This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File:                     l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier:          ecKxUJrGTnXmSHPUdxDNVfrCyUL89+W5N3a465495n0=
Subject key identifier:   13:51:4D:7B:E6:97:9A:14:3B:8C:3C:63:21:E3:2C:6C:8C:68:C6:9A
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer:       /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number:          01FD
Signing time:             Sun 25 Jan 2026 01:53:42 +0000
Manifest this update:     Sun 25 Jan 2026 01:53:41 +0000
Manifest next update:     Sun 01 Feb 2026 01:53:41 +0000
Files and hashes:         1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: SNmAN0ePT59aTj6Czrzx+pkTQAZaz67Oh7ne3rMQ/Jc=)
                          2: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ=)
                          3: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
                          rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
        Validity
            Not Before: Jan 25 01:53:41 2026 GMT
            Not After : Feb  1 01:53:41 2026 GMT
        Subject: CN=697577a6-3165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:d2:d1:4c:db:6f:3c:6f:3a:7e:43:6d:f6:
                    c2:ae:81:5b:1c:4b:b6:c0:67:bc:c5:e9:66:e5:3f:
                    ef:90:41:b9:46:97:f0:fe:b3:ac:d9:da:4b:51:30:
                    1d:1c:6e:3d:7d:82:ae:94:7e:5d:a2:a8:97:1d:f0:
                    09:2d:cd:b4:87:c6:b7:f2:f3:8a:3c:ac:01:ad:23:
                    f2:08:0b:53:64:87:5a:83:c9:ad:a2:2c:b5:8b:fb:
                    a2:89:7d:a7:d2:27:5e:17:5b:cf:b6:fb:0d:df:e0:
                    d1:7e:dc:b2:11:72:40:13:a2:e3:cc:c8:32:51:f9:
                    8e:0a:da:63:4f:17:4f:a2:7c:f0:3d:92:9e:6a:c0:
                    bb:2c:bc:7a:2a:84:c7:42:02:71:5a:ab:36:a8:ee:
                    cc:9a:43:7f:93:ed:54:e3:59:90:f4:80:ec:cc:cc:
                    47:ff:93:5b:79:03:48:6b:06:6f:01:94:60:ef:87:
                    ee:bb:df:86:a5:56:42:d9:5d:39:cc:fa:35:cd:91:
                    a0:e9:26:6e:92:87:79:08:13:2d:99:bd:5f:98:d3:
                    14:d6:d3:66:fb:cc:c1:20:43:54:d7:b4:27:da:38:
                    1a:fb:fb:c0:55:7d:e2:51:08:e5:58:d0:48:cc:db:
                    40:2f:f9:89:23:2b:59:64:7d:6b:6d:5b:83:8c:53:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:4D:7B:E6:97:9A:14:3B:8C:3C:63:21:E3:2C:6C:8C:68:C6:9A
            X509v3 Authority Key Identifier:
                keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:6e:4c:3a:f9:65:df:c0:aa:df:d5:2f:3f:35:c8:7f:ea:
         da:45:58:bf:a4:04:04:9b:69:cf:c2:89:f4:2c:d1:16:4a:68:
         7d:6a:eb:71:98:97:28:97:01:9b:c9:c1:28:fe:27:f1:a0:19:
         14:04:24:35:57:0e:a1:14:f0:21:e3:28:c9:75:97:d5:a3:ef:
         10:b4:05:e4:2b:cf:23:35:72:d4:79:a0:94:20:6f:d3:88:9d:
         7a:4d:2b:d8:93:e7:24:03:30:d4:08:48:68:96:92:0c:fd:21:
         77:a9:2c:70:e9:8e:ba:ba:1f:a1:4b:5a:34:67:88:25:45:57:
         d2:55:90:65:df:ef:d2:4d:f2:bd:1d:50:ac:e1:b5:2e:5c:0a:
         f8:df:15:3f:e9:24:1c:9a:76:39:97:6b:4b:02:5c:34:54:63:
         9b:86:1c:57:03:8c:6e:09:4a:69:7d:5e:bb:a2:f7:ec:a6:87:
         b2:63:f4:40:e5:36:36:36:a6:43:7c:f4:b8:a5:d9:48:a1:f5:
         e8:33:b7:c2:ff:5a:0a:2b:c4:fd:30:f2:4d:3d:24:1c:b2:9e:
         ed:1d:17:bd:76:07:b0:6c:de:52:f9:24:1b:0c:79:9d:95:a4:
         d1:54:b6:47:1c:a6:2c:e0:e3:da:fc:21:44:08:1c:78:ca:87:
         e6:bf:cf:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy
M0U0NTAwM0EwHhcNMjYwMTI1MDE1MzQxWhcNMjYwMjAxMDE1MzQxWjAYMRYwFAYD
VQQDDA02OTc1NzdhNi0zMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw43S0UzbbzxvOn5DbfbCroFbHEu2wGe8xelm5T/vkEG5Rpfw/rOs2dpLUTAd
HG49fYKulH5doqiXHfAJLc20h8a38vOKPKwBrSPyCAtTZIdag8mtoiy1i/uiiX2n
0ideF1vPtvsN3+DRftyyEXJAE6LjzMgyUfmOCtpjTxdPonzwPZKeasC7LLx6KoTH
QgJxWqs2qO7MmkN/k+1U41mQ9IDszMxH/5NbeQNIawZvAZRg74fuu9+GpVZC2V05
zPo1zZGg6SZukod5CBMtmb1fmNMU1tNm+8zBIENU17Qn2jga+/vAVX3iUQjlWNBI
zNtAL/mJIytZZH1rbVuDjFNhewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNRTXvm
l5oUO4w8YyHjLGyMaMaaMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2
Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn
aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgLW5MOvll38Cq39UvPzXIf+raRVi/pAQEm2nPwon0LNEWSmh9autx
mJcolwGbycEo/ifxoBkUBCQ1Vw6hFPAh4yjJdZfVo+8QtAXkK88jNXLUeaCUIG/T
iJ16TSvYk+ckAzDUCEholpIM/SF3qSxw6Y66uh+hS1o0Z4glRVfSVZBl3+/STfK9
HVCs4bUuXAr43xU/6SQcmnY5l2tLAlw0VGObhhxXA4xuCUppfV67ovfspoeyY/RA
5TY2NqZDfPS4pdlIofXoM7fC/1oKK8T9MPJNPSQcsp7tHRe9dgewbN5S+SQbDHmd
laTRVLZHHKYs4OPa/CFECBx4yofmv8+h
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:04 2026 by rpki-client