:8e:3c:94:e6:c0:16:58:76:9d:62:65:
         d0:bc:06:89:58:a0:b2:d6:97:1f:9f:d9:7e:80:91:ad:f2:2f:
         bf:fc:64:d0:f3:49:73:55:93:76:3b:05:ca:ec:2e:06:72:e9:
         4b:73:29:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB
RkU1QUQzQjgwHhcNMjYwMTI1MDIyODExWhcNMjYwMjAxMDIyODExWjAYMRYwFAYD
VQQDDA02OTc1N2ZiYi05ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlboZoKjKu2emfFNbfd8y1VhaYuAaXvQ+Gr4SGFjN3mYCinDnA7tkyQD8T4zA
cwKPmxMYOSUvAnm5EwEAtGR6734m28mWTQ60QfDqGDqfi3BoFKbdrXxDsc3S2/dJ
AVgysdojbCSwz+ClbPKbmDqMsqKa/VCGSR8V+VZtpK+0d7uGh27v/GsaybIoxc5C
OaEXCCkVYEqYfuzgbLNA7mCswdOO++jn2iuHfyDDhowtdiHm9oDIcQ4y7C4FHepi
KwgGuf4aGqDVAPY/lmoa8+AXHKl4wUJyBRozbEaG+yHPT2SPmnZjSFvr3nbZPuF7
cuynsIfxb6fV7KLhEJEV7qCu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANrYxkB
yep1n2f9+VqDFJoKezHCMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy
NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG
ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZ6gSl38dGf6msavnJgaIghRu9FPuZEk/V5oDP7uHxZBbkPEo7ZKwl
a49fvAz2PSICIsKnYyylMKX1FFog9y+M076AvDBDnDrGrGF23DIEntIfCRl6x+3Z
v84zx/O9QOSucmd0CWLUHc1nq7w5tcV+piBfZ6vJcBT/sF/3ctFxYrbzTW5/Ic5c
TIjrYHmC2iXseuzK4coMn9pLbRiGy4ALL9BLUQw8NKBoge3C/h1FOHAKcTFwcpHL
JnaD3VcSBgh7l9lDkhZPa2KCC1ZijjyU5sAWWHadYmXQvAaJWKCy1pcfn9l+gJGt
8i+//GTQ80lzVZN2OwXK7C4GculLcykJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:10 2026 by rpki-client