This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File:                     31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier:          MhTdQF7a8ud07rmNGqOZNXMe6k/5duc+XATCdVG0+BA=
Subject key identifier:   6D:F1:13:E8:7F:41:DA:A2:9C:8A:43:1D:A3:FC:C4:E2:35:33:36:89
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number:          E6
Signing time:             Sun 25 Jan 2026 04:45:17 +0000
Manifest this update:     Sun 25 Jan 2026 04:45:17 +0000
Manifest next update:     Sun 01 Feb 2026 04:45:17 +0000
Files and hashes:         1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: 61ocpFYCETh82b+TiQwmZOHbrEF7Tef6W13+6Wj8b/o=)
                          2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: LPo7T+AueonNemWhp1/ZGMIEYr97B+J5DaEw9KwtLDY=)
                          3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: itU/hy7zLegaI59kUx80GxVnUpGnbgPB7QtFznO9eTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Jan 25 04:45:17 2026 GMT
            Not After : Feb  1 04:45:17 2026 GMT
        Subject: CN=69759fdd-2c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:66:79:ec:c8:32:74:76:b9:6f:f7:9e:17:
                    40:5a:23:0d:d2:62:44:b5:02:e8:59:98:92:ad:4c:
                    a8:71:9f:b5:d4:94:c8:e5:0b:8c:7b:82:fd:0e:c8:
                    fd:3c:64:9d:f4:d7:89:e0:15:b1:b1:b2:78:88:70:
                    af:13:de:b5:56:99:50:dc:a3:34:84:09:01:74:43:
                    81:dc:6b:3a:b1:31:a9:66:6c:87:9c:be:b6:99:7e:
                    0a:cf:62:74:2b:41:46:e5:ad:cd:8f:96:4d:be:6a:
                    54:6a:07:b6:31:1d:be:8d:7d:52:da:20:0d:34:69:
                    75:de:5b:c1:89:e8:37:80:b5:38:3e:9c:84:27:52:
                    d8:c0:e8:f5:d5:b2:83:d7:d7:a9:75:8a:3b:3d:09:
                    13:8a:8e:ca:5b:23:ef:fb:72:cd:38:e2:8d:0c:a6:
                    da:60:bf:61:bf:0c:54:75:85:8c:ab:40:e4:0a:6a:
                    2e:64:e1:dc:6c:3f:51:f7:65:2b:e5:a9:42:91:56:
                    44:ed:07:e1:26:08:73:cf:2c:d9:c2:42:e7:4a:e1:
                    37:91:2f:1c:16:47:50:8e:73:e1:35:f2:90:10:d7:
                    bf:57:12:4c:21:38:65:80:1d:eb:75:73:b7:42:16:
                    c9:4c:7c:34:e3:c1:0e:31:5a:bc:ae:ce:8c:4d:b4:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:13:E8:7F:41:DA:A2:9C:8A:43:1D:A3:FC:C4:E2:35:33:36:89
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:7c:1e:0d:5a:0f:02:27:29:6c:82:67:7b:2f:73:93:26:
         d3:1b:5d:e6:33:95:24:75:59:66:c8:3d:53:15:df:4f:b8:7a:
         d6:29:e9:e0:eb:ec:3b:6a:21:01:75:35:d6:2f:b9:0f:a1:19:
         53:7e:1f:20:b1:e6:5b:02:6b:b8:e4:28:74:09:41:a7:77:da:
         d3:7e:aa:cc:4e:63:8d:aa:ca:02:1b:69:42:f0:a8:2a:20:eb:
         b4:84:bf:9e:28:83:f9:8e:54:e0:5d:27:15:2f:48:7f:fa:d9:
         26:ff:2f:fa:71:36:b1:4f:09:15:77:f1:94:28:9d:c4:0b:37:
         d4:fa:13:6c:68:95:5c:a6:4d:73:7e:28:63:a2:4e:7b:b1:59:
         7e:e5:99:2f:fc:fd:5b:07:94:c4:95:6f:c3:5d:17:81:21:3f:
         24:a9:40:f6:2d:0b:22:99:87:b3:7e:1b:35:66:83:eb:fa:80:
         56:bd:2a:00:74:15:8a:17:b6:0e:45:40:d1:ec:66:7c:7c:fa:
         99:37:b7:3a:1a:83:d9:43:31:b5:10:e7:93:3d:59:b3:5b:36:
         8f:e1:87:59:47:16:5a:91:29:0f:16:ea:2d:b1:6d:c1:12:49:
         64:6d:e0:68:ca:24:ea:c8:99:4d:c3:58:43:a5:fd:a1:78:e0:
         24:2e:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:30 2026 by rpki-client