This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File:                     _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier:          JovZB+Hz5K209WyLTHdLM4moabr0sCVIP7wMTcu57Q8=
Subject key identifier:   F0:2C:63:37:5B:09:E1:53:DC:D9:C7:2B:DB:2D:1D:CB:9C:0F:FB:52
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer:       /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number:          01D1
Signing time:             Sun 25 Jan 2026 02:09:10 +0000
Manifest this update:     Sun 25 Jan 2026 02:09:09 +0000
Manifest next update:     Sun 01 Feb 2026 02:09:09 +0000
Files and hashes:         1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: kq0FMcFFqHsDSC8Kn7OqeoCirCMpv/h7ILDVwNNfWhM=)
                          2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
                          rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
        Validity
            Not Before: Jan 25 02:09:09 2026 GMT
            Not After : Feb  1 02:09:09 2026 GMT
        Subject: CN=69757b46-8ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:13:3f:0a:0f:e3:42:ca:c5:e9:33:98:7d:
                    c3:11:2f:cb:6b:62:8b:e9:00:00:ea:52:5c:77:cd:
                    24:3f:9e:b1:d2:68:5a:42:13:4c:aa:6f:6d:23:a5:
                    e4:f9:97:24:23:be:5e:6e:e2:2f:c5:f4:43:e8:72:
                    54:cb:bc:9c:23:64:6c:69:9c:6e:27:a3:b5:b7:ed:
                    8d:f6:1c:ec:e7:5c:d2:b3:ef:f2:c2:cb:82:75:d8:
                    ef:21:05:6c:c6:b5:48:1f:ca:a0:a9:7c:80:02:8e:
                    4f:16:bf:11:db:ab:e7:a9:e9:ef:3e:c8:34:28:46:
                    a5:9d:72:fd:d8:e4:53:1d:af:99:c2:cc:af:95:1a:
                    0f:df:22:52:48:cb:dc:cb:3f:df:95:c5:54:1c:36:
                    72:0d:37:7f:02:09:71:68:8b:1e:18:d4:c7:38:9b:
                    41:64:e4:86:cb:72:f7:82:09:31:56:e5:be:3a:28:
                    1d:2a:90:67:c4:34:5b:5e:e6:2d:2a:b6:0d:0f:d5:
                    80:62:4b:4b:a0:38:bd:c2:18:2f:68:3f:c6:b8:18:
                    96:6f:19:37:bd:5f:21:e8:6e:53:95:92:59:fe:a1:
                    8e:f1:92:8c:a8:2f:55:1b:83:95:58:6c:53:f7:ab:
                    65:57:54:da:74:64:b2:60:49:f1:97:f5:13:0e:df:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2C:63:37:5B:09:E1:53:DC:D9:C7:2B:DB:2D:1D:CB:9C:0F:FB:52
            X509v3 Authority Key Identifier:
                keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c1:2b:ad:9b:2a:61:04:20:71:9b:fd:69:1b:21:b7:ef:ef:
         2e:4a:79:ab:0b:08:97:13:7c:32:14:ce:21:80:62:d8:8f:a7:
         cc:c5:c1:e0:5b:25:f2:a7:da:db:6b:d4:08:a9:5f:5f:5c:90:
         61:25:be:2e:d1:57:ba:73:0a:9c:cf:72:38:12:d3:e2:56:fa:
         fa:0f:60:5b:f3:8e:79:20:d8:06:90:fe:70:18:9a:52:a3:f0:
         40:c3:6e:bc:71:21:ef:72:0c:d2:b1:dd:48:42:bf:12:61:93:
         7c:4d:5d:f8:74:a0:3d:49:da:1b:b6:ce:35:32:8f:e6:77:1f:
         92:a6:51:16:e6:b6:2e:e1:39:39:3c:e2:81:a2:dd:c4:17:1c:
         51:ab:c7:f7:41:f1:91:49:37:86:36:bd:f7:e1:92:b1:c3:6e:
         40:ad:b5:53:af:05:81:67:c3:94:aa:42:4d:f1:da:1e:15:35:
         f4:86:c3:30:09:e0:e9:9f:db:fa:8e:a9:43:dd:4e:87:5f:3c:
         ff:e5:01:33:72:10:b1:c3:6e:d7:bc:c2:08:c9:0f:c0:c7:39:
         4d:c0:ce:77:6c:68:6f:19:40:13:b2:14:6f:b5:b5:67:72:6f:
         a3:28:f2:68:be:50:d3:15:e5:09:05:a0:e1:c2:c9:e6:2f:bc:
         f9:67:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:16 2026 by rpki-client