This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File:                     1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier:          dZebd/9SGVKVzFAOlXG3Yh82dbi/2sTXCUa7xkdgq2s=
Subject key identifier:   FD:07:B3:BB:EC:01:B7:B8:3A:B1:8E:A6:83:AF:6F:2D:8B:90:A3:83
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer:       /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number:          C7
Signing time:             Sun 25 Jan 2026 05:08:24 +0000
Manifest this update:     Sun 25 Jan 2026 05:08:23 +0000
Manifest next update:     Sun 01 Feb 2026 05:08:23 +0000
Files and hashes:         1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: ehvtC3hl1qzHxDvReZ9mcVCGx/4lshYY94IwRqLXyi0=)
                          2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: htNwSI5H54iT9rmt0clXooV7uI/0VSjQJZC/u1wLlfY=)
                          3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: 3AmwEQdkffGIWwCP59F8UtXcsDQEm9UnobcPgXH/cBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
        Validity
            Not Before: Jan 25 05:08:23 2026 GMT
            Not After : Feb  1 05:08:23 2026 GMT
        Subject: CN=6975a548-9b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:ad:94:ca:c1:f9:d2:ef:c8:07:2a:8c:94:
                    5c:67:69:40:1b:96:92:8d:77:67:b1:7e:2f:10:cc:
                    69:c7:c3:9b:0d:f7:a7:da:b1:0f:66:f0:af:f7:f0:
                    85:08:4b:6e:0b:58:13:62:25:2d:0e:3b:37:9f:d4:
                    0d:4f:87:60:ae:3b:73:53:52:eb:de:45:00:df:72:
                    6e:63:18:70:41:37:88:51:2b:f2:f4:2d:37:d5:ad:
                    c3:4b:eb:5d:bb:aa:22:51:d2:17:80:0d:0b:a7:f0:
                    a8:e5:49:ac:5f:2b:0c:d5:53:7c:e9:b4:76:14:fb:
                    6d:dc:d5:c8:3c:20:fe:29:99:83:c4:cd:66:c3:dc:
                    50:87:4e:26:d6:4d:54:c4:3d:1d:39:a2:dd:78:5f:
                    55:24:c6:90:23:a8:b8:13:5a:12:d3:64:95:a9:98:
                    63:ae:78:2c:c1:b1:85:4b:a0:df:84:8a:af:ea:ae:
                    9a:e8:f5:44:9d:d6:4a:b6:6c:d9:4c:d9:2d:79:f2:
                    ac:ec:49:72:bd:d0:24:89:0b:93:0f:05:78:7f:68:
                    6b:76:d4:49:ff:b2:38:d7:30:91:a3:36:1a:ec:20:
                    36:f4:df:2a:df:0e:6a:ee:e7:6b:01:eb:0e:13:64:
                    70:d0:55:7f:b3:c2:50:d5:77:e5:8f:82:27:57:a8:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:07:B3:BB:EC:01:B7:B8:3A:B1:8E:A6:83:AF:6F:2D:8B:90:A3:83
            X509v3 Authority Key Identifier:
                keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:43:24:f4:c2:1e:ca:5e:25:f8:56:38:97:ca:d2:e9:f1:
         01:3c:0e:68:90:01:4f:17:57:ab:bd:83:01:28:b8:a7:e3:ed:
         83:d2:7c:9a:d9:a6:f9:bf:92:27:8f:05:a9:e1:27:01:e1:57:
         20:8f:6c:95:e2:4d:3d:b2:6a:56:14:ed:29:28:9f:fb:76:6b:
         4a:16:c1:2b:5b:e4:55:2f:5b:10:98:05:bd:4d:99:2b:25:6b:
         e5:32:cf:39:c9:80:fe:fc:d8:06:6e:80:19:91:ae:96:36:77:
         08:ae:bd:ba:e3:be:c6:54:ea:3f:ac:e0:17:66:5b:4e:68:0d:
         59:8c:d8:a9:e9:0f:7b:34:1d:f0:89:3f:3b:71:51:d7:ab:2c:
         17:87:c8:e0:c0:9d:da:fc:6a:53:80:81:e2:d0:45:52:c9:2b:
         84:90:eb:7f:ec:fd:01:59:b6:84:29:f5:18:28:36:b4:60:b3:
         a9:c7:e8:57:94:33:bf:17:c2:34:d8:54:b1:f2:60:3d:7a:0b:
         c3:cf:ac:66:aa:7e:8a:ac:b6:bd:e5:9d:b1:e4:e4:f8:c2:e6:
         bf:1b:98:2c:9c:db:58:aa:fa:62:91:8d:bf:a6:98:23:6d:ac:
         9e:ba:6d:84:01:4e:9d:03:a7:b8:74:48:48:88:72:94:84:4f:
         19:41:53:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVFRUExMTAvBgNVBAUTKEQ2MEMzMEIxQTlGNTlDOTU5QUQ0OTY3RjJGNkQ1NzJB
Q0I3NTI5OUMwHhcNMjYwMTI1MDUwODIzWhcNMjYwMjAxMDUwODIzWjAYMRYwFAYD
VQQDDA02OTc1YTU0OC05YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0utlMrB+dLvyAcqjJRcZ2lAG5aSjXdnsX4vEMxpx8ObDfen2rEPZvCv9/CF
CEtuC1gTYiUtDjs3n9QNT4dgrjtzU1Lr3kUA33JuYxhwQTeIUSvy9C031a3DS+td
u6oiUdIXgA0Lp/Co5UmsXysM1VN86bR2FPtt3NXIPCD+KZmDxM1mw9xQh04m1k1U
xD0dOaLdeF9VJMaQI6i4E1oS02SVqZhjrngswbGFS6DfhIqv6q6a6PVEndZKtmzZ
TNktefKs7ElyvdAkiQuTDwV4f2hrdtRJ/7I41zCRozYa7CA29N8q3w5q7udrAesO
E2Rw0FV/s8JQ1Xflj4InV6hwVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0Hs7vs
Abe4OrGOpoOvby2LkKODMB8GA1UdIwQYMBaAFNYMMLGp9ZyVmtSWfy9tVyrLdSmc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUVFQS9FM0ZDRDE0NEQ0
Q0YxMUVGOThERjk4MkJDNEY5QUUwMi8xZ3d3c2FuMW5KV2ExSlpfTDIxWEtzdDFL
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUtady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUVFQS9FM0ZDRDE0NEQ0Q0YxMUVGOThERjk4MkJDNEY5QUUwMi8xZ3d3c2FuMW5K
V2ExSlpfTDIxWEtzdDFLWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5vEMk9MIeyl4l+FY4l8rS6fEBPA5okAFPF1ervYMBKLin4+2D0nya
2ab5v5InjwWp4ScB4Vcgj2yV4k09smpWFO0pKJ/7dmtKFsErW+RVL1sQmAW9TZkr
JWvlMs85yYD+/NgGboAZka6WNncIrr26477GVOo/rOAXZltOaA1ZjNip6Q97NB3w
iT87cVHXqywXh8jgwJ3a/GpTgIHi0EVSySuEkOt/7P0BWbaEKfUYKDa0YLOpx+hX
lDO/F8I02FSx8mA9egvDz6xmqn6KrLa95Z2x5OT4wua/G5gsnNtYqvpikY2/ppgj
bayeum2EAU6dA6e4dEhIiHKUhE8ZQVMp
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:50 2026 by rpki-client