This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
File:                     raiu0ysVuH5hElLSnR4dW95YFkY.mft (raw, json)
Hash identifier:          6FunGHRvYyajE1OPQod51pIflr/E65gHo4QXgrkmClk=
Subject key identifier:   F6:E6:84:54:54:6D:0A:F7:B7:E8:DD:06:55:9B:C9:34:47:5B:AB:13
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Certificate issuer:       /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial:       35F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
Manifest number:          3572
Signing time:             Sat 31 Jan 2026 14:16:22 +0000
Manifest this update:     Sat 31 Jan 2026 14:16:22 +0000
Manifest next update:     Sat 07 Feb 2026 14:16:22 +0000
Files and hashes:         1: raiu0ysVuH5hElLSnR4dW95YFkY.crl (hash: 5dGccleJ9al14UCdYPDkG6jPuzPN9zVyhz/oIgpxUW8=)
                          2: E2446DD228AA11E79582F36BC4F9AE02.roa (hash: ZJSRmEu8ZSRqTlcPEDfX6hYX2fzOC+1QV4+V6A/VckU=)
                          3: 7C836BA46C8E11EEA38B9554C4F9AE02.roa (hash: aQYfeFSthN9oof4UX3Yota3Vi8A1Xibnwm7ZRxMjljY=)
                          4: DCD41E8E98D511F0B3824663C4F9AE02.roa (hash: EWlSDhZJpxeihw3aeM/sQAa10hdfChLc1MQCCqHexiw=)
                          5: 662A2F2286B411E6BAEB2614C4F9AE02.roa (hash: MRkFXSabw9acLO92YltXC7hoPQwJsDF6DX+Xsg12tnY=)
                          6: DB3F9CA4817B11F0BDC51985C4F9AE02.roa (hash: JAIKKCo9C8qw6fr8uLdaMchlj/iGB4GqwIN2CeXneAc=)
                          7: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (hash: iJ1kB8ujNY3bRF9sFR+ioHj2q77p/d9prgJ8hOEg/Tw=)
                          8: C9B8A270483411ECA6C7C085C4F9AE02.roa (hash: nJvnNt0eJsmGuLUjItzV/NgJ7+2UZ1r5MhffEQ8w0sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 14:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13817 (0x35f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
        Validity
            Not Before: Jan 31 14:16:22 2026 GMT
            Not After : Feb  7 14:16:22 2026 GMT
        Subject: CN=697e0eb6-ccae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:19:91:a4:c0:25:e4:7d:0e:ec:61:68:ba:
                    95:61:1b:6c:39:61:2f:b1:19:f0:38:e2:16:a8:0b:
                    41:73:cc:44:a4:fd:e3:a3:ac:30:41:f7:c1:e8:15:
                    aa:74:2a:cc:0c:f5:22:47:89:c5:0e:22:6e:71:fd:
                    a1:72:bd:c1:6d:c9:83:a6:a4:8d:84:45:29:57:7d:
                    1c:d2:77:28:50:4a:cb:0f:43:e0:dc:f8:44:1c:7b:
                    de:1b:2c:e3:f5:e3:c8:9f:7c:a4:42:c0:9e:0b:12:
                    73:00:47:e1:6d:b5:f3:96:05:6b:97:34:52:1c:a9:
                    08:3a:a3:5f:b8:a4:7e:bf:39:5d:43:73:2d:c3:77:
                    0e:19:79:75:59:82:da:d7:f7:1e:bf:71:ec:9e:bf:
                    9e:37:16:4e:db:fc:fe:b8:96:75:13:e6:da:10:ff:
                    14:d7:64:a4:14:39:72:41:5f:53:dd:82:fc:27:54:
                    51:98:f4:2e:dd:4d:e5:b7:29:37:b8:07:5f:0d:13:
                    6a:d1:63:c2:86:28:81:99:01:03:8d:40:b1:62:2f:
                    4f:ee:74:e0:4b:2b:a9:29:c0:80:33:47:4b:a6:98:
                    cc:20:78:d2:06:e3:cf:13:87:e4:2d:8a:0b:f1:03:
                    6d:ab:4d:dc:9a:03:83:d2:18:bc:3f:88:23:9c:aa:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:84:54:54:6D:0A:F7:B7:E8:DD:06:55:9B:C9:34:47:5B:AB:13
            X509v3 Authority Key Identifier:
                keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:f8:32:e9:d1:ba:af:e1:5e:db:51:7e:51:7b:89:62:fc:
         39:c5:65:a2:d2:06:1d:ad:dc:ad:98:ef:b3:fb:71:1c:a8:4b:
         47:7a:34:6b:7d:f9:ab:c3:c3:79:9b:87:04:2f:89:33:18:d0:
         ea:19:34:6b:27:90:5d:bf:a9:96:4a:c3:ac:da:22:c9:7d:bd:
         cd:80:8a:50:e8:a2:fa:a4:de:a8:73:50:df:9a:5f:e5:15:62:
         7f:e9:11:98:84:07:3c:65:3a:09:a4:c6:23:9b:d9:6d:f4:d0:
         2a:c2:ec:c6:7b:bd:8b:b6:c4:13:8f:29:d8:30:6f:da:3e:d5:
         c6:1c:8f:9c:62:2d:2f:ae:5d:44:50:1b:05:07:92:74:d7:d0:
         a1:ba:43:e5:7d:87:1a:34:42:06:54:0e:20:6e:5b:86:e9:d3:
         2f:fc:c9:6d:b7:d5:26:8a:80:83:1d:fa:ba:b0:83:22:5a:10:
         01:dc:18:4a:bc:3f:04:c0:6c:4b:e2:5a:dd:2d:c6:ee:3c:d1:
         6b:fa:95:69:a5:0a:05:4e:a2:95:37:99:77:d2:e0:35:4f:8e:
         75:67:d9:da:00:1f:63:ad:05:bb:bf:6b:2d:8e:a1:f7:88:12:
         5e:85:5c:51:c4:76:34:66:65:69:1c:44:8a:52:e4:9f:84:91:
         a4:e1:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 18:16:33 2026 by rpki-client