This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File:                     c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier:          q/L2zFKkuOvJQmFK0fbm6YQ+Hf+QLBdBenZIZGYVVMo=
Subject key identifier:   34:84:AF:FE:F4:34:69:FB:89:A1:26:D9:DA:BB:BC:91:4A:E2:7E:37
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number:          0192
Signing time:             Sun 25 Jan 2026 02:53:13 +0000
Manifest this update:     Sun 25 Jan 2026 02:53:12 +0000
Manifest next update:     Sun 01 Feb 2026 02:53:12 +0000
Files and hashes:         1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: mCSyvp2mqGRYYz2S4wk/N3GDbExUGhdP53rBcVWOnEU=)
                          2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: jzK4IP25hDQmZ6Yel8/6dlrm+DzHoeAmWycvk4tBn5c=)
                          3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 1XFg0R8dHQ9Byv3cNSIFhONsiL8oYpTuAsDTsmICweI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Jan 25 02:53:12 2026 GMT
            Not After : Feb  1 02:53:12 2026 GMT
        Subject: CN=69758599-09ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:a5:53:70:ec:3a:13:31:f4:9a:d7:99:22:
                    54:92:96:57:af:b1:a5:ce:c5:f5:ce:0c:15:87:f1:
                    63:25:0b:7e:9c:5d:44:c0:ec:6f:11:aa:1e:7d:db:
                    12:30:b9:a8:32:1d:95:8a:3b:42:6e:cb:f1:7b:e5:
                    b2:24:e7:d4:55:33:18:84:c4:6d:d9:7c:ea:1a:da:
                    c7:50:21:68:84:17:ca:cc:be:dd:48:2f:be:d9:66:
                    92:72:3b:a3:f9:10:d1:5f:68:f2:38:1f:c9:16:66:
                    40:b5:0e:ba:bc:fc:34:70:8b:3a:f7:1d:fd:79:29:
                    db:c9:aa:41:df:bb:40:6b:5d:78:63:f5:21:4d:8c:
                    e2:60:93:1f:b8:a1:fd:f0:6b:7e:55:1c:74:2f:ad:
                    04:e3:90:9e:f7:23:8c:8a:f8:c2:bc:60:dc:fc:17:
                    e0:e1:2c:1f:a4:54:c7:36:ac:81:a3:42:6a:83:95:
                    c1:65:52:a4:74:15:c8:67:05:53:c0:ff:b1:5b:33:
                    6d:75:33:d5:de:e7:07:40:c3:cb:44:3d:87:37:d3:
                    9a:7b:3f:d7:82:eb:bf:9c:45:55:7d:22:e5:4d:9f:
                    71:80:02:be:f2:7c:42:dd:33:e3:9c:6e:ea:9e:c6:
                    a2:41:57:71:38:b3:0e:02:16:25:7b:06:b4:12:71:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:84:AF:FE:F4:34:69:FB:89:A1:26:D9:DA:BB:BC:91:4A:E2:7E:37
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:b3:f2:3f:b9:7d:38:84:62:8f:d2:2d:39:36:28:8e:79:
         40:95:d5:cb:f3:9e:32:0a:c0:19:0e:94:da:9f:76:4c:c6:30:
         8f:aa:25:44:f5:4b:7e:0f:ee:37:ac:18:f8:f4:7e:88:f7:c3:
         43:31:de:d9:39:b5:63:ef:dc:ab:e1:ab:78:69:61:8b:5c:88:
         8b:0c:f0:75:55:e0:f4:f8:2e:59:a2:44:a6:39:93:61:59:95:
         ae:94:60:2b:62:7a:16:64:fb:04:d6:d5:94:14:74:aa:32:b7:
         e8:bb:6f:ed:57:43:a4:81:2f:c7:30:84:bd:ff:ef:4e:bd:67:
         f6:b9:4e:c0:72:00:fd:73:0c:21:97:02:37:49:01:d1:76:08:
         ef:e3:a9:2f:dc:23:f6:bd:a4:0e:d2:d6:28:11:81:ec:0b:90:
         35:7a:a5:60:7a:47:52:af:e2:f7:81:b7:6b:24:46:3e:9a:1c:
         9d:c8:c2:91:70:44:b0:92:cc:f8:1b:71:79:94:3e:c2:44:b5:
         a8:83:f4:42:c4:5a:df:ba:fa:61:18:8d:8d:6a:f6:a4:e5:bb:
         38:b2:49:fc:88:0b:e6:98:79:62:2c:5f:79:f2:0b:d4:da:de:
         88:16:4f:68:dc:a4:89:8a:cd:97:51:a1:0f:2d:b8:cb:ee:b0:
         17:1e:dc:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4
MDgwRTk3MzAwHhcNMjYwMTI1MDI1MzEyWhcNMjYwMjAxMDI1MzEyWjAYMRYwFAYD
VQQDDA02OTc1ODU5OS0wOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyalU3DsOhMx9JrXmSJUkpZXr7GlzsX1zgwVh/FjJQt+nF1EwOxvEaoefdsS
MLmoMh2VijtCbsvxe+WyJOfUVTMYhMRt2XzqGtrHUCFohBfKzL7dSC++2WaScjuj
+RDRX2jyOB/JFmZAtQ66vPw0cIs69x39eSnbyapB37tAa114Y/UhTYziYJMfuKH9
8Gt+VRx0L60E45Ce9yOMivjCvGDc/Bfg4SwfpFTHNqyBo0Jqg5XBZVKkdBXIZwVT
wP+xWzNtdTPV3ucHQMPLRD2HN9Oaez/Xguu/nEVVfSLlTZ9xgAK+8nxC3TPjnG7q
nsaiQVdxOLMOAhYlewa0EnERCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSEr/70
NGn7iaEm2dq7vJFK4n43MB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD
RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE
eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDprPyP7l9OIRij9ItOTYojnlAldXL854yCsAZDpTan3ZMxjCPqiVE
9Ut+D+43rBj49H6I98NDMd7ZObVj79yr4at4aWGLXIiLDPB1VeD0+C5ZokSmOZNh
WZWulGArYnoWZPsE1tWUFHSqMrfou2/tV0OkgS/HMIS9/+9OvWf2uU7AcgD9cwwh
lwI3SQHRdgjv46kv3CP2vaQO0tYoEYHsC5A1eqVgekdSr+L3gbdrJEY+mhydyMKR
cESwksz4G3F5lD7CRLWog/RCxFrfuvphGI2Navak5bs4skn8iAvmmHliLF958gvU
2t6IFk9o3KSJis2XUaEPLbjL7rAXHtzL
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:11:36 2026 by rpki-client