This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File:                     _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier:          mKPvkEYq9MoM6PeclG340Je54Sl7icUGwq4g5bY3Avg=
Subject key identifier:   85:A6:E5:9A:F4:45:AA:6A:0C:61:67:FB:B0:6C:7C:11:8B:B6:C0:1F
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer:       /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial:       05E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number:          05CF
Signing time:             Sat 24 Jan 2026 22:20:57 +0000
Manifest this update:     Sat 24 Jan 2026 22:20:57 +0000
Manifest next update:     Sat 31 Jan 2026 22:20:57 +0000
Files and hashes:         1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: L5WGU5Vui2Opeai0aXQy8MHXtvLLqfpaZvxdg8967ww=)
                          2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: VYKklQ7sC0GnSlFJLoi6ilrtCn1QqOw+2GAk4IP7i50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
                          rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
        Validity
            Not Before: Jan 24 22:20:57 2026 GMT
            Not After : Jan 31 22:20:57 2026 GMT
        Subject: CN=697545c9-3222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:7e:6f:a6:a2:6d:2b:05:3f:bb:99:02:51:
                    d3:6b:91:ae:24:1a:e7:5a:31:f1:24:08:7e:b8:70:
                    a0:10:f4:43:91:21:6b:04:03:4b:83:b0:db:ed:f3:
                    8f:65:af:0c:59:29:c4:25:f0:a9:14:80:d6:97:1e:
                    ff:5f:73:44:8a:2c:43:81:05:eb:eb:4d:95:6c:a8:
                    20:67:00:19:7b:3b:2f:2c:ce:f7:3c:37:81:9a:e1:
                    0c:9a:5d:d6:cb:8c:f4:90:7e:bb:42:18:67:67:fc:
                    4f:e5:aa:98:96:18:c3:05:7d:26:19:bf:0c:9b:59:
                    39:53:ce:56:b1:dd:62:b6:dd:9c:7b:0e:14:e7:a3:
                    a9:d2:4f:3f:b5:dc:3f:4f:5d:89:6e:18:e9:c7:73:
                    67:d6:df:d1:c8:ba:bb:a2:66:c0:88:77:f2:02:9d:
                    29:58:5c:97:4a:2d:f4:43:d3:81:69:21:ef:a0:28:
                    f4:e5:a0:f9:a0:f6:79:fe:50:48:99:73:3a:1a:aa:
                    c1:97:01:eb:e2:c4:42:a2:89:01:e8:53:eb:27:3f:
                    fe:e9:4b:a5:6b:bf:63:79:ea:4a:22:77:2e:c6:a2:
                    68:76:fe:8d:57:0a:eb:f8:53:30:bb:1c:0e:80:0f:
                    84:77:15:5f:a9:25:82:dd:a5:d0:ae:4d:36:ef:87:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:E5:9A:F4:45:AA:6A:0C:61:67:FB:B0:6C:7C:11:8B:B6:C0:1F
            X509v3 Authority Key Identifier:
                keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:3f:f6:9b:e3:3f:b0:85:51:71:6f:3b:c1:ef:ee:8b:c5:
         75:29:3e:43:ec:16:1c:ce:6a:2f:07:1f:2b:61:f5:67:2d:8e:
         d9:eb:29:cb:50:4b:68:bd:ef:2f:ca:d7:50:ee:2d:a1:86:23:
         9a:c2:1b:b8:e2:ff:95:4e:ff:a1:bc:7c:5b:f3:74:71:fb:c0:
         1a:d0:c8:55:74:9e:0e:2e:d8:6f:6a:9d:5e:fa:a3:cd:3c:58:
         91:56:a5:90:b1:b6:f6:13:1d:2b:91:2c:94:71:0b:af:c7:b5:
         bc:33:56:04:94:41:51:33:ec:73:0f:81:1a:77:3f:a1:6e:99:
         68:a9:78:e8:e0:6d:17:4e:d7:bb:14:2a:cf:f5:a2:66:c2:2b:
         01:e0:fb:d1:69:07:14:7d:30:07:1e:92:26:1a:9c:d5:7a:de:
         40:97:69:da:fd:0f:4d:b1:66:48:58:4b:10:13:68:10:03:08:
         0d:4f:86:7d:98:3f:fc:52:2e:6a:1e:9f:53:f3:3d:88:1a:9f:
         b8:dc:ad:79:f6:1a:56:28:bb:c7:56:ca:26:3f:f6:b6:05:30:
         10:14:92:a8:cd:25:0a:0c:7d:c8:97:ce:d4:37:fb:1e:6e:dc:
         e6:77:11:09:fa:49:52:fe:f1:7d:31:89:c0:12:9c:0f:f7:3a:
         21:e5:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:51:34 2026 by rpki-client