This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          8d54qoJNH3gx6nFphAU0KamE138loTi3dtgPg95IwKc=
Subject key identifier:   5F:37:C7:B7:9E:0C:29:98:97:EA:CF:F1:F0:08:9D:CB:95:B4:56:94
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       34FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          34FE
Signing time:             Sat 24 Jan 2026 14:39:15 +0000
Manifest this update:     Sat 24 Jan 2026 14:39:14 +0000
Manifest next update:     Sat 31 Jan 2026 14:39:14 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: FN/WYrUvj5DQ1Nv7jf/N2IBvCNMmVNtGiMPrnHacxkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13566 (0x34fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: Jan 24 14:39:14 2026 GMT
            Not After : Jan 31 14:39:14 2026 GMT
        Subject: CN=6974d992-53b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:8f:70:87:8c:4e:4c:18:2f:59:09:8c:a6:
                    74:7b:8c:a1:7c:ae:f9:1b:c3:7e:d7:78:75:c1:2b:
                    5d:dd:41:9f:c0:74:f8:42:63:0b:85:88:79:9a:66:
                    a3:c5:b6:75:b2:94:29:12:f2:25:d7:c1:76:13:75:
                    2d:33:4a:3f:a1:df:b8:b7:a4:4f:9a:7e:d3:f9:97:
                    08:49:e2:71:76:a3:e0:05:79:be:c7:53:b0:a3:97:
                    fc:5c:69:5b:43:34:f0:de:93:49:a5:9d:cc:3f:5d:
                    0a:b5:02:3b:78:6a:ca:07:70:8c:c7:b9:d1:6b:d4:
                    f5:0c:d1:22:03:44:ff:49:88:9b:6a:de:ab:b4:fd:
                    74:d7:66:97:36:f0:55:6f:ee:04:77:41:b4:64:ef:
                    77:33:79:e5:ed:3f:d9:a5:69:e6:5b:3b:58:3b:00:
                    7a:8b:29:75:0b:63:36:dc:ed:73:32:f5:31:cc:47:
                    a3:7c:2a:a6:05:73:a7:85:15:85:55:4e:a2:74:9a:
                    cb:80:69:76:69:10:53:ef:55:f5:db:e7:c1:20:77:
                    ad:c9:4a:ef:bd:85:65:0f:18:52:91:bf:66:92:a6:
                    24:0e:8a:b8:dc:22:5f:58:42:07:48:30:fa:6d:f0:
                    ba:0a:a5:a1:c8:3a:10:32:fc:74:c8:ac:f7:1b:f1:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:37:C7:B7:9E:0C:29:98:97:EA:CF:F1:F0:08:9D:CB:95:B4:56:94
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:54:f8:f3:7f:10:5f:6a:0f:5a:36:38:ae:b0:bd:27:bb:
         16:6a:77:bf:cf:6c:6a:ee:02:7f:05:30:26:e3:16:2e:b2:3d:
         15:c7:86:fd:38:a2:08:9f:de:a5:df:3b:f3:93:7c:0e:75:d0:
         55:36:93:4a:ba:e9:28:61:f6:d5:07:16:f5:e4:26:bf:10:ed:
         92:ea:f5:29:39:91:c8:3b:b8:49:7c:69:18:6b:d3:7c:22:3c:
         f2:1d:66:9e:c6:b5:5e:8c:a0:b4:7c:a8:0b:6a:91:4b:24:fc:
         e3:25:a6:d0:46:b6:39:8c:0c:68:bf:ee:ac:fd:ea:09:1e:ab:
         4d:04:44:e5:97:a8:aa:2e:78:c4:9c:9b:fb:17:fd:3f:6d:b3:
         ff:8c:81:52:b5:9f:db:ad:0d:0c:b1:e9:2d:2c:f2:25:d6:e6:
         2e:26:d6:46:11:26:fe:b6:59:d9:e0:fb:17:61:e1:75:04:b2:
         ef:3d:72:95:5a:44:18:b4:d4:9a:9a:d1:01:1d:c4:eb:74:09:
         91:3f:12:c3:f9:e0:00:8d:26:fa:7c:cd:7e:80:61:d4:66:35:
         01:40:04:98:05:e3:c0:d3:a3:40:f5:d2:0f:c1:e3:94:78:a5:
         0e:7d:b6:33:61:8f:63:7a:43:8d:a1:b1:cf:b2:0d:bd:75:56:
         c8:ee:b5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:05 2026 by rpki-client