This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File:                     aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier:          RanI83iXlMyg8VKix7/lpEVbTMwu67VevqjAPn7cdVY=
Subject key identifier:   FB:B8:E9:28:90:D9:2E:FB:C8:9F:A7:60:D2:38:7D:51:8C:6A:A6:71
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       3595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number:          3543
Signing time:             Mon 26 Jan 2026 14:17:23 +0000
Manifest this update:     Mon 26 Jan 2026 14:17:22 +0000
Manifest next update:     Mon 02 Feb 2026 14:17:22 +0000
Files and hashes:         1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: Rbcra9ZqzdZGmfCneoDmKGky8Sa93i2iSrXLs5P9EhI=)
                          2: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: jqW67pSJSIsRiaBgE6s/DK3BAL3JeM6fk0sbod9Ihss=)
                          3: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: D48/pxU7MzDuerY2hyHqIJz8Ni5AYoPlrPyxeWvQn8M=)
                          4: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: H76rrDZxK8h/g51b1krAIQ2ulCKuPO82m4joCbnFfEs=)
                          5: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: kN3zyoollwJXDugnYM0yHLk48cRpRCSo426eiI4jnbk=)
                          6: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: tqonfMb2T4kEzGLFTTW3PK/xQqepl87jr8dA78s4VGI=)
                          7: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: rb6m6NgtqMNqMVoEYBcUFewdPh6xLzsagwAw8cSDCbE=)
                          8: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=)
                          9: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: m0T5p+j/9s+rm9D6YdSh//2Alx2Eae+Du8lbaB1hR7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 14:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13717 (0x3595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Jan 26 14:17:22 2026 GMT
            Not After : Feb  2 14:17:22 2026 GMT
        Subject: CN=69777772-32b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:2d:74:3d:d2:89:b5:97:70:98:09:9a:0c:
                    79:81:77:0f:88:d1:de:c0:db:cf:92:ed:77:3b:4c:
                    8e:f3:97:04:f5:5f:fa:6f:0d:0b:e1:22:47:6a:6c:
                    e9:01:20:30:6d:17:e6:8b:cb:77:5c:3f:02:a1:5f:
                    68:e9:3b:bd:a6:18:64:ef:66:d5:a2:a1:2a:0c:5c:
                    25:48:6b:98:f9:7a:ac:4e:25:3d:96:19:99:33:17:
                    d7:fc:3b:f9:91:b6:c8:79:5f:5c:7e:21:99:6a:d0:
                    6d:e8:a9:04:89:86:5a:33:7a:7e:81:12:1e:a7:12:
                    29:34:47:bc:57:73:b1:5a:53:be:85:61:41:d7:bd:
                    27:89:f2:58:80:57:7b:1b:56:90:a0:7b:8d:85:ac:
                    1b:62:ff:68:ca:a9:96:53:26:3b:ff:f6:b9:54:c8:
                    07:69:65:44:03:42:e9:a9:51:d3:19:56:7d:57:fb:
                    be:32:7d:30:5c:7d:05:fc:a2:c5:32:71:10:17:16:
                    49:86:bb:73:b2:14:08:9a:b5:44:a5:7c:59:07:29:
                    db:d7:ad:6e:98:a2:99:61:1f:4a:f6:4a:f1:fa:fb:
                    86:93:90:62:94:dd:91:f5:ad:a8:e2:83:53:bb:74:
                    24:3f:0e:eb:ee:f9:1b:e2:0e:9f:98:35:03:39:46:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B8:E9:28:90:D9:2E:FB:C8:9F:A7:60:D2:38:7D:51:8C:6A:A6:71
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:72:a5:0b:91:30:01:86:82:be:7c:e1:c2:8b:ae:fe:26:07:
         c5:50:ae:9d:4e:62:48:0b:9e:9f:5d:85:93:31:1a:48:57:73:
         eb:21:72:cb:f2:5b:37:61:4c:14:d2:69:00:d6:cb:2f:12:4e:
         b1:2c:c2:c1:5e:22:93:ca:7b:c5:b0:ba:6a:59:7c:70:bd:01:
         61:9c:d3:30:f3:8a:2c:ae:7a:45:03:1f:3a:4e:5a:2a:1e:8e:
         54:e5:99:97:79:50:29:75:5d:95:a7:86:f7:50:3d:2a:1e:d8:
         42:bc:ed:0a:90:1b:eb:06:01:10:b6:60:8d:fe:1b:82:3b:71:
         b3:8f:9e:2d:37:0e:96:f7:ca:10:b0:2f:0e:80:b8:e2:55:9f:
         15:a8:8e:cb:f2:56:3e:e1:c7:e7:cc:44:6c:57:d2:d2:62:49:
         c5:e9:60:c9:18:96:10:0c:94:16:ce:0c:a8:0e:03:58:57:cc:
         12:2e:7d:b2:ae:6d:a3:fe:68:4c:ff:e7:7b:6e:4b:5f:96:cc:
         10:f6:55:64:b9:05:01:61:b3:5e:20:55:6d:a9:38:e7:f9:3c:
         6d:2a:1b:a1:1f:2c:c2:fc:6a:c8:67:a2:ce:c9:60:ee:c7:d0:
         3f:e9:79:e7:05:5a:46:2f:26:1f:d7:c2:a0:06:4b:a4:2c:79:
         c4:ff:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:52:59 2026 by rpki-client