This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File:                     p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier:          tKC2DWp//sbYK21y8SQmG8hSIpivHZVQ2o3ZlvZH8PE=
Subject key identifier:   62:3C:3C:C9:06:7C:EB:A7:F5:A2:1B:CB:BC:90:4B:D7:61:31:22:82
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer:       /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number:          35
Signing time:             Sun 25 Jan 2026 06:37:28 +0000
Manifest this update:     Sun 25 Jan 2026 06:37:28 +0000
Manifest next update:     Sun 01 Feb 2026 06:37:28 +0000
Files and hashes:         1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: IDtEI0Tp1dIwZc5IZ0jCfM0FTaCGld07zMSMlmbBj3E=)
                          2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: bkWwsW8ZSkcQ9LnA3de1DycHNu5Ebnxo4aw0ZyQ67BE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
                          rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
        Validity
            Not Before: Jan 25 06:37:28 2026 GMT
            Not After : Feb  1 06:37:28 2026 GMT
        Subject: CN=6975ba28-28ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:d2:a3:0b:ec:e8:98:92:61:95:1c:95:b4:
                    fe:85:5b:21:e4:af:55:da:0e:88:58:7c:48:e0:0f:
                    0d:a5:cb:96:f7:7d:34:47:2e:20:79:fc:c2:20:1a:
                    4b:26:7f:65:37:2e:ce:91:43:4f:c5:4c:45:88:4f:
                    5e:d6:31:e2:ca:2f:55:31:66:bd:e6:39:61:df:ff:
                    02:a3:e1:05:e9:41:93:1e:98:c3:42:aa:b3:f5:8a:
                    d1:e7:e9:48:a6:42:35:ba:fb:88:4b:f5:2e:31:d8:
                    48:8e:02:9a:38:72:9e:d3:24:86:91:ac:ca:4c:7c:
                    84:29:45:c8:3a:46:0a:bb:e0:1f:9d:3f:b9:e3:d3:
                    88:e1:bc:e2:f4:c6:79:74:33:96:d8:3d:96:11:98:
                    47:f5:12:ba:b3:7f:b3:7e:f1:23:13:e5:ea:92:4c:
                    92:c7:39:e6:e5:34:80:d2:77:13:29:6b:c1:28:29:
                    5a:8e:3f:73:41:2c:53:d2:ec:21:6d:1d:a6:70:2f:
                    e6:a6:4a:90:60:c3:8f:bf:2c:0c:71:6c:bb:5e:b2:
                    d1:86:ba:27:f4:1b:e2:29:31:ae:87:10:1d:47:36:
                    85:3f:91:31:88:9f:24:8a:04:3d:c4:20:c6:77:9d:
                    ce:f2:73:7d:df:7b:91:e7:f6:7d:75:cc:db:c7:98:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3C:3C:C9:06:7C:EB:A7:F5:A2:1B:CB:BC:90:4B:D7:61:31:22:82
            X509v3 Authority Key Identifier:
                keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:db:db:6b:5d:f2:84:84:43:c0:f2:d2:8b:f9:95:43:e5:23:
         ad:cd:05:42:9b:ef:f5:85:2a:78:2f:9a:54:cf:c9:52:39:01:
         1e:3d:36:0b:18:ca:42:31:bc:d0:40:f1:ca:21:d8:df:ee:05:
         ca:01:d0:06:2a:2a:4b:1a:ca:e4:53:53:82:12:7c:10:94:16:
         2b:39:55:11:5f:63:e8:4e:ad:d3:cc:15:c9:92:22:26:55:17:
         18:9c:71:91:9d:3d:b5:d7:50:f7:12:94:34:b6:4d:e3:7a:a5:
         64:e3:9f:ec:38:21:a1:0c:46:bc:4f:6b:2e:cf:90:89:71:5b:
         14:17:7f:7c:1b:36:99:9d:11:d4:87:06:8a:4e:2a:56:7f:cd:
         7b:89:95:31:e0:26:85:88:27:77:71:ac:31:1f:74:78:99:f1:
         1b:45:01:c2:e9:7b:af:d1:f8:68:4e:8d:2a:c6:87:97:89:83:
         e4:49:9c:a5:08:f1:56:bc:aa:b2:1c:26:73:c2:ee:78:4b:c9:
         ba:97:09:8d:d4:35:4f:21:b9:9f:30:71:fa:a7:af:89:ad:ec:
         0c:f6:3c:ec:dd:3e:29:06:60:51:b3:6e:8d:ff:4d:4c:3d:86:
         f4:5d:ce:ff:fd:f1:65:ba:24:0e:a5:06:28:82:76:3a:d9:58:
         d9:9f:e1:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RDRFMjExMC8GA1UEBRMoQTdGNzdGMjA0N0QzNTY4QzA0M0EzMzhDNzkzMkIwQTIz
QzhGNjg3MTAeFw0yNjAxMjUwNjM3MjhaFw0yNjAyMDEwNjM3MjhaMBgxFjAUBgNV
BAMMDTY5NzViYTI4LTI4YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoUNKjC+zomJJhlRyVtP6FWyHkr1XaDohYfEjgDw2ly5b3fTRHLiB5/MIgGksm
f2U3Ls6RQ0/FTEWIT17WMeLKL1UxZr3mOWHf/wKj4QXpQZMemMNCqrP1itHn6Uim
QjW6+4hL9S4x2EiOApo4cp7TJIaRrMpMfIQpRcg6Rgq74B+dP7nj04jhvOL0xnl0
M5bYPZYRmEf1Erqzf7N+8SMT5eqSTJLHOeblNIDSdxMpa8EoKVqOP3NBLFPS7CFt
HaZwL+amSpBgw4+/LAxxbLtestGGuif0G+IpMa6HEB1HNoU/kTGInySKBD3EIMZ3
nc7yc33fe5Hn9n11zNvHmF8zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYjw8yQZ8
66f1ohvLvJBL12ExIoIwHwYDVR0jBBgwFoAUp/d/IEfTVowEOjOMeTKwojyPaHEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzE0RDJFN0JBQUVE
QTExRjA5RDQzRTIyRUM0RjlBRTAyL3BfZF9JRWZUVm93RU9qT01lVEt3b2p5UGFI
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcF9kX0lFZlRWb3dFT2pPTWVUS3dvanlQYUhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
NEUyLzE0RDJFN0JBQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL3BfZF9JRWZUVm93
RU9qT01lVEt3b2p5UGFIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFjb22td8oSEQ8Dy0ov5lUPlI63NBUKb7/WFKngvmlTPyVI5AR49NgsY
ykIxvNBA8coh2N/uBcoB0AYqKksayuRTU4ISfBCUFis5VRFfY+hOrdPMFcmSIiZV
FxiccZGdPbXXUPcSlDS2TeN6pWTjn+w4IaEMRrxPay7PkIlxWxQXf3wbNpmdEdSH
BopOKlZ/zXuJlTHgJoWIJ3dxrDEfdHiZ8RtFAcLpe6/R+GhOjSrGh5eJg+RJnKUI
8Va8qrIcJnPC7nhLybqXCY3UNU8huZ8wcfqnr4mt7Az2POzdPikGYFGzbo3/TUw9
hvRdzv/98WW6JA6lBiiCdjrZWNmf4RQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:36 2026 by rpki-client