This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
File:                     1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json)
Hash identifier:          0FXXuMi503vuOwknLpTQofFHU+pEPQr/AJJ0hx5jh8A=
Subject key identifier:   71:59:1E:DA:F0:EC:0B:71:76:E6:1C:EE:48:70:27:D0:15:29:B7:AD
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Certificate issuer:       /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
Manifest number:          5F
Signing time:             Sat 17 Jan 2026 06:12:43 +0000
Manifest this update:     Sat 17 Jan 2026 06:12:43 +0000
Manifest next update:     Sat 24 Jan 2026 06:12:43 +0000
Files and hashes:         1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: B420RDKnGtKVJUtO7FxtZHHByzOkjvmJYI8jEer/hdk=)
                          2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
        Validity
            Not Before: Jan 17 06:12:43 2026 GMT
            Not After : Jan 24 06:12:43 2026 GMT
        Subject: CN=696b285b-caab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:9f:d4:0b:ea:d0:c2:76:d6:e5:58:67:41:
                    c2:b3:09:ba:5d:8c:e1:9a:03:b9:06:73:10:b0:ba:
                    17:8b:3f:e3:b4:12:5e:2d:d2:4f:f2:e4:12:f7:65:
                    77:f5:04:d8:e7:81:0a:b3:ed:96:eb:5e:ed:d0:ff:
                    b1:0e:29:a4:62:be:98:3c:1d:eb:34:3f:e1:2f:20:
                    25:e4:a4:eb:fb:7d:29:8b:d3:32:5e:da:5f:ee:30:
                    91:e2:04:b6:1c:82:cf:12:8b:ae:79:c1:7a:05:95:
                    1a:b2:cf:ed:a5:a0:b8:c4:90:b1:13:d1:69:a6:19:
                    61:07:2b:f7:eb:54:6c:d8:8d:5f:4c:31:2e:66:e7:
                    8e:81:6e:26:cf:ae:8d:96:4a:ad:c7:79:2f:e7:7a:
                    51:d4:d6:21:de:55:49:00:28:aa:18:f9:2b:b1:dc:
                    a3:7f:76:47:61:2a:4b:d3:ce:6b:cd:25:89:3b:5f:
                    44:32:05:3c:c3:09:36:54:79:00:34:ac:d6:a6:10:
                    2d:d6:57:fb:b5:b3:74:79:f8:d2:35:c6:c5:9b:b4:
                    8c:f0:5d:1a:dd:b3:3b:fb:ff:c7:39:ad:03:8e:ec:
                    a5:49:90:16:2c:4f:08:14:06:0a:2b:c2:c2:07:6a:
                    12:59:cf:ab:7d:34:20:d5:20:ef:89:5c:7f:94:35:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:1E:DA:F0:EC:0B:71:76:E6:1C:EE:48:70:27:D0:15:29:B7:AD
            X509v3 Authority Key Identifier:
                keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d4:69:aa:62:fc:44:eb:81:96:cf:91:2b:8f:42:0e:2b:16:
         fa:41:7f:b0:d6:31:ac:cd:f5:e8:83:48:ad:40:fd:be:8b:d7:
         2d:4d:4d:d5:fc:95:6f:9c:fe:d4:e8:39:2f:1a:0e:37:8e:f6:
         c3:1d:73:97:f3:7e:dd:89:35:7c:5c:bd:a5:c1:d7:84:36:72:
         0e:0f:cc:f2:01:9b:2d:08:e0:85:77:d9:b1:63:76:8e:34:e2:
         9a:46:3d:27:15:83:0b:79:87:db:11:13:19:b5:4f:b8:39:62:
         9f:81:ab:58:24:0e:32:a5:a9:93:3f:b9:18:17:51:b4:2a:5c:
         12:16:c0:91:27:0f:5c:fe:0f:4a:07:d3:5e:30:5c:a6:5d:b4:
         cd:67:4e:b0:bd:8f:3e:66:a5:6f:d0:83:2b:d8:69:c7:c6:55:
         77:23:6d:82:b8:16:c0:69:12:9d:f9:d1:11:a3:a0:04:5a:08:
         fe:ce:33:67:17:0d:c3:af:27:9d:21:89:2f:71:67:a7:3c:18:
         ca:e8:82:01:03:d2:3d:fc:13:e6:b0:4b:cb:7c:69:2e:6c:eb:
         d8:74:15:c7:3f:e6:92:02:c8:5a:20:cd:a6:63:e4:5d:41:a8:
         6b:a0:84:2e:cb:8f:52:79:a3:b2:16:e1:9e:3f:c3:2f:a0:ce:
         7c:1f:73:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDdEMzExMC8GA1UEBRMoRDVCNEQ2QzQ4MEJCRTk2QkFCQzg3MjI0ODUwMjVENEM0
NUZFQzc4QTAeFw0yNjAxMTcwNjEyNDNaFw0yNjAxMjQwNjEyNDNaMBgxFjAUBgNV
BAMMDTY5NmIyODViLWNhYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcsZ/UC+rQwnbW5VhnQcKzCbpdjOGaA7kGcxCwuheLP+O0El4t0k/y5BL3ZXf1
BNjngQqz7ZbrXu3Q/7EOKaRivpg8Hes0P+EvICXkpOv7fSmL0zJe2l/uMJHiBLYc
gs8Si655wXoFlRqyz+2loLjEkLET0WmmGWEHK/frVGzYjV9MMS5m546BbibPro2W
Sq3HeS/nelHU1iHeVUkAKKoY+Sux3KN/dkdhKkvTzmvNJYk7X0QyBTzDCTZUeQA0
rNamEC3WV/u1s3R5+NI1xsWbtIzwXRrdszv7/8c5rQOO7KVJkBYsTwgUBgorwsIH
ahJZz6t9NCDVIO+JXH+UNe31AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcVke2vDs
C3F25hzuSHAn0BUpt60wHwYDVR0jBBgwFoAU1bTWxIC76WuryHIkhQJdTEX+x4ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzM4RkIyMTVDNkM1
OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1cnlISWtoUUpkVEVYLXg0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWJUV3hJQzc2V3VyeUhJa2hRSmRURVgteDRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
N0QzLzM4RkIyMTVDNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1
cnlISWtoUUpkVEVYLXg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAfUaapi/ETrgZbPkSuPQg4rFvpBf7DWMazN9eiDSK1A/b6L1y1NTdX8
lW+c/tToOS8aDjeO9sMdc5fzft2JNXxcvaXB14Q2cg4PzPIBmy0I4IV32bFjdo40
4ppGPScVgwt5h9sRExm1T7g5Yp+Bq1gkDjKlqZM/uRgXUbQqXBIWwJEnD1z+D0oH
014wXKZdtM1nTrC9jz5mpW/QgyvYacfGVXcjbYK4FsBpEp350RGjoARaCP7OM2cX
DcOvJ50hiS9xZ6c8GMroggED0j38E+awS8t8aS5s69h0Fcc/5pICyFogzaZj5F1B
qGughC7Lj1J5o7IW4Z4/wy+gznwfc/s=
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:01:51 2026 by rpki-client