This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File:                     1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier:          1GNWwS2TbSHuASy//D8zAT6TF5I+w8kDw1sh0WMEBjU=
Subject key identifier:   E9:D5:03:A9:40:00:5B:A8:51:9C:C5:AD:6E:99:1E:E5:4A:F9:23:F3
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number:          03B2
Signing time:             Tue 03 Feb 2026 00:11:42 +0000
Manifest this update:     Tue 03 Feb 2026 00:11:41 +0000
Manifest next update:     Tue 10 Feb 2026 00:11:41 +0000
Files and hashes:         1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: INRa5YZhULA/rfyuVUXmdv9nFUAbC3N4sK/qmeHcJv0=)
                          2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: fbrDSF5x4VvuEIAZikU3PfgDzKLrpZQ/e/7qrjWSoZs=)
                          3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: RiHqUd66nfKg9bYuuoXV02nBPSlEq4ADYP42Ecnza24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: Feb  3 00:11:41 2026 GMT
            Not After : Feb 10 00:11:41 2026 GMT
        Subject: CN=69813d3e-a2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:5d:53:6e:9f:ed:b2:e8:85:42:0a:fc:03:
                    ba:dc:0b:12:f7:f4:75:af:87:f4:f6:d5:d1:0c:75:
                    d1:80:31:51:8d:4d:69:38:1e:57:29:1f:02:1e:90:
                    29:a5:ff:05:f1:97:aa:e6:27:72:7f:30:0c:2e:06:
                    e5:41:89:ff:51:8b:ab:da:fb:4e:af:0d:92:04:e2:
                    91:d1:df:64:e7:ea:ce:6a:aa:88:1b:89:7b:80:74:
                    20:d3:f7:ea:69:df:56:11:1e:1d:b5:d9:58:2c:74:
                    65:c5:95:25:72:92:e2:fd:93:01:3a:6a:ec:37:f4:
                    ac:91:ea:7e:b9:f3:0c:78:a8:20:82:cf:07:2a:b0:
                    68:48:43:f0:a9:0d:d2:fb:3b:03:af:d3:0d:9d:58:
                    28:a4:3c:1b:7f:f3:57:40:ae:50:52:73:26:a3:93:
                    8f:f8:c4:16:1f:cc:78:64:f3:bb:4c:b2:ff:0a:a0:
                    cd:fc:58:ac:e7:78:91:f1:ca:45:04:3b:c2:a3:ef:
                    dd:39:02:69:68:7c:4a:a0:0c:de:a4:42:c2:cf:1e:
                    34:cb:86:f8:3d:e6:81:74:fb:38:75:cd:87:bf:28:
                    64:2f:3d:2c:79:1b:5d:5a:5e:52:13:1d:b3:bf:9d:
                    fc:de:56:1e:e7:a6:94:4b:68:67:59:0c:1a:01:eb:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D5:03:A9:40:00:5B:A8:51:9C:C5:AD:6E:99:1E:E5:4A:F9:23:F3
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3a:7f:1c:48:4b:a2:7e:20:d5:f9:c6:b2:9c:88:79:95:a5:
         d1:7c:90:f5:3f:30:77:1f:0b:59:b7:8d:88:45:3a:48:97:94:
         95:16:38:eb:3b:f5:f7:cb:af:91:b7:e9:9e:a3:a7:c4:81:88:
         1a:02:a9:77:c4:86:56:56:d4:d9:d4:97:20:c5:d7:d8:41:37:
         f0:3c:43:9f:03:38:e3:97:5e:3d:06:b2:ff:11:79:88:23:02:
         14:70:f9:d9:01:6b:d8:f5:29:05:8e:5d:d6:4f:1c:aa:bb:ff:
         78:c4:9e:11:3d:97:9f:53:02:f0:1d:5c:1b:bf:26:37:7a:06:
         50:19:36:ca:1a:05:59:60:c2:a7:76:b8:a6:91:22:e2:3e:fd:
         d4:67:db:01:55:e4:4a:ca:ab:6c:5a:4b:04:7f:93:ef:95:f2:
         85:93:c0:67:8f:2f:bd:b0:d8:80:4e:e3:cf:80:e1:06:30:ad:
         d0:e6:f8:ce:b2:8b:8e:fd:e4:5a:00:57:b1:dd:58:78:6f:24:
         26:5d:90:3b:45:7e:3c:ed:27:a1:d0:03:e4:e6:03:92:90:84:
         08:a4:e5:d9:76:7b:c3:84:78:f4:1d:53:22:c6:8a:28:28:7a:
         02:21:71:24:43:fb:e8:4e:3b:5d:b8:38:68:40:44:ad:48:3a:
         f5:80:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:12:36 2026 by rpki-client