This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          aRefNkpqpmuNAHXBBV2w+iAWhM9LtfQk/V8wUs497Ws=
Subject key identifier:   8A:0C:EC:F2:64:D8:3E:13:37:8D:D6:F1:06:82:D3:CA:6D:54:20:DA
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       28F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          2684
Signing time:             Sat 24 Jan 2026 15:35:54 +0000
Manifest this update:     Sat 24 Jan 2026 15:35:53 +0000
Manifest next update:     Sat 31 Jan 2026 15:35:53 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: MqAS8S/7UGgc4gWRy4S+NgzkXOxxifr6OKHMvX6BHvY=)
                          2: 5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (hash: N1a96Bp2XVma17pAfKJ5UoTb8QNj5J00c+8i+FNuIr8=)
                          3: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: 4RqGixbnjiRWSSMZsz5o0Nq0vcwdxd+W6tsy/uuyKyU=)
                          4: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: KJ1ieShxvJs7gtOWoATO3HHi/9GVv+NZW0fG46TDOMw=)
                          5: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: /VebVtB2gpNWgw6ZNvTnR7uVpqvqNucFCcPHuD6Y3mY=)
                          6: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: +61zTYCbrxg0lkvEU/Xhwnx/hk0Ph488BDSE+C5qPdU=)
                          7: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: X4al7H6IZSpYOvqbpk8SYUAtrzrPLIqb68yIaC4bU/g=)
                          8: 406928720A2411F0A2D02B4AC4F9AE02.roa (hash: 8eGArVfOYdSLWSO+FANax1XLurPiLwrIrNraHvUnN6M=)
                          9: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: SlMnGnHGJTw9zh4hOi0MJHciRJEwPALAOUFD/r39IJA=)
                          10: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: fR2xj1lTYk/calodfmPwtM4tuJ3kJNQbL08yi/tixBk=)
                          11: E681416041C511E8BEC06D36C4F9AE02.roa (hash: Aq8N32XCDQtm390Wh19k1JiANhhFcfcimlqHuKEmpuE=)
                          12: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: niYna16irNRlmtZBxpyRCeAt3hJM5mxYia++PzmxkvU=)
                          13: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: W9ilJtbT3FDU8uYNWjyd/M47AQmFUh7MF5YPFTJXpFc=)
                          14: 411624587D2511ECA2A43549C4F9AE02.roa (hash: GuJ4Y9sxp8o3CdlaaRs5rN2aTj9swH/QSPmwZPnS9dA=)
                          15: 5C61E59E342911F09B7E033FC4F9AE02.roa (hash: daPM14StaLBSEpKpLWzwl0jfYPLnAS0ot/OLcvdSgSU=)
                          16: 379554D48E1211EFA0811E85C4F9AE02.roa (hash: ubntMGEtsmJDayuN/fPiGesqsNLnJAjuBP/Ai5jrH54=)
                          17: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: 1MhKVBhr1FCIE3XbyfyWxNr/PnCFcrhIAXC4C0I8mSE=)
                          18: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: oHo+ECJ/O1skTItJ3ufCELPifI57mULmbgxvGySOHrQ=)
                          19: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: dYqA1V20wUtpH9KFdWjPotxYVj54QCPCzHHSDznMpdA=)
                          20: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: YRVaEUusWJq/ShGXF2klZ+EodQBt+/mcs3ozyyb/SRc=)
                          21: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: 6Ughghag3M8XhF1VC7toIjsEX2pbDgfCtKXqxIceVlE=)
                          22: F47B2136202611F08C91C683C4F9AE02.roa (hash: McIIQJS116bi4A+eQiz0CorbxRZVxovY+3wZ/IF64OY=)
