This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File:                     3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier:          KDJeDQTM4O42AouXCMKW+BrEnbkqzjgJB6vFkWWqgOQ=
Subject key identifier:   82:AA:69:CC:83:39:59:B3:5B:5C:B5:E4:CE:74:86:71:7B:59:70:29
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer:       /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number:          F1
Signing time:             Sat 17 Jan 2026 04:26:31 +0000
Manifest this update:     Sat 17 Jan 2026 04:26:31 +0000
Manifest next update:     Sat 24 Jan 2026 04:26:31 +0000
Files and hashes:         1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: t/j5J6JVZVX3zP5Ol4MwssgGxX1yWER1a0GXmMu44tY=)
                          2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: sBDPY7rsFbT6fhu5rc+2MguV1coxbEaU8Tzb3L7ehlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
        Validity
            Not Before: Jan 17 04:26:31 2026 GMT
            Not After : Jan 24 04:26:31 2026 GMT
        Subject: CN=696b0f77-0eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:60:9e:37:ca:9e:45:f2:bd:94:55:e8:50:
                    98:96:94:b3:4d:77:e5:cb:98:2e:44:da:30:54:c8:
                    ee:2d:9c:ba:70:cc:d0:31:9d:35:96:57:f9:a6:d4:
                    58:a3:a5:86:49:e3:21:88:e6:c8:d4:d3:d3:91:dc:
                    56:77:8b:cd:0f:ae:12:0e:5d:eb:d1:0a:d2:f0:13:
                    77:97:91:ea:0f:a7:e7:d6:66:33:1c:54:a7:0c:d3:
                    72:47:a7:74:57:9b:37:86:fb:09:45:85:21:58:3a:
                    2d:b3:9b:db:19:64:18:19:27:de:70:3e:8b:d6:aa:
                    13:bf:b6:66:e5:5e:91:1c:82:bf:a6:20:ec:5b:83:
                    4a:de:3a:70:ea:57:c3:68:74:2a:1c:98:cf:fa:7f:
                    04:30:e9:82:e0:52:08:b9:81:44:2a:d2:da:cd:07:
                    ca:10:4d:6b:9c:93:f6:00:bb:87:b9:1a:f6:48:83:
                    66:a5:33:ee:aa:24:1a:9d:be:64:f8:c5:eb:ac:c4:
                    45:c3:96:72:c0:1f:ad:2a:13:18:09:88:61:a7:bd:
                    16:67:eb:e3:8b:a3:c2:ee:ee:37:7b:d7:77:93:d2:
                    21:b8:c4:2b:a6:72:23:c9:80:4b:76:ec:ed:70:f6:
                    d3:df:96:81:d2:04:34:7d:9a:c4:65:1a:03:c8:4d:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:69:CC:83:39:59:B3:5B:5C:B5:E4:CE:74:86:71:7B:59:70:29
            X509v3 Authority Key Identifier:
                keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:38:01:75:37:25:0b:39:c0:2e:f4:ff:84:fc:47:6b:c9:b0:
         38:d7:33:26:dc:86:bb:87:51:f7:45:fb:f0:14:eb:2e:b6:6e:
         33:66:39:7d:bb:14:5b:da:8a:97:51:d9:7f:bb:3a:50:80:37:
         3c:0d:2f:ba:b2:21:d3:a5:75:9a:ee:0e:24:bd:9d:c8:21:ce:
         74:6d:f0:4a:67:97:db:10:07:79:f9:a8:c5:09:b9:6d:7e:a4:
         60:7d:79:d1:69:4d:59:cd:d7:57:d0:e2:aa:2b:37:2d:ae:17:
         fd:c4:04:2f:e0:e8:c8:9f:38:55:e7:c8:b6:6d:36:24:34:77:
         c4:cf:44:88:0b:28:d1:7c:55:0b:ac:d5:7f:8a:f9:5c:10:81:
         19:20:c3:65:3d:fe:58:73:55:44:b8:59:d2:d9:07:25:0e:cc:
         4c:30:2e:f1:a6:ab:7b:db:08:c4:60:75:f2:d3:9e:18:2a:d5:
         d5:5d:4b:27:e9:99:d4:2d:87:0f:ab:cc:a0:98:0f:91:87:a4:
         1b:0d:e8:8a:94:e3:46:7b:40:98:c2:11:2c:b8:5c:27:df:cc:
         50:6b:bd:47:21:ef:5e:27:8f:90:a3:3e:00:93:92:95:dc:a3:
         29:e0:f3:e6:10:58:4c:5c:a3:50:8b:7c:db:6d:1c:e6:f8:27:
         02:21:63:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE
QTU2ODdCRjAwHhcNMjYwMTE3MDQyNjMxWhcNMjYwMTI0MDQyNjMxWjAYMRYwFAYD
VQQDDA02OTZiMGY3Ny0wZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA71hgnjfKnkXyvZRV6FCYlpSzTXfly5guRNowVMjuLZy6cMzQMZ01llf5ptRY
o6WGSeMhiObI1NPTkdxWd4vND64SDl3r0QrS8BN3l5HqD6fn1mYzHFSnDNNyR6d0
V5s3hvsJRYUhWDots5vbGWQYGSfecD6L1qoTv7Zm5V6RHIK/piDsW4NK3jpw6lfD
aHQqHJjP+n8EMOmC4FIIuYFEKtLazQfKEE1rnJP2ALuHuRr2SINmpTPuqiQanb5k
+MXrrMRFw5ZywB+tKhMYCYhhp70WZ+vji6PC7u43e9d3k9IhuMQrpnIjyYBLduzt
cPbT35aB0gQ0fZrEZRoDyE1q3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKqacyD
OVmzW1y15M50hnF7WXApMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1
MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn
VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDOAF1NyULOcAu9P+E/EdrybA41zMm3Ia7h1H3RfvwFOsutm4zZjl9
uxRb2oqXUdl/uzpQgDc8DS+6siHTpXWa7g4kvZ3IIc50bfBKZ5fbEAd5+ajFCblt
fqRgfXnRaU1ZzddX0OKqKzctrhf9xAQv4OjInzhV58i2bTYkNHfEz0SICyjRfFUL
rNV/ivlcEIEZIMNlPf5Yc1VEuFnS2QclDsxMMC7xpqt72wjEYHXy054YKtXVXUsn
6ZnULYcPq8ygmA+Rh6QbDeiKlONGe0CYwhEsuFwn38xQa71HIe9eJ4+Qoz4Ak5KV
3KMp4PPmEFhMXKNQi3zbbRzm+CcCIWMP
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:22 2026 by rpki-client