This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File:                     1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier:          OCkO/itS8ne0ymsHDArxN5pQ+vy09+k++H7Zba84+mI=
Subject key identifier:   98:37:F1:3A:95:C0:5A:71:8D:C8:18:3B:31:8C:60:92:77:9D:75:ED
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer:       /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial:       02E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number:          02D8
Signing time:             Sun 25 Jan 2026 00:33:25 +0000
Manifest this update:     Sun 25 Jan 2026 00:33:24 +0000
Manifest next update:     Sun 01 Feb 2026 00:33:24 +0000
Files and hashes:         1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: hQ0DgTLloVf+7jI9Z/nLa5e0TzpG51FycSS41cUji7Q=)
                          2: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=)
                          3: 834FFE88679911EEB8243436C4F9AE02.roa (hash: 2l18e24CMiHud0NJE3O3nns7nMxFpBn60Kr5He67lRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
        Validity
            Not Before: Jan 25 00:33:24 2026 GMT
            Not After : Feb  1 00:33:24 2026 GMT
        Subject: CN=697564d5-2981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:94:fe:53:19:67:26:79:83:25:b6:0a:1a:
                    26:e1:39:be:61:8b:e8:2d:e9:0e:0b:47:91:af:bb:
                    95:e5:7d:b5:33:37:87:18:f2:2e:38:bf:7c:7c:77:
                    a8:0c:8a:54:06:04:f7:2a:f2:21:2b:f2:a6:6f:e7:
                    e8:dd:5c:04:86:3e:f6:52:57:6b:ae:4f:7d:71:06:
                    ba:24:14:ec:c1:b0:ad:d7:8e:ed:8b:3a:46:cc:3b:
                    59:a4:66:34:60:8a:35:d5:28:ff:6b:26:43:69:3b:
                    2d:ea:4b:40:e0:a4:30:1d:86:b0:4f:38:66:64:0d:
                    b7:70:72:c5:2f:b9:a8:42:c3:b0:bc:7f:78:88:0c:
                    a5:3b:3a:64:cf:9c:1f:f8:73:93:46:fd:c3:11:1c:
                    53:5b:16:a0:55:8d:10:20:27:e2:ad:62:03:6d:ff:
                    01:cb:10:0c:af:0c:6d:c3:95:da:a4:3d:73:8f:a9:
                    64:c7:58:a1:53:e4:58:bd:8b:29:6c:e4:fc:91:70:
                    0a:52:d6:82:e5:a5:8a:6c:45:c2:a3:6f:59:33:3b:
                    3d:67:77:3f:80:95:51:eb:d8:97:c3:70:8d:83:9d:
                    a2:21:93:04:05:14:de:80:bb:e6:70:d1:ca:ed:fa:
                    bb:f9:4a:1a:69:15:4f:68:a0:96:ad:69:87:a4:90:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:F1:3A:95:C0:5A:71:8D:C8:18:3B:31:8C:60:92:77:9D:75:ED
            X509v3 Authority Key Identifier:
                keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:d7:8f:3d:16:b2:29:42:2c:ef:b4:ef:6c:c3:c3:e9:cf:
         99:ca:5c:12:1f:be:11:e0:e2:c2:8c:70:5c:2b:b0:24:c0:3a:
         95:bf:49:ba:ff:24:38:94:28:bb:7a:24:1f:29:25:c5:e7:94:
         6e:91:76:1a:f0:d2:0b:38:a8:73:48:59:29:f6:3f:d3:4e:fd:
         17:c9:17:83:13:b7:b8:d4:f2:20:7b:15:d1:4b:65:fb:51:c8:
         8a:c6:ab:f5:10:ee:60:4c:71:19:62:5e:77:8f:f3:5a:de:25:
         65:5b:e6:53:9c:41:97:f8:62:21:2b:99:30:0c:65:9a:e8:49:
         64:53:e2:fa:fa:5a:d2:b3:01:42:52:b5:49:9c:90:ce:28:65:
         50:97:47:a1:c1:e6:8e:ea:9e:d7:ff:97:87:1d:90:37:e6:73:
         3b:5e:85:9d:26:08:52:c1:03:07:69:77:2f:82:33:e1:f6:93:
         da:21:e4:db:3a:af:bd:52:4e:10:9f:a5:91:e7:3d:71:87:8e:
         6c:d8:78:fc:5e:57:f3:52:0d:f6:55:da:82:64:3a:8e:31:50:
         78:49:94:86:43:20:6b:78:27:2a:2d:8e:63:ce:b0:de:8f:be:
         8d:9b:6c:68:d7:07:9f:e3:e3:60:1a:6b:49:5a:1a:6e:91:35:
         05:f5:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:51 2026 by rpki-client