                          23: 2B535080E79B11EFB484D12EC4F9AE02.roa (hash: 0mC2d1pKz3Ej2zdvc2c87tYlc2CwYMMrgRKwXFKDado=)
                          24: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: sQcoDhsToQEcNc7mGLyNVTMohSNaCdO8Q2BiVsleK/Q=)
                          25: 37B8851C654F11EFACFE1271C4F9AE02.roa (hash: y+okfpFT9YQpp93U2rW8OrppiuNopYjPz1OoR+Qnj2I=)
                          26: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: Ny46hTdCHTic/U8tcqJUxV4zkHEnXaL+aV1UVZePGUA=)
                          27: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: YFq4tFQJezE/ALaFyMp+nnLfcNS/HtcXxXHVD43k3+0=)
                          28: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: KH4rcNSGK8tfemYYCLk11pmTNCXkiMJ76KYgISb1Hbw=)
                          29: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: IFtPxd0PbJXpFaQdQbABz/Z16kyTHun34h4YZ/3vB58=)
                          30: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: WoUqfiV+tV6yzbH+6jqVyv24NMrJDdeNkBAHt7u3Kjc=)
                          31: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: EyiUl8rn1/axxkgMbnkOT+Wbf/v6WSHnBy7rIZY/OMg=)
                          32: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: r+C29yNQnuCXTSlOlr8783OHQQCzhGmi0bueLCwhtlk=)
                          33: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: naq1UTFOTQIUq/99ZMv/5vXqPtne6ABUFWpYSLPsFo8=)
                          34: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: 3ufFCR0mW9We+QnFQyOrOJsAywnDfn399/eLRRaKPto=)
                          35: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: 2mOBehSzLOlEg6pGYtKJCOTxBEzrN5z5JgbqhAtegiQ=)
                          36: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: I9RlqzrRC4NcmfUDKYCrUBw08VKq1V3OwJl6oMNXL/w=)
                          37: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: M40kD4TonG66uQYOaNCDeRUYMjqNRbMx31D02gr8fIs=)
                          38: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: dLiidGD52YhEOtrfUqtoyoifYgO6MY+DC3Q5pFAWJhA=)
                          39: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: ZHTFf5tkp7gWskGYBVALUf3aVcOVqIc2MqsjL2pd7dg=)
                          40: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: 8swv3q1tRdE2xBp1BoUrrmPLsnpo8tlJTWZhFkpp8i8=)
                          41: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: S2wRNHs16NkpQF0OE9CM/o0odvQGGIVO/+whEFrHXvs=)
                          42: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: wRsIwv4NjmsvKxxLiH5Bh2mSjLn4rzYVvPoe1UL163U=)
                          43: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: pSBLALWoX/QA1UpmUqJuxZj3/DOKz/+vSP1r2OR1VGg=)
                          44: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: 2t6/u72QK0o9abc9b3gHwjINMJOQ+vO/4rSwciknXYA=)
                          45: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: O3rOOeO9NEzWJisf/+SOItZOvkqX45T7Wsg+v5VOxko=)
                          46: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: 7pdFtjbSd0Y1musq+ELiSsGGWOchEoOsPebzMdEXDYo=)
                          47: 350965D2992511EC94DB646EC4F9AE02.roa (hash: WTyE6rqSY4kQszGX6OaOQtHFnpElpKKF9/fDHZfzs04=)
