This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File:                     v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier:          guJs2ysg/8Yp9SBMpPw0mUuix52Jvp+wdC0OqoX53AA=
Subject key identifier:   B5:74:7F:0A:6E:D4:91:22:32:96:F6:7B:F0:ED:38:02:F1:56:B5:D0
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer:       /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number:          010B
Signing time:             Sat 17 Jan 2026 04:06:13 +0000
Manifest this update:     Sat 17 Jan 2026 04:06:12 +0000
Manifest next update:     Sat 24 Jan 2026 04:06:12 +0000
Files and hashes:         1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: 8dhS3KSZYBQMmZq1Ji8aw2S/gkNWoWmjUokQWv3sS48=)
                          2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
                          rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
        Validity
            Not Before: Jan 17 04:06:12 2026 GMT
            Not After : Jan 24 04:06:12 2026 GMT
        Subject: CN=696b0ab4-5344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:3f:17:ad:5e:08:af:83:51:a0:16:93:f7:
                    5d:a7:f7:9d:b1:f9:5c:61:d0:cf:bb:e2:e5:d9:fd:
                    7f:f4:be:84:19:b8:11:61:81:29:d3:5f:c2:d6:22:
                    20:96:19:2d:69:7b:ed:a8:94:4a:eb:3d:89:0c:9f:
                    71:23:a5:e0:bd:25:f4:82:ca:d4:8d:ae:80:bb:7e:
                    11:17:31:29:27:a7:84:4c:00:fb:26:59:ea:d5:09:
                    6d:db:a4:fa:8a:f9:3f:0c:ef:5f:2a:9b:b8:97:bf:
                    aa:ce:37:c7:da:bf:e5:9f:4a:a4:2b:a7:9d:bf:67:
                    4c:44:75:9f:03:bf:bb:3d:df:26:5f:27:b0:0b:23:
                    63:99:20:ee:ec:12:d9:37:10:69:68:71:4b:f4:34:
                    c0:0c:88:52:e5:64:b4:3f:f1:ef:19:8d:b6:a2:2c:
                    67:97:b2:9b:08:8d:a3:ac:d0:5f:e2:87:ef:43:44:
                    d9:15:ae:35:12:e1:66:5e:16:b9:c0:90:d0:e5:52:
                    a7:bf:97:89:c3:be:c5:75:c6:74:92:0b:19:94:a8:
                    1a:ef:09:25:3d:e6:7a:62:58:43:51:09:bd:99:d7:
                    76:03:cc:1a:a1:da:51:ae:9a:50:3a:fe:d3:b4:2f:
                    62:2d:b4:73:55:ee:cf:8b:41:8e:9a:ed:69:9d:17:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:7F:0A:6E:D4:91:22:32:96:F6:7B:F0:ED:38:02:F1:56:B5:D0
            X509v3 Authority Key Identifier:
                keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:35:38:7e:f4:69:dd:2b:46:c3:b4:5a:64:d9:9e:30:6b:08:
         d5:27:03:bf:52:df:0d:0b:e3:84:e1:78:46:43:ac:ac:1c:7a:
         85:6b:dd:2d:55:70:27:79:f1:b1:c2:c7:ef:88:07:2b:db:48:
         c1:c7:91:76:b8:b4:91:e7:7a:2e:f0:69:94:46:e7:1b:4d:0b:
         2c:d3:36:77:05:b3:d2:60:68:3b:f9:dd:a9:a2:dc:10:23:a6:
         8e:30:a0:9c:ff:3c:4a:c6:cf:80:51:ab:3a:14:9f:1f:d5:d6:
         11:eb:ad:03:b0:41:d0:c6:7b:32:f5:b3:03:36:93:1f:67:9c:
         92:a2:33:30:46:38:60:fa:49:fe:66:6f:37:72:bc:4f:24:64:
         05:79:6a:64:9e:72:a7:5e:88:54:78:18:46:87:a4:60:3e:d0:
         b7:b9:bc:57:1c:a6:b8:c9:27:34:5a:e0:8c:c9:3b:ba:f1:97:
         fe:16:90:ea:38:15:29:ba:83:a6:43:51:80:5d:d4:ab:43:81:
         10:6a:46:44:1f:c0:1e:a9:40:8f:08:e5:90:48:0f:24:fe:93:
         09:1c:6f:e7:ac:1c:6a:ee:01:7d:07:b5:ed:ac:e6:39:e4:98:
         cd:6e:11:73:c3:21:8c:22:8e:32:ef:62:ca:bb:c9:3a:09:db:
         5f:26:18:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1
RkM0ODM0MEIwHhcNMjYwMTE3MDQwNjEyWhcNMjYwMTI0MDQwNjEyWjAYMRYwFAYD
VQQDDA02OTZiMGFiNC01MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo3g/F61eCK+DUaAWk/ddp/edsflcYdDPu+Ll2f1/9L6EGbgRYYEp01/C1iIg
lhktaXvtqJRK6z2JDJ9xI6XgvSX0gsrUja6Au34RFzEpJ6eETAD7Jlnq1Qlt26T6
ivk/DO9fKpu4l7+qzjfH2r/ln0qkK6edv2dMRHWfA7+7Pd8mXyewCyNjmSDu7BLZ
NxBpaHFL9DTADIhS5WS0P/HvGY22oixnl7KbCI2jrNBf4ofvQ0TZFa41EuFmXha5
wJDQ5VKnv5eJw77FdcZ0kgsZlKga7wklPeZ6YlhDUQm9mdd2A8waodpRrppQOv7T
tC9iLbRzVe7Pi0GOmu1pnRfxgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV0fwpu
1JEiMpb2e/DtOALxVrXQMB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB
RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0
UUZkdUFBYnp1OFpmeElOQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsNTh+9GndK0bDtFpk2Z4wawjVJwO/Ut8NC+OE4XhGQ6ysHHqFa90t
VXAnefGxwsfviAcr20jBx5F2uLSR53ou8GmURucbTQss0zZ3BbPSYGg7+d2potwQ
I6aOMKCc/zxKxs+AUas6FJ8f1dYR660DsEHQxnsy9bMDNpMfZ5ySojMwRjhg+kn+
Zm83crxPJGQFeWpknnKnXohUeBhGh6RgPtC3ubxXHKa4ySc0WuCMyTu68Zf+FpDq
OBUpuoOmQ1GAXdSrQ4EQakZEH8AeqUCPCOWQSA8k/pMJHG/nrBxq7gF9B7XtrOY5
5JjNbhFzwyGMIo4y72LKu8k6CdtfJhjV
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:14:34 2026 by rpki-client