This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
File:                     pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json)
Hash identifier:          5utI7hN3yR2gD1gSUUJGd5oN8h1XnfCkNKam9sxWtqA=
Subject key identifier:   A6:24:41:28:BD:73:C6:26:74:96:DE:82:F2:BB:3F:CC:63:D1:3E:C3
Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE
Certificate issuer:       /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
Certificate serial:       06E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
Manifest number:          06D2
Signing time:             Sat 24 Jan 2026 21:31:59 +0000
Manifest this update:     Sat 24 Jan 2026 21:31:58 +0000
Manifest next update:     Sat 31 Jan 2026 21:31:58 +0000
Files and hashes:         1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: XMU9YGoJw8OwkzBGB0kZLRJbxmjRFkUiGtu6q+3+DI4=)
                          2: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (hash: ILkhxI5MS0Y08MvVskMnHwF1yNepea938q8G0D4OrHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl
                          rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
        Validity
            Not Before: Jan 24 21:31:58 2026 GMT
            Not After : Jan 31 21:31:58 2026 GMT
        Subject: CN=69753a4f-b272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:9e:4d:75:4c:1c:58:34:c0:b7:41:bb:b2:
                    d5:c0:7c:3e:7d:ec:e6:11:fa:a2:77:b6:50:be:ec:
                    9c:ef:f2:56:e3:c3:3c:33:b0:fc:e4:57:89:27:05:
                    f5:c1:49:96:f2:2a:7c:8f:51:c5:84:70:87:5b:ef:
                    94:87:89:0a:53:49:00:6c:57:2d:51:b0:a9:6f:8f:
                    c3:ee:72:8c:9f:ed:2e:30:f2:69:57:5c:94:f4:cc:
                    37:41:a7:40:77:13:45:e9:9b:3b:4b:a3:a7:92:3e:
                    34:22:7e:73:35:b7:2e:b8:14:f3:53:0c:c7:60:e1:
                    85:fc:2d:d2:74:8b:14:35:a4:95:0f:8f:15:23:22:
                    2a:62:2f:56:cc:04:f8:67:bb:78:2c:1e:cb:60:65:
                    28:9c:18:03:e6:a2:53:f0:8c:56:d9:c6:e3:90:6d:
                    5f:63:be:11:1f:3f:a3:c2:dd:b4:12:0e:8a:43:7f:
                    a9:7a:80:bd:9d:7b:05:c8:6b:7c:5a:fe:22:dc:aa:
                    48:5c:31:f5:4f:62:bb:3c:4d:1b:3b:cb:1a:80:58:
                    6c:5e:b9:83:e5:0e:9c:e3:92:56:9a:29:ca:43:93:
                    d9:5c:09:9a:64:7f:f4:b3:be:f3:ec:a1:a7:b0:5a:
                    2f:7f:e0:80:9c:55:91:d0:ac:51:22:03:f2:4c:92:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:41:28:BD:73:C6:26:74:96:DE:82:F2:BB:3F:CC:63:D1:3E:C3
            X509v3 Authority Key Identifier:
                keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:44:65:9a:a5:1f:36:76:2f:61:3c:f0:71:0a:b0:bf:58:f1:
         23:e9:ad:60:4f:ac:1c:1b:6c:f4:65:ba:83:d2:84:65:62:b5:
         10:ae:21:07:ba:2f:41:f6:2d:24:8f:b2:52:9b:c1:71:81:98:
         d0:72:81:9b:09:3d:28:ee:a2:6d:c1:f5:37:1f:58:4c:38:12:
         4d:76:78:a1:10:6a:4f:fd:88:96:b7:72:c1:9c:0c:5d:f1:b0:
         79:ce:13:8e:4e:8b:47:e2:83:e8:fe:84:a0:b9:3b:5f:e1:14:
         75:0f:b3:ac:ff:d4:fc:82:71:0b:42:a7:49:25:23:e4:81:80:
         76:da:1a:07:66:3d:c2:2f:16:b8:15:8c:5f:a8:ac:0d:3c:dc:
         ba:71:d2:e0:51:0c:65:40:7a:d6:13:0f:71:53:9a:04:d6:25:
         b4:fc:18:f5:07:fb:6c:62:78:eb:68:95:6c:58:a0:34:5e:e2:
         20:f3:b3:a6:15:c3:66:00:1a:c1:44:03:dd:54:82:43:7a:ae:
         4f:90:96:9b:ae:3f:9c:40:68:79:ee:91:56:8b:73:23:7a:12:
         21:72:6a:e6:78:7c:21:1b:45:c4:7d:ee:9a:ef:15:c4:6d:09:
         d9:0a:24:25:0b:db:0c:90:b3:23:1c:e2:ac:98:c6:18:e2:9d:
         d8:ef:23:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB
MTU5MTI2RUUwHhcNMjYwMTI0MjEzMTU4WhcNMjYwMTMxMjEzMTU4WjAYMRYwFAYD
VQQDDA02OTc1M2E0Zi1iMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jyeTXVMHFg0wLdBu7LVwHw+fezmEfqid7ZQvuyc7/JW48M8M7D85FeJJwX1
wUmW8ip8j1HFhHCHW++Uh4kKU0kAbFctUbCpb4/D7nKMn+0uMPJpV1yU9Mw3QadA
dxNF6Zs7S6Onkj40In5zNbcuuBTzUwzHYOGF/C3SdIsUNaSVD48VIyIqYi9WzAT4
Z7t4LB7LYGUonBgD5qJT8IxW2cbjkG1fY74RHz+jwt20Eg6KQ3+peoC9nXsFyGt8
Wv4i3KpIXDH1T2K7PE0bO8sagFhsXrmD5Q6c45JWminKQ5PZXAmaZH/0s77z7KGn
sFovf+CAnFWR0KxRIgPyTJKXvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYkQSi9
c8YmdJbegvK7P8xj0T7DMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD
RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzUzRC84NEI1OEY2NjhDRkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1
cXlRUk5nSGFnVk9oV1JKdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDlRGWapR82di9hPPBxCrC/WPEj6a1gT6wcG2z0ZbqD0oRlYrUQriEH
ui9B9i0kj7JSm8FxgZjQcoGbCT0o7qJtwfU3H1hMOBJNdnihEGpP/YiWt3LBnAxd
8bB5zhOOTotH4oPo/oSguTtf4RR1D7Os/9T8gnELQqdJJSPkgYB22hoHZj3CLxa4
FYxfqKwNPNy6cdLgUQxlQHrWEw9xU5oE1iW0/Bj1B/tsYnjraJVsWKA0XuIg87Om
FcNmABrBRAPdVIJDeq5PkJabrj+cQGh57pFWi3MjehIhcmrmeHwhG0XEfe6a7xXE
bQnZCiQlC9sMkLMjHOKsmMYY4p3Y7yOT
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:23 2026 by rpki-client