This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File:                     Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier:          bU4te94aOO+ApMikoNkqpJiJseO9kGSyXiJr3yzvZBg=
Subject key identifier:   1D:C3:A9:02:DA:CF:B5:22:86:6A:81:20:FD:A2:6F:1F:AD:CB:E6:7E
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer:       /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial:       03E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number:          03E1
Signing time:             Sat 24 Jan 2026 23:45:09 +0000
Manifest this update:     Sat 24 Jan 2026 23:45:08 +0000
Manifest next update:     Sat 31 Jan 2026 23:45:08 +0000
Files and hashes:         1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: LkFh9oMbvORPhS/yE+c8nmk/DPM90HzViGG6wmzORGI=)
                          2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
        Validity
            Not Before: Jan 24 23:45:08 2026 GMT
            Not After : Jan 31 23:45:08 2026 GMT
        Subject: CN=69755985-32b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:79:cc:ef:b6:5c:76:b8:e0:4c:0a:86:cb:
                    b3:b5:71:75:61:5b:1f:e9:fe:ca:e0:9d:ae:07:37:
                    b4:c3:9d:16:00:c2:e7:0c:45:41:fe:a7:56:88:d9:
                    19:ed:02:5b:9b:df:41:06:e4:3d:77:e8:d2:03:d0:
                    aa:29:ec:2f:e4:63:ec:d0:c2:38:7a:cb:71:73:a3:
                    39:f1:5f:15:c8:37:f9:1c:b0:82:12:27:17:ea:54:
                    75:20:60:05:e5:69:9c:b1:07:fd:e8:cc:63:95:4d:
                    04:86:53:a4:01:a4:41:eb:0c:89:f3:5b:4a:36:b6:
                    fa:bc:a8:8a:a3:52:aa:0d:a2:58:17:6b:f0:cc:c3:
                    92:ad:cb:c8:d5:06:2e:39:2b:41:6b:88:6e:92:da:
                    30:68:05:bd:6f:e3:2d:42:ae:87:70:dc:3d:ed:9b:
                    2f:2c:8e:1c:7b:2b:55:4f:5f:3d:7e:96:6d:7d:04:
                    6b:bb:4d:07:bb:3b:a6:d5:77:e3:2b:fe:d6:a1:ab:
                    f5:95:2c:59:9c:a3:ba:f3:a4:a9:bf:12:a2:f5:13:
                    ca:42:98:50:5f:7e:14:9c:45:7f:e2:e0:5e:f8:a4:
                    36:1f:2d:7b:41:c8:11:d8:87:b6:29:ed:3d:a7:e1:
                    4b:39:8d:db:2b:5c:90:ce:62:ed:d1:0b:01:b7:e7:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C3:A9:02:DA:CF:B5:22:86:6A:81:20:FD:A2:6F:1F:AD:CB:E6:7E
            X509v3 Authority Key Identifier:
                keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:23:50:7d:4e:d4:10:33:69:6a:58:dd:2b:2a:4b:4f:be:90:
         05:f6:53:7f:5f:61:2a:74:a7:7a:df:8c:55:45:bf:04:09:ec:
         d1:8c:67:09:19:1b:9f:a7:33:72:29:92:a0:a4:7b:1a:23:b8:
         c2:e3:1b:65:42:cb:69:67:09:57:81:6d:0a:9d:0a:90:e8:19:
         0c:fe:5d:1e:27:c6:33:d6:6e:53:22:2c:fd:47:11:a9:8f:29:
         00:37:2d:3b:d6:c1:cb:f2:cc:5c:13:20:b6:fe:87:34:e1:39:
         22:96:06:87:bb:30:16:45:be:4e:4d:8f:82:c6:ba:df:c0:78:
         18:5f:b5:7d:de:ac:58:10:af:92:a6:e8:71:fc:10:5a:b7:dd:
         f3:5b:c7:86:55:94:da:c7:ee:3a:d6:14:70:33:89:11:91:ab:
         8b:24:28:18:37:67:0e:29:2b:39:e4:d5:79:38:16:13:92:0f:
         c1:aa:b4:6e:63:d1:ee:64:c0:01:91:b3:0e:c5:90:55:4b:8e:
         85:84:f7:ec:4b:48:97:e2:97:14:ab:e5:9f:8a:cf:18:15:38:
         d3:89:94:1e:e2:f8:c4:5d:3a:72:11:83:f3:1a:50:de:24:de:
         c2:50:ea:b8:2c:ab:1b:e0:2b:bc:3b:e6:63:1f:9d:cb:64:22:
         7f:d5:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:33 2026 by rpki-client