This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File:                     etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier:          pWvtyKYuNQqsDKj3gYVozW+enL/7Uy/A/TrbbiKhH28=
Subject key identifier:   29:E5:62:3E:D0:E3:B9:14:CC:C8:DE:E6:A8:A5:CB:BA:39:F5:EF:5A
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer:       /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number:          A1
Signing time:             Mon 19 Jan 2026 05:33:04 +0000
Manifest this update:     Mon 19 Jan 2026 05:33:03 +0000
Manifest next update:     Mon 26 Jan 2026 05:33:03 +0000
Files and hashes:         1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: 5w0XtoyeMzp5Sc5ELmkz2nwJaNvXs0Jvn7TetDTpUVA=)
                          2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: X1rRaXgadVtl9VfEE2Fs4BNuO0hzLgvUwGhsT4mAVns=)
                          3: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: X7yiw9KkbMvfPSh6NmhVBMacnnndeqJr+fXdsNTW1D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
                          rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 05:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
        Validity
            Not Before: Jan 19 05:33:03 2026 GMT
            Not After : Jan 26 05:33:03 2026 GMT
        Subject: CN=696dc210-ffe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:26:09:ef:72:09:84:a4:75:5b:a2:a4:22:
                    af:97:70:ed:b0:b5:e3:8e:4b:19:e6:0b:64:2b:d7:
                    83:bd:f2:b8:18:9a:2a:3a:e5:8f:c6:c5:dd:b8:48:
                    ae:0f:90:7a:05:94:83:2e:24:6f:8b:6d:1d:fe:44:
                    1b:f5:49:c8:47:11:2d:f9:d8:e5:07:d9:81:04:b9:
                    95:2d:bd:c9:9a:4c:40:de:48:3f:db:4f:26:d6:61:
                    82:cb:6d:94:29:af:f6:3c:b6:4a:fb:53:d0:41:85:
                    c5:88:97:c5:e2:6b:72:22:d3:ea:0c:9a:dd:2b:aa:
                    28:93:e2:04:88:54:46:5f:d7:bc:bb:4b:c9:16:e2:
                    ad:d8:9e:ac:57:a2:c0:86:6d:f3:7d:11:e6:ea:ed:
                    2c:18:36:b5:3c:94:83:4e:15:24:ba:48:f7:69:a7:
                    a2:81:75:fe:6b:9a:2f:32:60:17:6e:55:45:28:54:
                    c7:45:a0:d0:8d:c2:3b:ff:73:a5:76:0e:24:d0:6c:
                    6c:f5:eb:03:59:f2:b9:d1:f5:ba:82:ac:00:e1:09:
                    ec:2a:f5:fc:fa:fe:d8:ff:d2:d4:07:5a:c0:28:bc:
                    01:c7:14:c5:a8:e6:0d:01:fc:5a:72:4e:64:2f:cb:
                    dc:a2:5d:f6:1d:0e:47:1a:ca:00:a6:16:df:fd:be:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:62:3E:D0:E3:B9:14:CC:C8:DE:E6:A8:A5:CB:BA:39:F5:EF:5A
            X509v3 Authority Key Identifier:
                keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:26:70:d2:b6:23:29:3a:44:db:19:50:22:7b:2a:d4:c2:b6:
         3d:48:6c:d4:29:59:00:a1:8b:eb:1f:37:ac:97:28:ce:87:50:
         ba:8e:23:0f:54:85:42:7f:39:36:35:85:3f:84:36:45:e4:59:
         77:a9:d0:67:0a:5c:dc:8b:fd:a2:e9:45:8d:d3:4d:76:e5:58:
         c8:aa:45:4f:5d:d2:e5:af:0d:e7:6c:3d:0d:28:8c:97:99:d7:
         5e:b8:4d:ba:ea:52:2c:9b:1b:fc:6b:7c:66:f8:d1:65:f0:ce:
         fe:83:19:96:b6:b7:e3:f6:37:d3:dd:c9:a9:25:6c:8b:5f:9a:
         4c:26:a9:08:51:af:11:60:f6:c4:98:f8:59:58:48:52:6e:a5:
         d1:17:63:4d:52:b3:ad:35:fc:06:ab:8e:c8:11:19:37:01:d1:
         55:36:2c:0e:92:6e:6b:eb:55:bf:a9:31:6d:41:05:bd:8d:73:
         e7:ae:44:c3:e5:9a:63:a1:a1:e0:7b:c3:04:7d:e8:c9:e0:e3:
         f9:2c:5a:33:a6:e9:95:3c:63:7b:26:d7:d9:ac:a4:7b:c3:d9:
         0b:1a:e4:13:bb:15:dc:73:b7:11:39:5b:8a:14:fd:67:14:15:
         05:0d:a7:48:75:1e:a5:ef:6b:93:a9:e8:70:b7:1b:00:7d:0c:
         45:54:1a:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNDQjExMTAvBgNVBAUTKDdBRDc5RUVCM0I5MjgzNTREOTUwREM2RTRGOEJFQ0NC
MjVDMkZDNEIwHhcNMjYwMTE5MDUzMzAzWhcNMjYwMTI2MDUzMzAzWjAYMRYwFAYD
VQQDDA02OTZkYzIxMC1mZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlU8mCe9yCYSkdVuipCKvl3DtsLXjjksZ5gtkK9eDvfK4GJoqOuWPxsXduEiu
D5B6BZSDLiRvi20d/kQb9UnIRxEt+djlB9mBBLmVLb3JmkxA3kg/208m1mGCy22U
Ka/2PLZK+1PQQYXFiJfF4mtyItPqDJrdK6ook+IEiFRGX9e8u0vJFuKt2J6sV6LA
hm3zfRHm6u0sGDa1PJSDThUkukj3aaeigXX+a5ovMmAXblVFKFTHRaDQjcI7/3Ol
dg4k0Gxs9esDWfK50fW6gqwA4QnsKvX8+v7Y/9LUB1rAKLwBxxTFqOYNAfxack5k
L8vcol32HQ5HGsoAphbf/b5etQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnlYj7Q
47kUzMje5qily7o59e9aMB8GA1UdIwQYMBaAFHrXnus7koNU2VDcbk+L7MslwvxL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0NCMS8yRDg0MzY5ODE2
ODYxMUYwODkxNjk4NUJDNEY5QUUwMi9ldGVlNnp1U2cxVFpVTnh1VDR2c3l5WENf
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19Fcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0NCMS8yRDg0MzY5ODE2ODYxMUYwODkxNjk4NUJDNEY5QUUwMi9ldGVlNnp1U2cx
VFpVTnh1VDR2c3l5WENfRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/JnDStiMpOkTbGVAieyrUwrY9SGzUKVkAoYvrHzeslyjOh1C6jiMP
VIVCfzk2NYU/hDZF5Fl3qdBnClzci/2i6UWN00125VjIqkVPXdLlrw3nbD0NKIyX
mddeuE266lIsmxv8a3xm+NFl8M7+gxmWtrfj9jfT3cmpJWyLX5pMJqkIUa8RYPbE
mPhZWEhSbqXRF2NNUrOtNfwGq47IERk3AdFVNiwOkm5r61W/qTFtQQW9jXPnrkTD
5ZpjoaHge8MEfejJ4OP5LFozpumVPGN7JtfZrKR7w9kLGuQTuxXcc7cROVuKFP1n
FBUFDadIdR6l72uTqehwtxsAfQxFVBr2
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:20:37 2026 by rpki-client