This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
File:                     2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json)
Hash identifier:          HLcq1h8NG7VsvXw410gE1y7ET61jY/9iyYE2Ftmob+k=
Subject key identifier:   E6:43:B2:AA:DE:DE:E1:C9:DF:C1:C0:14:6C:6E:CC:7B:D4:18:95:9F
Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
Certificate issuer:       /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Certificate serial:       0CE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
Manifest number:          1E75
Signing time:             Sat 24 Jan 2026 16:55:22 +0000
Manifest this update:     Sat 24 Jan 2026 16:55:22 +0000
Manifest next update:     Sat 31 Jan 2026 16:55:22 +0000
Files and hashes:         1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: VufJkxKznQ4zBXFu97kKhRWCcFgNbZe6gWJIrhu7yl4=)
                          2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: Ecj4wTVjyUbe05JmkTHE3iJeDcHJFhB138/thNFleyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
        Validity
            Not Before: Jan 24 16:55:22 2026 GMT
            Not After : Jan 31 16:55:22 2026 GMT
        Subject: CN=6974f97a-c88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:ca:49:73:82:fe:6d:20:61:fc:5b:e7:a6:
                    b0:6c:05:14:92:7f:0d:9b:7c:dc:b4:73:1d:e4:23:
                    ee:c1:f2:dd:c0:cb:78:ef:1e:95:28:eb:be:13:a8:
                    33:44:46:09:fd:11:c5:40:f5:8c:cf:24:cd:91:b5:
                    06:ca:33:55:29:18:01:52:9d:23:6a:ab:86:77:91:
                    86:0e:87:d2:fe:3e:f7:ee:72:b3:df:c7:b7:06:de:
                    91:05:62:3f:70:94:01:eb:82:1f:ed:9d:81:71:b4:
                    c3:15:66:4b:3b:ab:4f:92:87:79:ec:40:32:b1:d3:
                    a1:f9:6c:6f:02:a8:07:66:90:ea:7a:a5:ab:80:58:
                    d1:ba:c6:a6:8f:b5:9b:e2:5e:c8:2d:61:96:a6:e6:
                    c6:55:f8:70:9b:c9:a9:38:7d:ec:ca:55:5e:50:2a:
                    67:63:36:b1:4d:65:cc:de:e2:26:84:f4:d1:d7:71:
                    a6:98:f8:96:3a:90:9e:43:bf:73:fe:e4:7d:61:8c:
                    f6:a8:11:86:cb:c0:fc:11:ce:72:b8:c7:8d:34:cc:
                    87:bf:16:85:a4:72:5f:26:cb:81:1d:8c:b3:71:ee:
                    db:64:86:08:91:99:be:b4:15:d4:9b:78:fa:a2:44:
                    e3:ec:e9:d8:00:eb:f5:bf:12:e0:95:a0:36:52:9f:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:B2:AA:DE:DE:E1:C9:DF:C1:C0:14:6C:6E:CC:7B:D4:18:95:9F
            X509v3 Authority Key Identifier:
                keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:f4:12:54:3a:b1:6b:c8:6a:a0:43:da:1e:f7:33:f4:f0:
         a8:1f:a6:2b:b2:2e:06:fa:0f:20:8e:99:c2:f8:a1:86:66:40:
         d4:d3:1a:11:51:58:d9:2d:15:de:29:b0:21:4d:1d:cc:38:4a:
         ee:63:b8:0d:92:4f:e8:e3:a9:4e:9d:06:55:59:6b:96:87:33:
         c7:13:a3:87:b1:2a:89:1e:c4:be:45:a0:62:ce:af:e0:0d:fe:
         04:64:ee:d0:a5:dd:dd:50:14:08:c2:c9:3b:0f:97:56:3b:2f:
         a6:d2:c7:c9:d8:51:e4:41:2a:cd:79:2f:e1:0b:2f:99:de:e3:
         69:80:93:b0:9d:81:a9:5b:5d:f1:88:05:3c:31:04:cf:2e:85:
         0e:c7:03:85:50:89:e4:19:e3:ad:8e:fa:ca:51:f4:2b:03:4e:
         9e:02:a5:d5:87:f4:4c:31:71:ed:bb:e4:2b:08:a3:60:12:40:
         c3:bd:f7:ef:13:3e:c5:7f:18:c2:17:19:62:60:99:b8:f7:74:
         a9:75:69:f3:40:0e:1e:d0:73:96:42:3c:a6:ff:d0:78:f4:c1:
         ba:50:ac:f3:6b:cf:bd:4c:eb:04:6a:b9:3b:49:7b:0b:4a:b8:
         89:e8:fa:36:df:95:30:f0:e1:8f:bb:6a:fa:17:b2:4f:93:e8:
         2a:80:1d:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG
REE4NEMwN0EwHhcNMjYwMTI0MTY1NTIyWhcNMjYwMTMxMTY1NTIyWjAYMRYwFAYD
VQQDDA02OTc0Zjk3YS1jODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsv/KSXOC/m0gYfxb56awbAUUkn8Nm3zctHMd5CPuwfLdwMt47x6VKOu+E6gz
REYJ/RHFQPWMzyTNkbUGyjNVKRgBUp0jaquGd5GGDofS/j737nKz38e3Bt6RBWI/
cJQB64If7Z2BcbTDFWZLO6tPkod57EAysdOh+WxvAqgHZpDqeqWrgFjRusamj7Wb
4l7ILWGWpubGVfhwm8mpOH3sylVeUCpnYzaxTWXM3uImhPTR13GmmPiWOpCeQ79z
/uR9YYz2qBGGy8D8Ec5yuMeNNMyHvxaFpHJfJsuBHYyzce7bZIYIkZm+tBXUm3j6
okTj7OnYAOv1vxLglaA2Up9EwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZDsqre
3uHJ38HAFGxuzHvUGJWfMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG
RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3
SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh
NVVPRmNVam1NMUw5cUV3SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCl4/QSVDqxa8hqoEPaHvcz9PCoH6Yrsi4G+g8gjpnC+KGGZkDU0xoR
UVjZLRXeKbAhTR3MOEruY7gNkk/o46lOnQZVWWuWhzPHE6OHsSqJHsS+RaBizq/g
Df4EZO7Qpd3dUBQIwsk7D5dWOy+m0sfJ2FHkQSrNeS/hCy+Z3uNpgJOwnYGpW13x
iAU8MQTPLoUOxwOFUInkGeOtjvrKUfQrA06eAqXVh/RMMXHtu+QrCKNgEkDDvffv
Ez7FfxjCFxliYJm493SpdWnzQA4e0HOWQjym/9B49MG6UKzza8+9TOsEark7SXsL
SriJ6Po235Uw8OGPu2r6F7JPk+gqgB0Q
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:23 2026 by rpki-client