This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File:                     9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier:          nLS85bPFZAn48rMZzJoBWryPZTh7QX4JnwJbp2IJQiI=
Subject key identifier:   3F:F3:33:8E:21:4D:08:53:19:36:1A:D4:07:9E:51:BD:8D:57:57:47
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer:       /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number:          019D
Signing time:             Sun 25 Jan 2026 02:51:47 +0000
Manifest this update:     Sun 25 Jan 2026 02:51:46 +0000
Manifest next update:     Sun 01 Feb 2026 02:51:46 +0000
Files and hashes:         1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: mrXVkKdVJRAxyHrE4WO8IiUQBb/R3/3jRWJfC7PX0sw=)
                          2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: D3GA9GI+1ZpOYK34vPRNum86peu3I5thgqu5liFntgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
        Validity
            Not Before: Jan 25 02:51:46 2026 GMT
            Not After : Feb  1 02:51:46 2026 GMT
        Subject: CN=69758542-b28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:ea:37:13:0b:e7:5a:52:4f:db:41:d2:2a:
                    1d:59:00:dd:30:64:ae:7e:90:23:35:61:9e:7b:5d:
                    20:b4:a1:2d:99:59:0a:28:c2:02:38:9b:81:0b:19:
                    da:e3:0a:85:c5:7a:41:6f:1e:cb:8c:58:7f:01:28:
                    33:3e:59:bf:ab:c0:68:ce:dc:9c:3d:55:f7:e1:ca:
                    d4:a7:49:61:70:5b:90:dc:09:62:99:52:2c:42:31:
                    27:c2:14:10:84:b2:31:21:85:40:44:20:78:ae:e9:
                    41:05:7f:63:f3:56:95:ed:49:d9:e9:e2:25:09:27:
                    50:a6:37:a8:f0:a1:99:74:c9:6b:e7:fb:76:14:40:
                    d8:ee:fd:ed:9d:56:9f:1a:23:e0:7a:4a:09:9f:13:
                    af:16:92:a7:e5:44:6a:e2:53:ec:21:de:d5:15:c1:
                    85:56:bc:1c:16:63:8e:d1:59:c9:2c:a2:0c:ca:9c:
                    a2:3a:fb:d9:c4:80:56:fc:33:da:59:fe:dc:d8:64:
                    e0:12:fc:7a:bb:40:b3:2c:0a:9c:63:e9:c1:90:61:
                    9e:64:27:aa:eb:53:73:53:da:95:cb:9b:19:b0:ca:
                    15:75:af:e9:07:b2:42:57:55:ee:dc:95:66:09:86:
                    33:29:90:bf:26:70:3b:b8:07:66:d6:87:06:d1:dc:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F3:33:8E:21:4D:08:53:19:36:1A:D4:07:9E:51:BD:8D:57:57:47
            X509v3 Authority Key Identifier:
                keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:fc:88:34:d1:f9:68:15:1b:49:1c:bc:74:86:4a:29:cd:
         59:30:ea:65:b8:8f:0c:81:ba:40:d6:a3:75:d7:7f:b5:18:0e:
         ac:37:15:a2:19:77:fc:f4:bf:05:76:f9:6f:9c:15:55:a9:2d:
         ac:ff:43:aa:b0:c6:d9:f2:9b:70:6e:4f:95:83:2a:b0:99:29:
         39:2d:c0:b8:fd:8b:77:9d:a7:85:1c:d1:42:d8:f2:c9:b1:d8:
         60:06:7e:b2:d9:02:4c:fb:56:34:43:b8:ae:50:84:23:f9:d4:
         44:d0:fc:fa:88:77:20:93:bf:dd:9f:fe:13:3c:01:d4:84:87:
         99:f4:75:bb:a2:77:33:d8:d1:ea:0e:27:cb:8e:08:9b:5f:d7:
         2a:62:4a:c7:61:ab:1d:af:08:15:49:af:eb:ee:d9:4d:b4:ab:
         93:78:6a:3f:bb:0f:83:e8:18:02:74:0b:9c:fd:ed:3c:f5:7d:
         e1:c4:12:dc:65:01:b9:e2:7c:cd:fd:17:e5:7a:ea:a4:9a:ef:
         77:9e:eb:0b:97:1c:a0:aa:f0:7c:c4:3a:13:70:e5:99:52:1a:
         02:2d:7f:45:49:83:72:fe:42:7a:32:5f:4e:2f:b7:67:2a:b5:
         0b:47:74:42:99:5a:3d:59:a4:a6:26:2a:dd:98:56:7c:36:6d:
         22:eb:4b:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE
RENBQjgzNDIwHhcNMjYwMTI1MDI1MTQ2WhcNMjYwMjAxMDI1MTQ2WjAYMRYwFAYD
VQQDDA02OTc1ODU0Mi1iMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnXqNxML51pST9tB0iodWQDdMGSufpAjNWGee10gtKEtmVkKKMICOJuBCxna
4wqFxXpBbx7LjFh/ASgzPlm/q8BoztycPVX34crUp0lhcFuQ3AlimVIsQjEnwhQQ
hLIxIYVARCB4rulBBX9j81aV7UnZ6eIlCSdQpjeo8KGZdMlr5/t2FEDY7v3tnVaf
GiPgekoJnxOvFpKn5URq4lPsId7VFcGFVrwcFmOO0VnJLKIMypyiOvvZxIBW/DPa
Wf7c2GTgEvx6u0CzLAqcY+nBkGGeZCeq61NzU9qVy5sZsMoVda/pB7JCV1Xu3JVm
CYYzKZC/JnA7uAdm1ocG0dw+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/zM44h
TQhTGTYa1AeeUb2NV1dHMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4
RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj
TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApYvyINNH5aBUbSRy8dIZKKc1ZMOpluI8MgbpA1qN113+1GA6sNxWi
GXf89L8FdvlvnBVVqS2s/0OqsMbZ8ptwbk+VgyqwmSk5LcC4/Yt3naeFHNFC2PLJ
sdhgBn6y2QJM+1Y0Q7iuUIQj+dRE0Pz6iHcgk7/dn/4TPAHUhIeZ9HW7oncz2NHq
DifLjgibX9cqYkrHYasdrwgVSa/r7tlNtKuTeGo/uw+D6BgCdAuc/e089X3hxBLc
ZQG54nzN/Rfleuqkmu93nusLlxygqvB8xDoTcOWZUhoCLX9FSYNy/kJ6Ml9OL7dn
KrULR3RCmVo9WaSmJirdmFZ8Nm0i60sG
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:45 2026 by rpki-client