This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File:                     jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier:          r6aNeRq1cgEDDABg5+WgGysnrqMww9OkvNp/ariyc/Q=
Subject key identifier:   16:A8:12:76:86:CA:BC:89:C9:CD:1E:EA:65:D6:F7:83:18:0A:9E:68
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer:       /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number:          3C
Signing time:             Fri 23 Jan 2026 06:29:28 +0000
Manifest this update:     Fri 23 Jan 2026 06:29:27 +0000
Manifest next update:     Fri 30 Jan 2026 06:29:27 +0000
Files and hashes:         1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: ZLyM8LG0rbqiN4gFH+Ake75h7IrACzPN7FxqB/LsfF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
        Validity
            Not Before: Jan 23 06:29:27 2026 GMT
            Not After : Jan 30 06:29:27 2026 GMT
        Subject: CN=69731548-ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:b6:7e:40:fc:fa:1d:53:f2:4e:c1:21:83:
                    5b:7b:bb:50:00:c5:84:7f:ad:cc:99:dc:49:a6:32:
                    a9:5a:61:19:82:69:ce:9a:87:4b:cb:4b:35:38:3a:
                    dc:86:88:78:15:1e:9a:76:5a:ad:df:89:c2:1c:25:
                    3e:51:e0:53:57:23:33:0a:c4:28:67:08:03:53:3b:
                    ca:87:bc:80:e5:53:b1:fa:b2:dd:c4:32:64:16:31:
                    55:25:4f:f3:95:71:4e:61:a3:44:af:e2:1e:5d:a2:
                    ec:85:1f:3a:af:d7:42:f6:f3:94:0e:96:49:59:fa:
                    4d:d3:3a:f9:79:f9:10:f5:ba:fe:3a:84:6b:fb:45:
                    df:f7:05:38:a6:45:17:64:12:0d:43:1b:c3:8e:f5:
                    8f:4f:2e:af:f4:c0:e3:3d:28:28:25:2e:6f:d2:c6:
                    4c:a3:b4:83:db:ec:6b:0f:55:d5:02:44:c9:83:b8:
                    05:61:6f:b8:d9:dc:03:97:f4:25:8a:fd:06:97:d2:
                    ec:51:88:94:9a:73:5b:85:96:98:53:68:ca:07:0a:
                    ae:3a:0a:e6:e3:77:1e:d4:3a:9c:04:29:26:c6:a7:
                    35:c1:87:66:d6:d5:bb:18:ee:ca:f2:1e:ff:5c:40:
                    66:f7:c6:17:39:85:47:86:39:b5:cd:d9:cb:eb:a2:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A8:12:76:86:CA:BC:89:C9:CD:1E:EA:65:D6:F7:83:18:0A:9E:68
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:d7:0f:da:a7:14:e4:2d:48:61:a8:2f:ee:ba:38:e8:e6:
         b4:f5:cb:ab:92:ec:56:1c:59:87:76:f5:67:77:d1:6b:9f:02:
         b6:6a:a0:76:e2:88:21:a0:df:a7:ef:7e:10:58:18:0b:49:5e:
         82:78:9f:2e:a9:54:c9:35:b9:e9:00:a5:30:d2:4f:e5:24:69:
         bb:95:cc:26:e0:67:6e:f0:09:8c:19:12:f9:5d:f8:2d:f7:6e:
         58:6d:8c:1f:aa:f2:6a:45:70:24:6e:b1:77:1b:b2:d5:6c:02:
         66:00:fc:22:66:39:dd:17:27:b4:fd:e7:c8:0f:4a:9f:9f:1c:
         8e:f5:5d:4d:fb:27:1c:84:02:a3:fe:d7:58:d1:b9:52:dc:75:
         f9:3f:c6:81:58:cf:3d:f6:da:f0:5d:b0:34:e0:fe:cd:6a:0c:
         5c:44:7b:42:2f:2a:15:16:c1:52:fe:86:d1:ba:50:56:a0:b0:
         a3:71:63:5d:80:ce:b2:eb:18:58:fa:6c:41:15:4a:c9:ed:31:
         4c:32:82:f0:92:2a:38:a0:c5:fa:82:9d:46:35:e6:e0:ac:d5:
         0a:ef:20:a0:7f:9a:37:8a:8d:43:97:9d:57:fe:a1:04:4a:73:
         41:02:1f:c8:db:f9:cd:0c:32:06:78:0e:1f:dd:ae:c1:55:7f:
         d0:ec:2e:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OTRDRDExMC8GA1UEBRMoOEQxQ0Q2NTlFNjFEQjY0OTVCMzZDRTY5QzQ5RjVBODMy
RURCRDU5RDAeFw0yNjAxMjMwNjI5MjdaFw0yNjAxMzAwNjI5MjdaMBgxFjAUBgNV
BAMMDTY5NzMxNTQ4LWViZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7ELZ+QPz6HVPyTsEhg1t7u1AAxYR/rcyZ3EmmMqlaYRmCac6ah0vLSzU4OtyG
iHgVHpp2Wq3ficIcJT5R4FNXIzMKxChnCANTO8qHvIDlU7H6st3EMmQWMVUlT/OV
cU5ho0Sv4h5douyFHzqv10L285QOlklZ+k3TOvl5+RD1uv46hGv7Rd/3BTimRRdk
Eg1DG8OO9Y9PLq/0wOM9KCglLm/SxkyjtIPb7GsPVdUCRMmDuAVhb7jZ3AOX9CWK
/QaX0uxRiJSac1uFlphTaMoHCq46Cubjdx7UOpwEKSbGpzXBh2bW1bsY7sryHv9c
QGb3xhc5hUeGObXN2cvrouq7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFqgSdobK
vInJzR7qZdb3gxgKnmgwHwYDVR0jBBgwFoAUjRzWWeYdtklbNs5pxJ9agy7b1Z0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzM2QUY5NDcyOUVD
ODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGtsYk5zNXB4SjlhZ3k3YjFa
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvalJ6V1dlWWR0a2xiTnM1cHhKOWFneTdiMVowLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
NENELzM2QUY5NDcyOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGts
Yk5zNXB4SjlhZ3k3YjFaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE9Q1w/apxTkLUhhqC/uujjo5rT1y6uS7FYcWYd29Wd30WufArZqoHbi
iCGg36fvfhBYGAtJXoJ4ny6pVMk1uekApTDST+UkabuVzCbgZ27wCYwZEvld+C33
blhtjB+q8mpFcCRusXcbstVsAmYA/CJmOd0XJ7T958gPSp+fHI71XU37JxyEAqP+
11jRuVLcdfk/xoFYzz322vBdsDTg/s1qDFxEe0IvKhUWwVL+htG6UFagsKNxY12A
zrLrGFj6bEEVSsntMUwygvCSKjigxfqCnUY15uCs1QrvIKB/mjeKjUOXnVf+oQRK
c0ECH8jb+c0MMgZ4Dh/drsFVf9DsLgw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:07 2026 by rpki-client