This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
File:                     S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json)
Hash identifier:          BVgxN/aQz8hF0ypT5fn20PkqR6ZEtIJu6H4/44BppjI=
Subject key identifier:   E8:57:5A:74:08:60:21:F1:35:AF:42:86:53:9E:E8:47:54:99:68:F9
Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B
Certificate issuer:       /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B
Certificate serial:       3508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
Manifest number:          3504
Signing time:             Sat 24 Jan 2026 14:46:55 +0000
Manifest this update:     Sat 24 Jan 2026 14:46:55 +0000
Manifest next update:     Sat 31 Jan 2026 14:46:55 +0000
Files and hashes:         1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: bS5VhdSn8L1GtZgt/BDAgzcuSfb0DBmJgc+uLrx6UFY=)
                          2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: uYLMGw9sW3ELIcDhRnQRJfyQtQgARFpcNwfnYXrY5Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl
                          rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13576 (0x3508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B
        Validity
            Not Before: Jan 24 14:46:55 2026 GMT
            Not After : Jan 31 14:46:55 2026 GMT
        Subject: CN=6974db5f-abd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:a7:29:32:47:7c:f8:8e:d1:02:3a:14:49:
                    8c:a4:5f:f6:0c:86:3a:15:54:e4:48:2f:74:e7:5d:
                    e4:bb:33:bf:10:be:00:3e:f4:27:03:21:1a:55:3b:
                    4a:15:ee:03:17:ea:44:f9:f3:b5:44:b2:b7:ad:4a:
                    ae:7d:73:0e:e3:fb:22:e2:a6:0a:27:31:aa:a3:78:
                    11:02:02:32:e6:06:d7:0e:42:d8:96:19:3c:de:47:
                    aa:f0:db:be:be:94:93:b9:a9:54:b0:cd:ff:7d:e9:
                    1f:fe:b9:15:a4:9e:e1:27:a7:ab:6b:16:66:2a:da:
                    8e:38:5a:45:f8:58:92:b0:d8:33:c1:dc:07:78:74:
                    ca:25:dd:66:7f:45:22:60:c7:68:02:80:04:fc:c1:
                    b3:89:c0:ea:07:8e:e2:c4:2b:4d:05:cd:65:9e:ba:
                    6e:9f:e9:df:05:07:69:8c:8e:6f:44:08:7d:7b:93:
                    ed:b4:94:97:61:23:1c:e4:12:fd:cb:1f:89:60:71:
                    d2:5b:b3:5d:64:d9:2c:d3:2d:19:b3:3d:aa:4b:f0:
                    22:1e:94:81:bf:00:e1:07:9a:ee:cf:6a:9b:43:c1:
                    0d:e5:eb:98:ae:21:c4:1d:9f:3b:08:86:35:fa:fe:
                    1b:cd:32:9e:4b:87:7a:e7:ce:e5:9e:c3:15:79:28:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:57:5A:74:08:60:21:F1:35:AF:42:86:53:9E:E8:47:54:99:68:F9
            X509v3 Authority Key Identifier:
                keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:f9:bb:d2:6a:d2:9e:2f:d1:84:a3:4e:68:a8:5f:d9:f6:
         3d:19:09:e8:59:e6:73:60:b3:0f:27:d1:dc:a2:b7:bf:af:b4:
         70:41:6e:be:80:31:43:83:13:72:51:eb:25:4d:05:35:0c:a1:
         8c:2f:b3:a2:e7:17:c9:9c:a4:8e:1b:a6:dd:65:64:e6:7b:68:
         42:9c:0e:63:8f:2a:a2:a4:ab:31:a6:5a:9d:b3:c6:eb:f9:20:
         d7:a4:7b:d7:79:c9:1c:10:64:23:85:81:e3:d1:b3:0c:31:b6:
         e3:b4:e5:75:51:7e:c6:66:8d:05:fe:a4:6d:e1:a0:bf:70:31:
         b9:90:02:0d:4f:96:ed:71:bd:da:f4:32:cf:e8:eb:ae:a5:3d:
         28:9d:0b:19:9f:83:8e:7d:97:eb:74:c1:9a:54:e5:4f:f7:01:
         73:a6:ec:9d:59:b9:5a:f0:5a:41:53:50:72:dc:39:9c:35:48:
         62:53:2e:61:f8:d3:e4:11:48:46:48:71:f4:40:03:26:42:7e:
         cc:54:f1:6c:7d:53:a9:71:67:d0:10:24:4b:7b:62:c4:39:c4:
         5f:4f:9a:03:ef:2b:1b:90:2c:ee:79:31:51:2b:1b:d3:d6:c9:
         4c:40:e9:2f:6d:f9:b1:24:63:7f:0e:c1:ca:9e:0c:25:8f:3f:
         4d:34:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:43 2026 by rpki-client