This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File:                     rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier:          3xJnYDfGFpY+55PtVa3OmvALlaHUQF4tO5JLXnAYqVg=
Subject key identifier:   29:C2:E8:64:9F:3B:F7:8E:24:08:BA:73:AF:08:F2:09:45:2D:79:5E
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0FBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number:          0E90
Signing time:             Sat 24 Jan 2026 17:34:43 +0000
Manifest this update:     Sat 24 Jan 2026 17:34:42 +0000
Manifest next update:     Sat 31 Jan 2026 17:34:42 +0000
Files and hashes:         1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: CPaN2mzRKBQekedhg3DmK5aV9yCrqyK/qjcJjx8OJEA=)
                          2: 7FBDDAE21A9411F087D4BC86C4F9AE02.roa (hash: 3e6T+e56P3yZLpZEQJ+8+XltOfhjEgjXSYSRgIyRZj0=)
                          3: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: /vXiQXlJ2XjoaoqlCYxK4Jmfq/xVFyS/orb3vso2mww=)
                          4: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: fMG+PzW0yar5maIbdzwq2bdYL1ZAqNkCL+FMZMn/3R4=)
                          5: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: OEn5E6mEmhX4OZk0ZQ6Gl1vTVics3LVEMP8WB/IMAEw=)
                          6: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: MtN/5UD4n04GgYQzy8DDCpmdaYSCAnDY7j9/j7wOUUE=)
                          7: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: P9DAsKO6A9xN7wtYkmYU6qosOiDe3MiHXp+U7yhWeEY=)
                          8: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: okBZC1FdQJKm7JIbAANvRrNSlETwEY25fkeRFAiYnoU=)
                          9: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: X8cLryL8cCVRW6phD4XuEIyt0oQsm107TzCq0gEIjcY=)
                          10: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: 7AT1xkUpvaaOJjN8+ZzXz78spS2r8taLdHpzNRyBWLs=)
                          11: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: 93/PTJ5AHY8pVPl8/LIZmIH9xno76Y0yNvmcI/u0FgY=)
                          12: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: X1Um842R0rkbnkvtW5i4dXhagyn7Joy7SgVxIJHdrnM=)
                          13: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: qzofNUlRYnUmE3DAbm+DwF+S6nTkElm21Xng43rE3AE=)
                          14: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: rvZwb3PuQKmb69c1ytlb4kiN4S41D1CerZhXmc5sn9M=)
                          15: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: NHP7YmzXvbtiTmaemnIKXJJ4ezTLaSJNHiaTdh9Q74U=)
                          16: 54AB633219D211F09C581262C4F9AE02.roa (hash: tHtlJJFncjw0dDXdFLyjtwDoS7Se78F4Ke14ju9EWwI=)
                          17: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: epZFB4O976E2LmMl4xHE4lDCk+Z1aRdiNSOYdb9klMs=)
                          18: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: QLP1XvgVOdbsLfAXwYsdB0DquTkn3IvYBCeZ1bO46Ik=)
                          19: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: 2BIS7a6CnI7DPzP+DBSyU3VDfhBjgvCHYG2uMZJkeUE=)
                          20: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: byPMgbXff457sUSfXnlAKoKIrmpdSVkZ07eO7y9x0lY=)
                          21: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: oIvGS32OAwWMUQVITo8ubnRRsUCN+2zAVjIY8XmIy8E=)
                          22: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: y8CWNkrcoUrfeqLAqFTkkR75Voyg8C7E+lhs1ByBKGE=)
                          23: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: Vz/yZ3uJknXVV4RRR0VGJRxhZubCyof4N6AcFnaH7rc=)
                          24: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: RuWbEFgbtd70I2c9Uzx4/sHKDKZz2p/0Nraa5B51QH0=)
                          25: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: b7nWTvwMcF+hjF4Bbfy/r9EubUG9gSmXulrB9jKm7d0=)