                          48: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: WmTnWIPsZp2UcbFbQSrNh3JjtjUu/r34W9RYX4KGK50=)
                          49: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: rrFxKMNHt6Da3tKr2QWL8PJYOwfJNrVpuX5Yg/MllpQ=)
                          50: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: MlrQFyNLV1dCVem/E1LF0TFmlekJWbf+VquXYnzkE0Q=)
                          51: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: IUEGnMjhBVnMZEjQ10jBhTDL+8RYPNGkjfY7kR3frjU=)
                          52: 77F51DD83E0911EF9DC1A672C4F9AE02.roa (hash: 8U8ZGPRo8beOsdQqpoi6X8/fktuoA/yEdND3FwBKF+4=)
                          53: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: YPhjOopvSzxeO6gNqobHHt3HyijtcWsKn0RvJcxLbcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10483 (0x28f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jan 24 15:35:53 2026 GMT
            Not After : Jan 31 15:35:53 2026 GMT
        Subject: CN=6974e6da-fe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:89:e7:d0:e0:20:8e:ac:e2:58:cb:1b:b3:
                    1b:a5:10:d6:2f:41:2a:12:09:a4:f0:59:d2:86:35:
                    ee:a9:b3:79:5a:1b:fd:c1:21:b5:19:48:9e:e4:f5:
                    a6:64:0d:d4:1e:31:92:d1:ac:f8:8e:f4:cd:0f:13:
                    0c:a7:86:f0:7f:cc:d6:61:60:77:c4:6c:0e:da:68:
                    30:96:2f:6f:c8:13:bc:d9:de:bf:d6:20:6f:ac:78:
                    1d:61:4b:8f:99:39:51:c1:66:3d:66:1a:45:fe:6f:
                    3e:af:f7:37:38:c9:b9:ff:48:05:c2:c2:a6:84:90:
                    cf:a1:41:d0:70:bf:a1:a7:36:2f:7a:c0:e2:83:bf:
                    bf:c3:01:56:83:09:1d:a5:a8:5c:d7:b8:c9:bd:59:
                    82:64:76:80:aa:89:d3:0b:63:e6:cb:39:c7:a7:62:
                    91:e4:3e:1e:4c:77:7f:a9:47:1c:7a:b8:75:04:13:
                    b9:c1:c3:9d:e2:1c:d4:11:f3:c6:98:6b:99:9f:bd:
                    52:6a:9c:ee:92:af:c6:47:67:0b:b2:f8:99:10:70:
                    16:27:d3:ea:10:7a:bf:0c:01:00:de:f1:e3:56:a2:
                    3b:32:6b:95:55:7b:ea:c4:a9:51:37:c7:24:97:49:
                    a4:04:83:25:43:0e:a8:e6:68:dc:28:23:48:3f:31:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0C:EC:F2:64:D8:3E:13:37:8D:D6:F1:06:82:D3:CA:6D:54:20:DA
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:72:cd:a0:05:c5:de:9f:a7:4c:c0:83:93:48:24:80:0c:a4:
         35:4d:29:40:b7:e7:b6:49:40:27:92:be:d4:2d:d6:52:ab:3b:
         81:2e:5f:52:87:60:f6:4f:28:55:8e:5b:7e:64:30:49:2d:2d:
         70:65:6b:3b:c0:a0:c0:9e:00:23:df:b1:85:19:75:5e:3f:37:
         fd:db:03:a5:c4:ca:0a:98:84:65:27:8e:38:c1:44:fe:d6:dc:
         1a:9d:ed:46:7f:71:88:25:7d:9a:19:1f:ce:54:5a:bd:9c:4a:
         38:99:1e:dc:5a:c4:6b:ce:d1:8e:45:c2:5c:fe:fd:b1:0e:b0:
         5d:c0:ef:bf:a5:00:ef:0a:ce:52:38:02:73:5f:ba:72:6e:fb:
         da:f7:49:31:05:dd:92:e3:3e:c4:86:09:be:ff:e2:2a:85:f0:
         fd:2f:18:98:74:97:66:aa:c4:56:89:b2:3f:f0:57:75:0c:ec:
         ff:e8:2c:ce:98:bd:c5:18:06:07:87:86:7c:aa:bd:77:02:6f:
         6b:53:8a:bd:6f:36:79:d8:e9:d1:db:a5:72:ea:6f:61:34:58:
         16:78:74:b9:1b:ba:86:f5:6c:dc:89:c7:b7:f1:a1:37:c3:a9:
         19:56:df:cc:c6:6a:58:b4:16:16:47:9a:10:2e:a3:5e:46:41:
         b5:30:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:09 2026 by rpki-client