This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File:                     piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier:          DBUp7jA09JbcOPexmWF/tzIgIWwLSh8X3PjCJ+2U1pk=
Subject key identifier:   BE:06:78:63:60:0D:31:D4:0B:0D:61:FE:BD:B3:CD:74:64:99:7E:31
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer:       /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number:          16
Signing time:             Sat 17 Jan 2026 06:55:50 +0000
Manifest this update:     Sat 17 Jan 2026 06:55:49 +0000
Manifest next update:     Sat 24 Jan 2026 06:55:49 +0000
Files and hashes:         1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: XaO97NfH5PxW8Q07Tc7NdIP7pr5WS0f4tCLpRjORb9A=)
                          2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: JplNXQO2Wx5ZVsUnY8QzEKP+B0R8iAE4R1iut1PwRdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
        Validity
            Not Before: Jan 17 06:55:49 2026 GMT
            Not After : Jan 24 06:55:49 2026 GMT
        Subject: CN=696b3276-c0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:b9:47:cb:bb:d5:63:84:db:47:ce:52:02:
                    19:55:55:96:c7:a7:0c:20:ad:21:f7:b5:26:c8:f1:
                    ad:de:a6:dd:d6:30:fd:7d:a3:95:12:01:2c:80:ac:
                    13:4d:3f:e1:cf:03:c3:6c:e6:4c:e7:3f:e2:53:cf:
                    de:93:84:8b:7f:97:00:96:cf:21:a5:e6:32:65:3b:
                    10:3d:72:d8:0e:38:09:c5:c6:92:89:24:ee:85:b7:
                    de:c9:c8:24:43:9b:45:6b:64:14:58:5f:e5:85:ad:
                    e6:0c:8e:35:71:10:89:97:3c:ca:83:87:a1:d2:98:
                    7b:3d:bc:84:ab:a9:dc:09:20:42:9e:71:d2:b1:4e:
                    11:d1:ac:90:a2:36:02:5e:81:41:cc:0e:85:1c:ba:
                    a0:4a:6a:e8:46:5f:da:6e:2f:0b:2f:ff:d4:03:54:
                    6c:d8:81:46:44:8f:32:e2:f2:ab:55:37:f5:dd:09:
                    bc:7c:c8:61:e3:42:7e:54:c9:00:0d:f0:46:46:dc:
                    c1:a9:3a:62:82:13:2c:9c:b8:a8:4c:a5:9a:1c:6a:
                    9f:06:61:49:6c:7d:57:15:6d:92:7e:d8:98:e3:4f:
                    2c:46:fe:b3:57:fe:d3:6e:14:62:de:5f:a3:f0:ae:
                    16:7b:d2:34:e4:82:18:57:05:43:88:5d:b2:a3:0b:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:78:63:60:0D:31:D4:0B:0D:61:FE:BD:B3:CD:74:64:99:7E:31
            X509v3 Authority Key Identifier:
                keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:fa:e1:f9:88:f8:0c:2e:85:00:65:2d:51:aa:ad:5d:a3:
         1f:e5:ab:19:65:56:5b:ae:dc:1d:26:bc:e1:8c:12:47:4f:68:
         35:79:b4:24:ba:21:3e:be:d5:12:58:36:f6:f6:19:a2:aa:89:
         98:4d:e2:ef:04:20:a3:e9:13:94:3f:1d:60:b7:82:b4:0a:7d:
         da:68:63:52:6e:15:78:3f:5d:36:01:66:46:2b:39:53:bf:5c:
         9e:f2:b8:29:67:14:09:ae:86:95:f9:7a:72:a8:cd:80:f6:e9:
         bf:a8:19:eb:c5:2c:db:c7:26:83:af:8b:a9:bf:ab:cc:57:90:
         a2:e7:71:91:fb:01:84:7e:1e:04:4b:38:a8:4d:c0:2f:d0:bd:
         02:2e:cf:61:ef:8f:3e:d9:88:6f:f6:14:20:84:fd:20:1b:a9:
         6c:25:1d:eb:c0:be:65:27:28:a9:6f:8c:cd:10:f2:16:a2:23:
         3c:a6:f6:1e:e1:67:d3:73:29:d6:8c:fe:3f:3c:05:d3:b0:05:
         0b:f3:5d:fe:b7:f9:7b:c8:e6:49:37:60:ff:74:50:86:2f:2c:
         19:f0:23:4c:f1:9e:e3:ea:9c:b2:0e:cb:66:ca:d9:60:86:b4:
         cb:d8:2c:4f:1f:a2:f4:ab:4b:30:9c:6b:2e:19:75:f4:88:a4:
         a1:14:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:12:53 2026 by rpki-client