This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
File:                     I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json)
Hash identifier:          ktTLgH1U36zfw4MyYI5/B0PiF+B+RBCTGodj2TuIff0=
Subject key identifier:   63:11:89:29:C3:24:8F:C6:41:D8:07:2E:F6:4E:8C:C7:D2:3B:7D:54
Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15
Certificate issuer:       /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
Manifest number:          0290
Signing time:             Sun 25 Jan 2026 00:41:46 +0000
Manifest this update:     Sun 25 Jan 2026 00:41:46 +0000
Manifest next update:     Sun 01 Feb 2026 00:41:46 +0000
Files and hashes:         1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: i0DCxSS9jvzTjD/lrPR7j0y9hwu3c4itmorXdUxU8As=)
                          2: 623705DA339111ED9249064BC4F9AE02.roa (hash: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615
        Validity
            Not Before: Jan 25 00:41:46 2026 GMT
            Not After : Feb  1 00:41:46 2026 GMT
        Subject: CN=697566ca-4d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:6d:47:c5:b2:3d:f7:21:98:90:eb:01:35:
                    e1:9d:1d:d4:25:04:bf:28:a5:27:f5:af:c6:50:a2:
                    a3:67:b7:d5:7b:89:ad:e8:3d:b5:32:d6:bc:1a:cb:
                    7b:f5:b3:33:a3:33:2b:d6:50:d9:6b:56:b2:3a:fc:
                    0a:7e:74:f5:42:19:2c:ca:28:33:dd:b4:72:d1:2f:
                    c5:e4:e6:40:4b:94:23:d8:e1:e7:10:c5:20:04:03:
                    36:98:47:d7:bd:64:b4:40:0b:b6:59:6e:98:88:f0:
                    f5:da:c9:1c:a3:74:85:95:e6:a6:34:7e:ee:a9:48:
                    44:25:74:af:86:ec:b0:a0:2d:36:dc:87:c3:86:c0:
                    f1:95:a6:a7:28:57:5f:41:29:2e:fa:49:75:6a:57:
                    cb:6a:e6:af:31:26:c5:37:5c:3b:68:e3:43:cd:8c:
                    d9:21:94:1a:28:f0:7c:21:16:a1:e6:7d:38:0b:ce:
                    3a:8d:1e:37:fa:86:54:03:70:85:91:6a:6e:03:79:
                    c3:9f:bb:de:70:25:e9:16:b2:18:fd:2e:cc:9e:1c:
                    52:96:df:ed:03:a3:60:02:ed:7f:a7:47:ed:27:e0:
                    01:1a:b6:c6:fe:7e:12:68:e0:ef:64:48:61:eb:cf:
                    8c:02:f6:2e:06:28:ca:d2:75:05:e0:8f:15:6f:8c:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:11:89:29:C3:24:8F:C6:41:D8:07:2E:F6:4E:8C:C7:D2:3B:7D:54
            X509v3 Authority Key Identifier:
                keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:82:65:2c:d5:8e:ee:26:00:6e:c8:7e:0c:ac:33:d6:6f:
         ba:87:6d:2f:1e:7c:5f:16:48:7b:6a:b3:15:67:ce:a2:bf:2a:
         5b:9b:3a:5d:27:32:13:5a:a6:11:5e:e7:15:04:96:ce:80:71:
         95:05:32:12:21:45:d7:34:fc:b8:ff:27:2c:10:58:dc:d0:a0:
         a1:51:03:b7:e6:bf:78:6a:dc:3d:b2:a2:34:cf:47:0d:55:57:
         2d:4f:3b:bb:34:44:cd:09:b6:73:45:7e:dc:5f:84:07:8e:aa:
         94:97:c7:4a:8d:98:49:30:8c:1a:d5:0e:1d:e8:fd:44:2f:f5:
         0e:63:42:c5:f0:bf:e5:39:d5:19:07:1e:89:a7:e2:0a:7b:4f:
         ce:21:3c:96:a4:71:28:c2:fc:d2:e2:72:45:7f:b1:f6:82:f9:
         d1:f0:ea:98:d1:47:8e:4e:34:cb:0f:aa:33:c7:9b:c9:be:1f:
         0b:a4:d5:7c:eb:ae:c8:9f:d2:a8:27:cf:cd:d7:5e:ca:a8:da:
         e3:ac:55:66:54:a4:93:78:1b:93:ce:bd:0d:64:6e:1b:9d:ec:
         b9:a3:1d:cf:43:4c:17:80:bf:fc:67:09:cf:25:d9:c2:85:06:
         3f:68:3c:da:90:5f:51:b3:1d:38:8d:43:be:e2:76:b7:91:c1:
         db:3e:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:44 2026 by rpki-client