This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
File:                     u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json)
Hash identifier:          3Lby49j62Sgaxe+fN6COXnbLTZ2ZhZArRdBHv1jBiJQ=
Subject key identifier:   53:BC:D6:4B:06:C6:DB:AF:AC:23:C8:8F:C4:31:97:FE:53:D8:19:B6
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Certificate issuer:       /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
Manifest number:          01C2
Signing time:             Sat 24 Jan 2026 23:59:50 +0000
Manifest this update:     Sat 24 Jan 2026 23:59:50 +0000
Manifest next update:     Sat 31 Jan 2026 23:59:50 +0000
Files and hashes:         1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: sxBZ0JK4QJoKHCWDF/hoSoct+pEEVETE09R3EwInzso=)
                          2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: leuMzpLaxFsvYZtfj5XFjNm4DVLoebp+rvO2FUHNRVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
        Validity
            Not Before: Jan 24 23:59:50 2026 GMT
            Not After : Jan 31 23:59:50 2026 GMT
        Subject: CN=69755cf6-43ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:ea:1c:50:91:bb:06:26:80:40:f6:60:8f:
                    94:96:d4:da:c1:37:d4:d2:67:ed:d5:9b:3a:05:f4:
                    d7:76:82:39:8a:f2:d9:15:f6:f4:08:89:92:cc:01:
                    4a:e5:5c:4d:f4:0a:07:8a:76:84:f6:c2:6c:e0:8b:
                    1e:c9:a3:55:80:47:6a:cf:51:52:9b:5f:89:57:ef:
                    b9:9f:df:9d:42:da:92:b6:ac:77:c6:2d:6e:90:bb:
                    b2:24:27:0b:04:cc:9c:5f:2c:c5:82:dd:a2:08:c1:
                    4f:58:b9:d8:14:cd:fa:cf:f9:1a:9b:5f:ed:cd:5a:
                    8f:99:85:dd:d9:94:d9:85:b7:1b:91:30:89:02:1d:
                    c1:ee:b9:1d:80:28:02:b5:e7:60:70:67:ec:e6:f6:
                    cc:24:99:45:94:df:35:da:a3:e3:ed:d6:0a:f3:35:
                    0b:fd:05:f5:86:76:45:6d:2c:0f:19:bb:96:34:8a:
                    a0:09:5a:42:11:ae:cc:f4:b8:e9:74:08:c2:ea:e1:
                    df:38:ca:7c:40:1d:af:86:1f:41:a2:6a:26:d4:a4:
                    51:b0:ac:f4:74:d3:e8:6c:2d:c9:52:e5:13:26:27:
                    41:fe:b7:7c:0e:23:c0:c3:48:7f:9d:08:32:45:e7:
                    4d:ec:73:ac:97:bc:60:0a:bd:10:f2:71:a1:e2:d4:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:D6:4B:06:C6:DB:AF:AC:23:C8:8F:C4:31:97:FE:53:D8:19:B6
            X509v3 Authority Key Identifier:
                keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:78:19:7a:5c:8a:ae:44:7a:4d:56:c8:59:e6:b8:70:65:35:
         fd:62:d7:de:c2:f6:f4:cb:06:a7:75:4d:c3:d9:9e:4c:6c:c7:
         9d:d6:b6:0f:88:54:da:14:33:2e:9e:22:25:be:73:ca:f6:5a:
         e4:f6:99:58:76:c4:b9:40:44:f4:16:a9:3d:32:9f:ce:7e:cf:
         4f:51:07:29:8f:60:7f:82:8c:e5:e5:93:6e:be:21:7e:f4:2f:
         0c:d2:7e:ff:03:bb:22:23:3c:2d:72:b0:c4:a6:b1:7e:54:07:
         d6:aa:8f:b2:b0:11:f6:17:9c:19:13:2c:b7:f8:ad:0e:6a:ae:
         eb:3b:36:80:d2:19:aa:75:90:2b:aa:a6:f4:ca:25:a5:9b:82:
         21:0c:af:af:85:04:1c:22:8b:b1:33:67:55:cf:55:4e:db:21:
         57:44:aa:fa:e3:9e:38:d1:95:69:09:ee:8c:51:17:ca:7f:d0:
         9c:c6:20:49:61:b3:f4:d5:00:4f:6e:aa:d3:02:75:f4:69:b3:
         24:6a:16:84:df:52:66:9b:50:6b:48:98:e5:bf:66:de:06:cc:
         2f:b9:aa:bf:7b:4e:c9:33:48:af:49:21:31:5b:57:35:b5:0a:
         25:15:33:48:f7:6a:a4:51:04:ae:11:ef:75:35:a5:d0:2b:48:
         72:2a:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:13 2026 by rpki-client