This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
File:                     u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json)
Hash identifier:          yYJ1PwJtQ5CQ6McvpdVXVhPWcsts9BhdC3KTdYjJMGI=
Subject key identifier:   99:CD:3B:1C:52:16:80:23:09:E6:75:6F:8A:44:1F:23:04:AE:64:95
Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
Certificate issuer:       /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Certificate serial:       04D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
Manifest number:          04CB
Signing time:             Sat 24 Jan 2026 23:04:29 +0000
Manifest this update:     Sat 24 Jan 2026 23:04:29 +0000
Manifest next update:     Sat 31 Jan 2026 23:04:29 +0000
Files and hashes:         1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: Acmvp8E0ZR3vxkrnnkurv95OQ0XATluQbE5nCvqrABs=)
                          2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
                          rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
        Validity
            Not Before: Jan 24 23:04:29 2026 GMT
            Not After : Jan 31 23:04:29 2026 GMT
        Subject: CN=69754ffd-8b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:31:2b:42:1a:38:c5:b8:91:b1:4f:c5:f6:11:
                    96:de:d7:fa:89:41:8d:24:72:6b:81:66:63:d2:fd:
                    b7:c4:dd:2b:cb:5a:eb:44:77:92:13:ea:dd:f9:74:
                    7b:26:a4:d5:e0:19:65:10:77:98:fb:79:e7:81:6c:
                    d0:c9:c6:01:32:4c:ed:a1:e0:e4:95:86:83:b8:04:
                    10:4b:33:4b:05:9d:fd:fa:49:df:e2:6f:b8:3b:d5:
                    ba:40:ef:64:fe:61:28:cb:48:b0:32:c5:36:d1:0c:
                    98:08:7d:5c:a8:e1:c8:b0:7f:7d:bc:ec:d6:3a:48:
                    e7:df:19:c1:ae:8a:70:25:4e:a8:26:9a:28:c8:ef:
                    57:c0:02:fb:c4:71:5b:2a:0f:13:66:c9:3d:9d:90:
                    ac:c9:cb:43:a7:12:7f:82:06:80:0d:42:46:4b:4f:
                    24:de:05:61:9b:03:97:51:7c:b9:67:e5:1f:f2:73:
                    67:84:de:0f:c0:70:5c:f9:9f:ad:9b:c3:ae:9a:2d:
                    61:e7:5e:fc:91:32:65:a1:e2:62:da:61:3b:fd:5e:
                    67:9f:b2:99:82:04:32:c2:72:14:dc:61:17:54:33:
                    2a:6d:8a:0a:38:15:ab:8a:8a:03:d8:2d:68:45:fb:
                    05:1c:71:21:a9:93:27:6d:a4:10:e7:a0:83:4e:c1:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:3B:1C:52:16:80:23:09:E6:75:6F:8A:44:1F:23:04:AE:64:95
            X509v3 Authority Key Identifier:
                keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:1b:34:2c:fc:83:f4:a7:43:c0:a8:9e:c5:b0:a5:14:39:
         e5:c5:d5:18:c7:7f:d1:c4:88:2b:77:52:af:10:ef:5d:66:09:
         42:84:67:34:60:e1:30:0a:d5:21:7c:01:2c:94:2e:98:f3:4c:
         57:9e:31:be:47:ca:6e:64:2d:3e:32:19:fd:b2:dc:16:a2:bd:
         38:61:9c:e5:8a:73:9d:ae:4b:6b:0b:79:cf:49:b7:f0:48:59:
         a8:9f:d1:bb:58:85:9f:f5:24:f3:3b:89:6a:8b:55:c3:3b:c6:
         e0:51:01:cb:17:3f:b3:e8:d5:5a:84:a7:57:b6:79:96:36:28:
         73:9c:07:cf:08:e1:8f:44:7b:05:91:a0:a7:75:5f:fa:c9:ac:
         16:ea:ce:7a:f2:75:cf:85:9e:8f:55:2d:ec:ab:c2:d1:68:b4:
         b8:3b:b7:e5:19:41:36:90:3f:a6:5c:06:2c:e2:97:bf:26:79:
         d7:3d:c3:67:ff:8f:6a:fc:62:98:6a:f3:a7:27:61:32:bd:cc:
         05:0f:76:25:09:15:80:91:ee:f2:5c:b9:8f:3f:f4:06:0d:6a:
         a7:01:6d:b4:54:ef:1b:8e:af:0c:ef:25:51:03:0b:43:a7:43:
         e3:32:8a:b4:e0:70:90:31:34:aa:ad:45:9f:55:4c:93:51:1d:
         46:13:7b:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE
QjY4OEZFNTMwHhcNMjYwMTI0MjMwNDI5WhcNMjYwMTMxMjMwNDI5WjAYMRYwFAYD
VQQDDA02OTc1NGZmZC04YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8TErQho4xbiRsU/F9hGW3tf6iUGNJHJrgWZj0v23xN0ry1rrRHeSE+rd+XR7
JqTV4BllEHeY+3nngWzQycYBMkztoeDklYaDuAQQSzNLBZ39+knf4m+4O9W6QO9k
/mEoy0iwMsU20QyYCH1cqOHIsH99vOzWOkjn3xnBropwJU6oJpooyO9XwAL7xHFb
Kg8TZsk9nZCsyctDpxJ/ggaADUJGS08k3gVhmwOXUXy5Z+Uf8nNnhN4PwHBc+Z+t
m8Oumi1h5178kTJloeJi2mE7/V5nn7KZggQywnIU3GEXVDMqbYoKOBWriooD2C1o
RfsFHHEhqZMnbaQQ56CDTsGTjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnNOxxS
FoAjCeZ1b4pEHyMErmSVMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2
NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF
b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEoxs0LPyD9KdDwKiexbClFDnlxdUYx3/RxIgrd1KvEO9dZglChGc0
YOEwCtUhfAEslC6Y80xXnjG+R8puZC0+Mhn9stwWor04YZzlinOdrktrC3nPSbfw
SFmon9G7WIWf9STzO4lqi1XDO8bgUQHLFz+z6NVahKdXtnmWNihznAfPCOGPRHsF
kaCndV/6yawW6s568nXPhZ6PVS3sq8LRaLS4O7flGUE2kD+mXAYs4pe/JnnXPcNn
/49q/GKYavOnJ2EyvcwFD3YlCRWAke7yXLmPP/QGDWqnAW20VO8bjq8M7yVRAwtD
p0PjMoq04HCQMTSqrUWfVUyTUR1GE3s6
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:59 2026 by rpki-client