This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
File:                     63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json)
Hash identifier:          89kjcH0e7U+JbTmlBEyd1PBG6BV6ljEa9Y4jDn4GXBw=
Subject key identifier:   75:9B:B7:86:2D:AE:3C:B5:9D:6C:D6:0A:B5:36:45:C7:BE:13:81:55
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       3648
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
Manifest number:          357C
Signing time:             Mon 26 Jan 2026 14:49:14 +0000
Manifest this update:     Mon 26 Jan 2026 14:49:14 +0000
Manifest next update:     Mon 02 Feb 2026 14:49:14 +0000
Files and hashes:         1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: eTX5Xv0xZd9NLtLgDYd3PeLXAozhXElo4IVUWLx/fqk=)
                          2: 347735B4C00511EE82324069C4F9AE02.roa (hash: E+SbuzYJYJc+GME8cIBUya/cqJ2iPCmBSt3AbbxHf5U=)
                          3: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: iiTv4dFvs8qYkfgF3pnYkG8V+Wp2PY6LvZ0UInLKWSg=)
                          4: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: ezGJQKozcuUW3mcJ1xTpbvfKd6sQifASp+0+sWOoRUs=)
                          5: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw=)
                          6: E28E6B84BB0011F0BF1A9179C4F9AE02.roa (hash: 1HyL0jFOp/LNOS6lX5w37Evjq7SXgh0FaKANZQK0ug0=)
                          7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: Ye52YKhoRR1pJu5IsuPqQlgcqyEdYJTHUS480yJoKy0=)
                          8: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: Dj0Do8WDNaHgfJooqq9+w2pv4lTIA8f1GhQ0j9uSAQs=)
                          9: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: FPx4j1dXBaHascOYpOd8k2oiJWPN4GjsVVNyHaYUFk0=)
                          10: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: mcvQNQlcuhld2qKXzWl+QqzfnRHVuxn91Aru6QJvH5g=)
                          11: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: fSQC1IxSV2pLXXpS2h1BOb1tbzY02ZJSJCMZ0KcgKy0=)
                          12: 355461A4372C11EDB1059640C4F9AE02.roa (hash: UXMc/sHwacg7EKl9CYiiq5lkl4PmM5MjtHGx+h3NtIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 14:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13896 (0x3648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jan 26 14:49:14 2026 GMT
            Not After : Feb  2 14:49:14 2026 GMT
        Subject: CN=69777eea-c865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:6d:dd:7e:43:91:48:53:a8:59:ec:c1:ec:
                    61:f1:fb:f9:cd:9f:95:57:f1:6d:72:a8:c9:b3:d6:
                    74:8b:95:dc:98:d5:78:df:fb:73:19:02:cc:71:3d:
                    dd:3d:aa:a6:df:cf:6f:e4:73:48:b8:2e:95:06:0d:
                    72:7c:bd:b0:cf:df:9a:8d:4a:0c:36:63:e0:8d:4d:
                    5c:8e:3f:6e:c8:9c:19:c3:29:91:a5:c4:27:c0:c6:
                    12:cf:0c:4b:5f:0a:60:69:68:cd:c4:1a:4f:4c:28:
                    51:e5:67:28:a7:d2:75:5f:a3:9b:54:72:a8:75:46:
                    56:51:51:b4:dc:d6:95:9f:74:3f:a5:ce:6c:f3:86:
                    32:aa:58:07:50:b0:5e:4c:11:7c:18:b9:14:00:29:
                    5c:59:3f:ce:44:65:c3:24:ed:c6:61:dc:37:a9:ea:
                    aa:50:22:df:fe:a0:c2:fd:30:c3:da:e5:14:8d:05:
                    08:8f:93:03:a8:23:71:46:7f:f7:4d:6f:78:dc:e0:
                    9f:62:c9:4c:75:67:21:fd:44:38:86:84:76:69:b6:
                    b1:25:3d:66:0a:83:c6:c5:3c:ed:eb:0e:14:bb:e4:
                    74:0e:c1:b8:2c:c0:47:80:b4:c5:ee:6a:f5:8e:58:
                    60:bd:31:01:0c:d4:aa:05:35:0b:e1:c3:99:27:cf:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:B7:86:2D:AE:3C:B5:9D:6C:D6:0A:B5:36:45:C7:BE:13:81:55
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5e:61:a3:bb:7a:a5:e5:c0:e0:b2:52:b6:2b:f1:c6:d2:ef:
         71:2f:4b:88:ec:20:43:28:d5:38:60:a0:46:51:e2:69:bf:3b:
         fe:c1:89:c5:19:83:5a:58:31:03:33:60:a8:57:ee:49:37:16:
         81:63:2c:d8:30:79:2c:3d:9d:75:9f:10:52:a2:c0:f5:2d:f5:
         0c:3c:0c:99:58:2b:a4:4a:e6:0c:cf:4e:80:eb:d9:04:2f:58:
         61:72:28:7a:1d:7c:26:b7:4d:8c:28:b5:98:7d:db:88:5f:c1:
         f0:f2:41:85:05:48:b7:f2:0b:4d:b5:10:7c:37:0a:06:a2:af:
         5c:9a:e1:89:9a:2c:fa:12:43:44:8f:ea:4a:f1:e8:84:b2:15:
         fe:cf:49:7a:1f:e6:1d:31:32:3e:65:53:9c:a5:a7:ef:58:0e:
         e9:1d:a0:e2:43:4f:ad:76:a7:1a:d3:0e:a2:f1:69:32:25:ce:
         b3:91:eb:67:3c:66:0c:a3:4a:65:f5:53:e6:36:ac:c0:70:d7:
         58:b5:8e:1e:b4:5c:a4:34:80:07:41:71:64:37:7e:eb:0d:16:
         36:a4:45:d7:35:88:0e:ee:b4:14:8b:32:05:3d:5f:ec:9d:62:
         6d:5d:38:76:ae:f8:02:fc:78:c7:47:2d:e1:a3:15:e2:42:dd:
         ec:c2:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:52:35 2026 by rpki-client