This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File:                     DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier:          pFN1/K9dyHLDQqtETIhQ30LQPWDZu3Jj7R7wivCp4DE=
Subject key identifier:   47:49:F5:F9:0A:78:73:6E:59:F9:53:C1:02:71:CE:30:36:CD:50:6F
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer:       /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial:       1742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number:          1731
Signing time:             Sat 24 Jan 2026 16:22:46 +0000
Manifest this update:     Sat 24 Jan 2026 16:22:46 +0000
Manifest next update:     Sat 31 Jan 2026 16:22:46 +0000
Files and hashes:         1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: 7LWkeEWgbWPRXvFVHTkFzRPqVwRWkcIl/YO2+jqnKLo=)
                          2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: UklyO+zUtTPQ+1U54UPe5WnHbws0xqnE6hJtphNdrmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5954 (0x1742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
        Validity
            Not Before: Jan 24 16:22:46 2026 GMT
            Not After : Jan 31 16:22:46 2026 GMT
        Subject: CN=6974f1d6-045f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:01:c5:5f:fd:5c:16:39:9a:35:38:92:56:
                    ff:9a:75:43:83:9f:9b:4d:b3:6f:9a:84:c8:ef:8b:
                    08:43:fa:80:b7:ef:52:be:51:11:9a:9b:1a:ee:e5:
                    b0:7d:12:47:8c:12:b1:5f:11:2e:e9:27:b6:6f:14:
                    49:cb:96:82:35:5e:d4:61:31:ca:b6:0d:c5:0e:48:
                    bf:98:fb:ef:26:db:43:cf:22:fb:d7:05:eb:c3:c3:
                    da:9f:85:c3:d1:d5:e6:a9:3f:15:9d:8f:c5:71:af:
                    0d:66:99:fc:58:14:34:ab:3a:d1:70:37:e5:18:39:
                    f1:24:e6:8e:0b:90:7b:a3:2c:72:e9:6e:16:02:71:
                    03:b8:b7:8a:8e:31:f3:81:f0:42:c2:b9:65:52:9d:
                    8d:da:01:29:62:87:58:c6:84:2e:15:76:b2:39:ce:
                    5c:05:16:19:8d:bb:ac:4c:d5:b5:14:fd:40:09:7b:
                    c6:7f:20:ce:87:2e:93:99:0e:25:e6:6c:50:ca:7b:
                    0c:53:64:6c:fc:03:65:5a:5e:93:e9:e7:43:26:f8:
                    dc:a2:07:7a:57:e7:af:d1:36:43:e7:26:2b:2e:dd:
                    a3:9b:d2:98:ee:08:21:b4:dd:1f:9b:5f:ce:2e:79:
                    03:aa:ce:03:90:46:37:fe:26:b3:88:12:f6:9c:54:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:49:F5:F9:0A:78:73:6E:59:F9:53:C1:02:71:CE:30:36:CD:50:6F
            X509v3 Authority Key Identifier:
                keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:e7:46:73:7b:53:58:de:fb:c3:91:72:ee:8c:f4:34:12:
         f8:3f:91:ca:71:fa:c9:23:98:c5:0f:e0:55:91:26:a6:83:0f:
         28:2d:3a:7c:b4:41:f7:85:60:bf:48:66:68:6e:d0:01:cf:42:
         bd:b9:57:29:d1:20:43:44:fa:73:5e:30:9d:40:e3:0f:00:fb:
         fd:fd:55:fb:1f:74:90:97:61:a9:b9:41:f9:9b:e6:8a:45:d4:
         21:30:04:8a:cf:a8:81:a7:97:a2:7f:0f:9a:24:33:16:0f:db:
         96:ae:07:61:aa:b5:76:64:44:b7:0c:ec:50:f5:97:59:81:98:
         30:1f:d4:84:74:31:6f:e8:69:3b:c2:ba:07:ed:56:40:40:72:
         dd:84:e6:25:70:8d:13:ef:6d:52:c1:54:d3:ca:00:8a:fc:d2:
         67:5a:44:41:09:b8:f2:e5:20:1c:17:77:e8:ef:09:7b:0c:02:
         16:24:e3:1d:f7:dd:d3:21:a1:48:51:95:ab:83:13:2a:11:ea:
         c0:f2:bc:8c:59:43:8a:c7:c5:2e:22:f4:7c:e7:a4:64:0f:ad:
         ca:e2:25:8c:c1:fa:04:b8:76:54:85:2d:d9:6b:c1:5b:a6:81:
         d4:9e:a0:99:c4:9d:1a:eb:68:56:d3:3c:ee:4f:4b:5a:7f:95:
         ff:69:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:25 2026 by rpki-client