This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
File:                     I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json)
Hash identifier:          3XKIMM4ThUJc2wXUz5ZSU/p/ZNBexb0P/JZFnijIsZo=
Subject key identifier:   83:59:7D:38:E0:3B:8F:8C:F2:61:16:9F:D1:11:48:B3:38:3E:43:A2
Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F
Certificate issuer:       /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
Manifest number:          025F
Signing time:             Sun 25 Jan 2026 01:03:33 +0000
Manifest this update:     Sun 25 Jan 2026 01:03:33 +0000
Manifest next update:     Sun 01 Feb 2026 01:03:33 +0000
Files and hashes:         1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: nQL6rw+91Zi6AonqJRBJA8j9N9OqvTDZ6GiPRfgDI9k=)
                          2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: DfdDuBAOhzfGJeqTBOgnaBsJwUNyC8g3yFMfzcPqJWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F
        Validity
            Not Before: Jan 25 01:03:33 2026 GMT
            Not After : Feb  1 01:03:33 2026 GMT
        Subject: CN=69756be5-7f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:44:01:a4:07:f0:ae:d4:47:60:f0:e4:4b:
                    ef:8a:3b:ca:a2:d6:e0:ee:d1:94:58:48:78:4e:cb:
                    f1:e1:b2:4b:e0:33:8e:4e:c9:57:67:42:a4:a1:98:
                    53:64:67:b1:bd:63:e8:2c:bc:8f:01:dd:a2:92:96:
                    5e:4b:62:8e:34:1f:b3:90:2d:52:ef:aa:aa:72:57:
                    86:ef:c6:26:16:1c:b8:51:f8:00:b9:a7:f5:1c:e9:
                    1a:ab:fa:03:9b:9e:d3:ee:3c:98:ff:ad:c3:ee:c5:
                    84:00:28:d9:2c:58:51:8a:55:b2:5e:af:54:b6:2b:
                    b4:32:43:4a:44:fa:f1:1c:34:d6:9d:6e:8e:b4:e3:
                    2a:67:fe:11:de:9b:0c:0d:15:0c:0b:2f:8e:04:b3:
                    41:eb:63:f6:cb:29:cf:92:1d:26:d7:c6:b5:a5:66:
                    47:6e:5c:73:40:b5:4b:13:99:bb:5d:52:50:bd:67:
                    e9:5e:7b:90:7d:56:ec:62:29:2d:9d:da:ef:8e:db:
                    26:78:e2:08:37:01:c1:48:3d:c6:13:db:28:ba:b2:
                    21:96:d5:ab:73:1b:10:7f:94:1f:9d:a0:f9:2d:ac:
                    e7:2e:50:d9:64:bd:4c:c3:e1:26:36:9d:5f:a0:ec:
                    98:1d:16:71:6c:2e:4b:70:78:58:9f:48:e3:62:3f:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:7D:38:E0:3B:8F:8C:F2:61:16:9F:D1:11:48:B3:38:3E:43:A2
            X509v3 Authority Key Identifier:
                keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c1:a7:54:b5:66:b8:39:fa:41:f3:28:87:e6:fc:9a:2d:0f:
         fa:b9:a2:58:8d:cc:76:50:30:f1:86:8b:cc:bd:4f:d7:ea:20:
         22:e9:5b:73:a7:a0:70:98:0b:60:e4:2f:29:93:c5:1b:da:72:
         05:cb:04:31:1f:e4:c6:43:c3:18:07:e7:7b:84:d5:34:f4:1f:
         52:ec:ba:73:7d:20:d0:b0:1c:8f:2a:35:6c:1f:4a:e3:09:12:
         18:ea:09:c3:51:25:5b:48:36:b4:1e:f0:64:b8:ee:60:58:33:
         36:af:43:73:f3:c5:d3:76:75:ef:c0:5a:3c:79:49:ec:9d:d9:
         b8:6c:ad:6e:cd:d4:a9:06:45:3d:82:8f:67:23:a1:ec:03:30:
         40:ba:25:6b:ce:1c:5f:0a:13:a4:5d:5a:ef:bf:26:ce:6a:6a:
         0c:b5:ea:57:71:1c:2a:37:30:da:b3:37:e2:45:5a:1e:cc:49:
         7e:93:4c:cd:09:a0:b4:17:67:10:f0:e9:73:f8:b3:44:57:01:
         75:f3:91:c2:7c:a1:9e:ac:2b:97:78:04:48:80:e8:bf:47:a6:
         31:b2:df:0e:fa:10:80:a2:e5:b2:8e:90:15:38:5a:44:d0:eb:
         aa:b0:f2:71:08:21:60:96:c8:d5:d1:ee:c8:52:b9:3a:a5:0d:
         d2:9c:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:31 2026 by rpki-client