This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
File:                     3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json)
Hash identifier:          WCJ7yiAAoieD2KVvOzZHr8efOay0fQQfOELJmYXCNJs=
Subject key identifier:   EE:A5:0F:33:F4:A5:A8:45:BC:36:ED:9F:D6:07:8E:09:4B:EA:15:A7
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Certificate issuer:       /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
Manifest number:          010A
Signing time:             Sun 25 Jan 2026 04:15:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:15:58 +0000
Manifest next update:     Sun 01 Feb 2026 04:15:58 +0000
Files and hashes:         1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: 6cxMnHocEiksMtinIj4vzinHSHo7YDLiuzEsn3Aegu4=)
                          2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: oWQYGFiOVrig6e7wgMi2E0kAg4y2iK2+1Mn5HCvnfk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
                          rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
        Validity
            Not Before: Jan 25 04:15:58 2026 GMT
            Not After : Feb  1 04:15:58 2026 GMT
        Subject: CN=697598ff-dde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:44:01:b1:88:9d:eb:2d:1e:e9:b7:83:ff:0a:
                    ad:c5:b0:7a:3b:8a:11:f0:25:65:ed:fb:a6:18:8a:
                    9f:e5:63:ba:30:7f:81:75:a6:d3:2f:a9:50:e9:a9:
                    df:f1:64:8e:e1:98:00:eb:b1:6a:7f:a0:2d:5a:db:
                    f5:24:1f:f9:df:07:11:75:d7:71:07:19:45:87:98:
                    ad:28:38:ab:53:1b:24:c5:28:22:ef:0c:fe:f5:c9:
                    28:2e:ac:4c:cf:3c:73:f9:a2:e6:68:da:d8:8a:c7:
                    6b:8b:91:44:fe:17:7a:33:03:b3:10:68:0d:02:45:
                    78:aa:4a:b4:92:26:3a:c3:d4:1f:0c:24:40:00:34:
                    2c:cd:63:34:96:63:3b:b9:54:ff:c9:b5:70:f5:53:
                    49:fa:0d:27:d7:e7:41:e9:13:b6:f3:e5:76:28:05:
                    6e:cb:3e:5b:da:dd:0c:2f:dc:4a:06:46:c6:cb:ef:
                    60:73:80:ab:db:77:61:93:8f:35:e0:a3:04:95:07:
                    59:06:08:de:48:32:bf:03:d8:92:59:d2:a8:02:c0:
                    7e:29:1c:8f:fc:65:35:24:a5:6d:69:8d:1f:f1:53:
                    fe:2e:86:d4:42:95:41:b1:a1:a4:0e:2f:3a:e3:44:
                    81:fe:17:1f:d4:31:d1:51:81:da:e9:ea:4a:f8:17:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A5:0F:33:F4:A5:A8:45:BC:36:ED:9F:D6:07:8E:09:4B:EA:15:A7
            X509v3 Authority Key Identifier:
                keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4f:f1:71:bb:7f:55:7b:34:ad:2a:7f:94:55:24:0e:d7:35:
         10:36:00:0c:7e:35:90:57:4d:28:d4:09:9b:f1:a8:e4:69:f7:
         75:2d:f6:4d:fb:81:ec:c8:b6:6f:a3:21:c7:b7:44:4e:0e:75:
         5c:0a:17:0b:57:e9:2f:e1:2f:08:90:f7:0c:92:8a:59:07:f2:
         96:b3:da:1b:5b:10:80:06:65:16:09:ae:34:fb:2f:15:ec:49:
         b0:85:84:fa:5f:61:17:27:15:14:dc:16:b6:ee:27:f4:33:a8:
         ea:c1:8c:a5:a3:3f:96:65:33:47:79:85:18:de:c9:f2:54:91:
         f2:b1:f8:d6:f6:dd:a7:90:af:ce:24:18:c4:db:83:17:fa:38:
         12:ff:24:a7:df:01:ed:da:b0:10:31:cc:bd:00:fd:d3:fe:43:
         d7:24:df:04:d5:e8:78:51:c1:68:6f:de:45:b3:44:68:0b:7d:
         98:2a:d1:79:1f:b7:ef:b4:01:3a:50:2a:77:f0:c5:13:33:5d:
         99:57:e6:0d:b8:da:6c:81:cf:f4:f8:54:40:cb:31:95:8c:a0:
         96:30:68:4f:28:88:d9:7a:7c:c0:4c:cc:c7:90:d8:0b:0e:c5:
         a2:52:e8:7c:11:c1:2c:6d:f8:4b:93:ed:4d:de:7d:f6:55:3c:
         b9:ca:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:56:53 2026 by rpki-client