This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File:                     r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier:          /oP0cwhwAC3l4aLUsjofIfFx+DOMQEW7b6B6DzH5y9Q=
Subject key identifier:   2A:EB:0F:FB:00:4E:A8:1B:54:15:3C:9D:D5:10:84:66:49:4C:55:60
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       038B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number:          0381
Signing time:             Sun 11 Jan 2026 00:02:18 +0000
Manifest this update:     Sun 11 Jan 2026 00:02:18 +0000
Manifest next update:     Sun 18 Jan 2026 00:02:18 +0000
Files and hashes:         1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: raQWahpH/ap8PCWks63bc8k3ILgo1OQ4C1TQFiZ3Rgg=)
                          2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: gy37y3m86p91aNaJLGl/OcCXrwdEyv/PB6GXlm+9olg=)
                          3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: 5YLYcly93145UErNSmHTZCyYs7eD4zU0w+fdftiuni0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Jan 11 00:02:18 2026 GMT
            Not After : Jan 18 00:02:18 2026 GMT
        Subject: CN=6962e88a-8377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:49:6d:69:0b:d1:28:b7:a2:46:75:6f:ea:
                    a6:4e:cf:de:ce:0a:1f:90:04:1e:13:d7:88:1d:76:
                    be:68:b6:f7:a7:4f:42:89:07:6b:e7:5b:2e:06:de:
                    a9:03:fd:9f:ca:48:a3:b1:2f:a8:39:b6:f6:7d:a7:
                    64:74:cb:59:66:58:59:7b:15:28:09:06:e3:71:f7:
                    5b:9a:19:e8:60:55:21:04:21:a3:8f:af:1a:7b:99:
                    0a:f4:b1:36:07:54:e7:31:86:52:3b:24:53:d3:4c:
                    14:2c:e7:0d:e0:b4:76:ca:c5:9b:f1:01:16:63:7a:
                    f6:8f:62:b9:96:46:dc:10:69:24:bf:e1:fb:20:c6:
                    da:f4:aa:2e:e9:1c:75:be:81:5d:d4:4b:c9:e7:d2:
                    6c:7e:f0:04:6c:23:9f:a4:60:43:0a:68:22:3c:8a:
                    d1:70:e3:78:0d:f2:e0:34:c2:b2:43:0f:09:63:fd:
                    79:fb:47:73:7a:3d:11:42:cd:99:27:bd:73:d1:75:
                    de:cb:23:38:e6:ad:2c:1b:06:ac:67:fa:a7:89:ed:
                    2d:14:dd:58:ae:3b:16:3c:9f:fd:b6:de:e9:c5:7e:
                    31:26:6e:14:1f:bb:c9:c6:e1:4a:cf:fc:5a:5e:5c:
                    9c:b1:e8:3f:2b:7b:c4:f1:a6:3f:d6:79:cb:f6:77:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EB:0F:FB:00:4E:A8:1B:54:15:3C:9D:D5:10:84:66:49:4C:55:60
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:69:39:a2:83:09:b3:f1:50:d5:0c:b8:f3:7e:db:ff:72:b6:
         65:5f:2d:d7:12:c3:be:53:8a:02:95:2b:f0:27:76:3b:40:62:
         d9:e7:77:a5:50:64:ae:8b:fc:3e:a8:bc:2f:5a:c8:01:61:be:
         76:5b:bc:98:c4:4f:d7:e0:7e:43:94:82:a4:d4:14:14:18:0a:
         4c:c8:fd:68:b6:6d:b2:38:ff:4e:a5:56:24:ef:38:32:79:d2:
         b8:17:87:e4:7d:f0:3f:1b:40:de:f7:8b:c0:51:3f:d5:99:f7:
         d6:8d:ef:b6:34:58:cc:90:19:74:9e:17:33:ac:55:dc:d5:27:
         16:4f:86:5d:3a:e1:41:16:82:47:d1:0e:17:7e:07:af:ee:0c:
         70:a1:c2:8d:65:bd:aa:13:29:9c:46:fd:b7:a7:71:2e:96:f8:
         dd:d7:99:e0:c8:9d:0e:7b:d7:3a:f8:a8:56:e9:c0:40:d6:36:
         bb:12:5d:37:5a:58:bc:69:43:7f:90:6c:0c:8b:50:3a:4f:c3:
         fb:cf:67:16:d3:24:65:df:1a:ee:fb:fc:fa:81:ff:e3:66:d9:
         af:f5:f0:e6:56:b4:0e:f1:74:d3:16:50:94:7d:c7:64:70:fb:
         85:52:6a:f8:69:26:d4:42:68:de:a3:70:8c:42:df:3d:d2:4a:
         38:1d:ff:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI3NTgxMTAvBgNVBAUTKEFGNTU1ODFCQTEyN0UyMDkwQTBBNTQ2MkZFN0JDRTcw
NjE2RjJDREMwHhcNMjYwMTExMDAwMjE4WhcNMjYwMTE4MDAwMjE4WjAYMRYwFAYD
VQQDDA02OTYyZTg4YS04Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxj9JbWkL0Si3okZ1b+qmTs/ezgofkAQeE9eIHXa+aLb3p09CiQdr51suBt6p
A/2fykijsS+oObb2fadkdMtZZlhZexUoCQbjcfdbmhnoYFUhBCGjj68ae5kK9LE2
B1TnMYZSOyRT00wULOcN4LR2ysWb8QEWY3r2j2K5lkbcEGkkv+H7IMba9Kou6Rx1
voFd1EvJ59JsfvAEbCOfpGBDCmgiPIrRcON4DfLgNMKyQw8JY/15+0dzej0RQs2Z
J71z0XXeyyM45q0sGwasZ/qnie0tFN1YrjsWPJ/9tt7pxX4xJm4UH7vJxuFKz/xa
Xlycseg/K3vE8aY/1nnL9nfywQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrrD/sA
TqgbVBU8ndUQhGZJTFVgMB8GA1UdIwQYMBaAFK9VWBuhJ+IJCgpUYv57znBhbyzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc1OC80QzdBMjg2OEQz
NkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRna0tDbFJpX252T2NHRnZM
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IxVllHNkVuNGdrS0NsUmlfbnZPY0dGdkxOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Qjc1OC80QzdBMjg2OEQzNkUxMUVDQjI2MTQ0NTNDNEY5QUUwMi9yMVZZRzZFbjRn
a0tDbFJpX252T2NHRnZMTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFaTmigwmz8VDVDLjzftv/crZlXy3XEsO+U4oClSvwJ3Y7QGLZ53el
UGSui/w+qLwvWsgBYb52W7yYxE/X4H5DlIKk1BQUGApMyP1otm2yOP9OpVYk7zgy
edK4F4fkffA/G0De94vAUT/VmffWje+2NFjMkBl0nhczrFXc1ScWT4ZdOuFBFoJH
0Q4Xfgev7gxwocKNZb2qEymcRv23p3Eulvjd15ngyJ0Oe9c6+KhW6cBA1ja7El03
Wli8aUN/kGwMi1A6T8P7z2cW0yRl3xru+/z6gf/jZtmv9fDmVrQO8XTTFlCUfcdk
cPuFUmr4aSbUQmjeo3CMQt890ko4Hf+7
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:02 2026 by rpki-client