This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
File:                     1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json)
Hash identifier:          v1sQJtRwUyMgFh0nw3ZtSvTvPRSNHSnEYKLTYq+ek/E=
Subject key identifier:   3D:60:1D:69:38:DC:03:CC:16:F1:AF:8C:DC:DE:AA:03:1A:45:42:17
Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
Certificate issuer:       /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
Manifest number:          01F8
Signing time:             Sun 25 Jan 2026 01:47:35 +0000
Manifest this update:     Sun 25 Jan 2026 01:47:34 +0000
Manifest next update:     Sun 01 Feb 2026 01:47:34 +0000
Files and hashes:         1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: K7PWfsSw1+JszQOXId0S2KgwzFWc5IkuZp0Pg+1Q1eQ=)
                          2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
        Validity
            Not Before: Jan 25 01:47:34 2026 GMT
            Not After : Feb  1 01:47:34 2026 GMT
        Subject: CN=69757637-d9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:ba:7b:99:d2:1a:09:a2:ea:b3:d0:c2:8b:
                    9a:97:ce:ab:22:f8:52:e5:9c:dd:8e:b0:fa:ae:98:
                    fa:e3:d4:93:44:f4:51:5f:75:b0:50:43:0f:24:05:
                    cb:fa:3e:17:8d:53:ad:42:df:53:c1:47:f7:0d:9e:
                    23:49:d4:3d:c8:6a:26:bd:c6:24:b6:c8:43:10:49:
                    29:db:d1:65:83:db:b3:61:32:02:04:67:2f:9a:73:
                    7f:9e:1c:eb:1d:b2:13:fe:c4:4a:f5:62:1a:77:85:
                    68:d8:46:44:ad:ba:42:ec:4b:f4:18:6c:90:44:e2:
                    67:a4:1c:7b:09:8a:82:8c:2f:62:ae:ff:5a:e9:58:
                    ee:e6:41:e6:1b:47:04:8e:96:f9:16:13:de:5d:dd:
                    b9:e5:21:52:a6:b4:5f:57:10:b6:4a:37:3b:3c:41:
                    d4:09:f2:38:85:f2:60:b1:3c:2b:6c:a2:91:c0:d9:
                    9e:07:3a:78:3e:71:1d:74:be:a3:fb:39:22:f8:5d:
                    06:eb:1a:aa:37:4e:3e:e6:f4:35:6d:31:76:c0:54:
                    d6:0e:b1:fc:4c:f7:5a:c2:09:d2:c4:fa:83:ff:9a:
                    24:99:ea:a9:18:b4:fe:4c:13:f5:6e:cb:17:ec:0e:
                    38:ab:67:9d:cd:82:0b:c5:9b:27:7f:4d:c4:80:ce:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:1D:69:38:DC:03:CC:16:F1:AF:8C:DC:DE:AA:03:1A:45:42:17
            X509v3 Authority Key Identifier:
                keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:15:7f:73:3e:14:ae:19:59:ab:81:5a:3f:42:e8:90:d9:
         81:3f:18:94:e4:55:2a:ed:7d:f6:d5:a9:29:f3:76:63:a1:16:
         2f:62:56:d5:83:ca:29:91:1a:19:67:00:48:2f:ab:83:12:47:
         31:d6:6e:fe:0a:ca:04:b6:a2:e5:68:d2:b1:44:ea:88:e8:70:
         72:a4:6f:0b:d3:cb:b9:b5:e9:56:05:c0:01:09:c6:e7:26:d5:
         3d:06:c7:8a:7f:2c:dc:34:d8:84:f6:54:55:32:ea:59:36:69:
         16:ae:c9:26:77:b4:08:a4:72:d5:e2:94:d6:a0:13:08:04:01:
         c0:00:b5:25:e6:0a:25:bb:e2:72:bb:c7:fc:6d:01:76:c9:af:
         34:8f:35:66:51:03:e3:04:a2:cf:66:e2:18:a5:bc:43:b6:de:
         fb:d1:08:e0:98:11:63:bc:36:5b:b4:61:eb:36:1e:d7:f7:b8:
         5c:01:8f:42:a6:f5:74:1a:fd:ea:09:dc:70:b0:17:24:c9:78:
         0c:7a:cc:49:6d:ed:90:f2:30:20:32:f8:81:2f:3e:c7:54:a8:
         2c:6e:e5:e0:08:01:83:57:b3:25:39:56:bb:81:1a:dc:98:de:
         76:31:5d:5a:f0:9a:ff:3c:79:d9:43:a8:d6:c4:35:43:be:62:
         1a:0c:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:50 2026 by rpki-client