                          26: 598351E2476011F097E14360C4F9AE02.roa (hash: SyGF3+GbDuziHMdUfpUp60VEmm1p65tBbfh1DU0atYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4029 (0xfbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Jan 24 17:34:42 2026 GMT
            Not After : Jan 31 17:34:42 2026 GMT
        Subject: CN=697502b3-4a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d0:cd:9b:30:fa:d8:3a:4d:54:ed:ac:e2:f2:
                    f5:46:5b:12:64:e5:ae:45:a0:c2:44:9e:db:b7:cb:
                    af:5b:c9:7c:6b:04:ea:88:0c:2b:b8:e0:73:85:97:
                    e7:7d:33:90:18:10:19:61:c3:66:93:12:e3:4b:02:
                    78:8d:33:00:11:f2:72:0f:76:8d:ff:5e:1e:2f:f5:
                    79:ce:24:f5:0b:14:67:f4:9e:7a:84:1d:4a:27:6e:
                    de:9d:6a:4e:ea:f6:76:e4:c3:f1:9f:44:a1:3a:5f:
                    86:94:af:ab:19:61:f5:55:78:4a:75:5f:20:b8:a1:
                    1b:8e:9e:3b:5e:70:bc:a9:36:9a:50:da:fa:d4:50:
                    40:a9:e6:86:94:f9:db:18:8b:ca:cb:60:ac:1c:c3:
                    21:4d:c0:f6:b6:c6:05:1d:37:66:e7:6e:a6:64:1c:
                    ca:93:6d:ec:83:6c:77:a2:25:4c:81:d3:8c:da:15:
                    f1:61:d5:c0:29:4a:67:ad:50:e7:ae:9b:5d:52:52:
                    f0:81:71:f6:0d:fa:7e:6d:a7:50:c3:8e:80:04:95:
                    34:84:e0:af:2f:58:ea:60:8c:a5:e7:81:c5:7e:4a:
                    61:e9:7a:7f:b4:62:87:72:e4:cd:72:36:be:b2:a1:
                    d6:a1:cb:eb:e9:2f:8a:53:86:b4:47:00:e8:dd:76:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C2:E8:64:9F:3B:F7:8E:24:08:BA:73:AF:08:F2:09:45:2D:79:5E
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:af:c6:ec:91:c3:92:74:64:24:18:30:94:ed:a4:b4:09:
         3f:c7:bc:6c:67:48:79:3b:b8:d1:5e:20:da:66:fe:90:9e:a5:
         42:58:1a:c4:66:ad:18:95:f5:04:8c:1f:70:9a:c3:ab:38:ef:
         19:8c:1c:b5:67:ef:f0:c5:e4:e3:73:58:fb:63:9d:8e:0b:f6:
         0f:94:29:34:3a:c1:ae:a1:26:7f:e9:53:71:ed:e3:b8:3d:11:
         8a:13:6a:99:2d:85:7f:6d:0a:44:d4:96:c1:6e:08:f6:4a:66:
         bc:df:52:b3:de:65:21:9f:27:0b:d6:21:f2:f8:f8:f0:86:1c:
         f6:c4:2b:88:fa:39:08:20:2f:c6:91:b1:8d:25:98:33:78:b5:
         61:fe:eb:71:f5:1d:ab:81:84:ff:d4:1b:77:40:aa:d5:62:5a:
         1d:48:56:ab:bf:1d:4f:f9:de:76:b0:b9:1c:80:b6:d1:3f:87:
         24:99:46:08:41:28:f9:30:84:b5:4b:16:49:4f:14:07:d0:99:
         5e:49:e2:c2:d7:5e:c8:9d:91:e6:33:e3:db:97:66:6c:61:11:
         06:79:10:0e:c9:26:d3:57:36:59:9d:96:25:b3:70:6c:b8:54:
         12:88:e1:92:6f:c9:98:42:79:10:71:52:81:10:58:64:9c:26:
         1b:3f:3f:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB
RDNBRUZFQzgwHhcNMjYwMTI0MTczNDQyWhcNMjYwMTMxMTczNDQyWjAYMRYwFAYD
VQQDDA02OTc1MDJiMy00YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+9DNmzD62DpNVO2s4vL1RlsSZOWuRaDCRJ7bt8uvW8l8awTqiAwruOBzhZfn
fTOQGBAZYcNmkxLjSwJ4jTMAEfJyD3aN/14eL/V5ziT1CxRn9J56hB1KJ27enWpO
6vZ25MPxn0ShOl+GlK+rGWH1VXhKdV8guKEbjp47XnC8qTaaUNr61FBAqeaGlPnb
GIvKy2CsHMMhTcD2tsYFHTdm526mZBzKk23sg2x3oiVMgdOM2hXxYdXAKUpnrVDn
rptdUlLwgXH2Dfp+badQw46ABJU0hOCvL1jqYIyl54HFfkph6Xp/tGKHcuTNcja+
sqHWocvr6S+KU4a0RwDo3XYdxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnC6GSf
O/eOJAi6c68I8glFLXleMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkZBMC8xRDY2RDQ4NkQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZm
TzNOMm9KUGJFZHV0T3Vfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPqq/G7JHDknRkJBgwlO2ktAk/x7xsZ0h5O7jRXiDaZv6QnqVCWBrE
Zq0YlfUEjB9wmsOrOO8ZjBy1Z+/wxeTjc1j7Y52OC/YPlCk0OsGuoSZ/6VNx7eO4
PRGKE2qZLYV/bQpE1JbBbgj2Sma831Kz3mUhnycL1iHy+Pjwhhz2xCuI+jkIIC/G
kbGNJZgzeLVh/utx9R2rgYT/1Bt3QKrVYlodSFarvx1P+d52sLkcgLbRP4ckmUYI
QSj5MIS1SxZJTxQH0JleSeLC117InZHmM+Pbl2ZsYREGeRAOySbTVzZZnZYls3Bs
uFQSiOGSb8mYQnkQcVKBEFhknCYbPz/k
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:42 2026 by rpki-client