This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
File:                     1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json)
Hash identifier:          rYtzI9MYwkZ5x//9wBYzadnuXlRfOWB2vNXcL4iN2iM=
Subject key identifier:   57:4E:CE:5B:B9:06:1D:25:4D:EC:9A:2D:A7:08:28:48:DB:09:6C:A8
Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
Certificate issuer:       /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
Manifest number:          0200
Signing time:             Sun 25 Jan 2026 02:03:04 +0000
Manifest this update:     Sun 25 Jan 2026 02:03:04 +0000
Manifest next update:     Sun 01 Feb 2026 02:03:04 +0000
Files and hashes:         1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: cb8ZPi5RMWFIrR08Ucbg9GsWmCgR5tCBzDRT0likxC4=)
                          2: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=)
                          3: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
                          rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
        Validity
            Not Before: Jan 25 02:03:04 2026 GMT
            Not After : Feb  1 02:03:04 2026 GMT
        Subject: CN=697579d8-0ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:36:1f:a9:70:54:7a:86:c8:0b:ed:58:7e:
                    5c:8b:fc:76:22:2f:48:fd:95:73:39:2b:21:bb:6c:
                    2a:4d:95:90:9d:1e:8c:14:db:6e:27:a0:da:67:79:
                    b2:25:a3:9d:51:c5:c3:3c:b8:9a:c7:bd:bd:f1:db:
                    4d:82:cb:5b:3f:7a:92:13:c7:65:48:e6:de:55:e9:
                    c7:f0:04:50:08:4a:a0:41:7b:43:da:76:38:9f:33:
                    b2:f1:8e:ab:c7:1b:cd:bf:3e:7b:8c:92:a7:d8:b0:
                    70:d1:50:42:47:62:18:3b:a7:c3:a7:bd:45:6b:96:
                    5d:cf:8a:a1:be:89:31:c2:91:51:8f:ee:f2:ba:f7:
                    51:57:8f:af:6d:e2:35:ca:30:19:f5:83:31:44:17:
                    74:e2:5a:7e:f4:dc:f7:8d:13:73:72:77:52:cb:67:
                    4e:50:e3:ac:6a:e2:cd:cd:0c:d4:9f:aa:70:39:3d:
                    c4:a0:2c:80:d6:6a:6a:99:47:9c:7a:b0:ab:2c:f3:
                    17:52:a1:43:ee:42:4f:d8:2f:26:e9:37:3c:d7:23:
                    2d:8e:a4:60:c5:61:05:5f:ed:a6:93:55:18:87:c1:
                    9b:94:ed:b6:44:30:2b:de:65:b8:96:b1:83:73:4c:
                    6c:2b:01:9b:c4:81:ff:e8:4d:68:19:e9:62:97:72:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:CE:5B:B9:06:1D:25:4D:EC:9A:2D:A7:08:28:48:DB:09:6C:A8
            X509v3 Authority Key Identifier:
                keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:66:34:0c:49:07:ce:a2:49:ee:56:b4:20:5a:f2:e7:49:ae:
         b2:4c:8a:85:67:6f:17:ab:cb:75:fa:6e:c5:71:39:2f:f6:76:
         2b:95:c4:a6:6d:74:c9:b2:83:5e:63:92:f7:e3:e1:61:2c:47:
         a4:80:28:eb:27:eb:4d:89:ec:d7:b5:27:81:19:1e:9f:e6:1f:
         bc:1d:3f:b7:6e:60:89:d9:e3:f2:3f:33:5c:17:c7:dc:59:c3:
         7e:97:37:3c:23:df:23:59:2b:79:d1:81:ff:81:9f:82:07:74:
         39:51:85:50:da:4c:d2:7a:48:ad:5f:b8:f4:95:b5:08:2c:c7:
         91:37:46:90:58:d9:24:e3:3c:21:da:c2:d2:2e:96:2f:ce:4b:
         c5:8f:52:66:de:25:33:fa:ea:9a:97:50:23:f0:c6:fb:81:fd:
         1a:60:0c:c9:45:3b:46:f0:93:ba:ec:98:01:eb:1a:37:6f:20:
         11:e2:75:5f:22:4b:cb:ad:ba:14:2c:96:8f:e9:af:c2:e5:e4:
         11:aa:4d:1d:16:4b:dc:e0:f7:a0:0f:e9:93:c1:a3:5f:fc:a2:
         c2:9b:c8:2e:6c:f6:27:ef:2a:be:7e:e2:e8:87:32:cd:0b:0a:
         f3:3d:cb:a8:a8:3d:2c:45:aa:13:e2:3a:88:d5:ac:62:43:7f:
         03:92:0a:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF
RkE4RDQyRjYwHhcNMjYwMTI1MDIwMzA0WhcNMjYwMjAxMDIwMzA0WjAYMRYwFAYD
VQQDDA02OTc1NzlkOC0wZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7hI2H6lwVHqGyAvtWH5ci/x2Ii9I/ZVzOSshu2wqTZWQnR6MFNtuJ6DaZ3my
JaOdUcXDPLiax7298dtNgstbP3qSE8dlSObeVenH8ARQCEqgQXtD2nY4nzOy8Y6r
xxvNvz57jJKn2LBw0VBCR2IYO6fDp71Fa5Zdz4qhvokxwpFRj+7yuvdRV4+vbeI1
yjAZ9YMxRBd04lp+9Nz3jRNzcndSy2dOUOOsauLNzQzUn6pwOT3EoCyA1mpqmUec
erCrLPMXUqFD7kJP2C8m6Tc81yMtjqRgxWEFX+2mk1UYh8GblO22RDAr3mW4lrGD
c0xsKwGbxIH/6E1oGelil3LvJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdOzlu5
Bh0lTeyaLacIKEjbCWyoMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx
NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN
a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaZjQMSQfOoknuVrQgWvLnSa6yTIqFZ28Xq8t1+m7FcTkv9nYrlcSm
bXTJsoNeY5L34+FhLEekgCjrJ+tNiezXtSeBGR6f5h+8HT+3bmCJ2ePyPzNcF8fc
WcN+lzc8I98jWSt50YH/gZ+CB3Q5UYVQ2kzSekitX7j0lbUILMeRN0aQWNkk4zwh
2sLSLpYvzkvFj1Jm3iUz+uqal1Aj8Mb7gf0aYAzJRTtG8JO67JgB6xo3byAR4nVf
IkvLrboULJaP6a/C5eQRqk0dFkvc4PegD+mTwaNf/KLCm8gubPYn7yq+fuLohzLN
CwrzPcuoqD0sRaoT4jqI1axiQ38Dkgrb
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:25 2026 by rpki-client