This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
File:                     60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json)
Hash identifier:          AswA0a9k3BaW5DlWWQnLMNWgWxGEFyVPFICRZa0ECMU=
Subject key identifier:   B8:84:DE:95:40:DC:EA:AA:1E:2F:60:D5:46:0A:FF:02:94:7B:86:63
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Certificate issuer:       /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
Manifest number:          02E5
Signing time:             Sun 25 Jan 2026 00:29:46 +0000
Manifest this update:     Sun 25 Jan 2026 00:29:45 +0000
Manifest next update:     Sun 01 Feb 2026 00:29:45 +0000
Files and hashes:         1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: eUSys3NUlKMNCGolmPUwq6TqgR77+vqbo6iJs9/SvOg=)
                          2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: K2eRSWaNhgeJAJT+eZoCaSCPtQt1cFG3OtTWO7vDxZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
                          rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
        Validity
            Not Before: Jan 25 00:29:45 2026 GMT
            Not After : Feb  1 00:29:45 2026 GMT
        Subject: CN=697563fa-0af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:2c:66:76:47:f7:65:2c:0e:0c:14:57:ff:
                    d4:87:e2:68:87:c4:54:d0:6c:b3:1a:0d:57:f4:2a:
                    62:ea:64:7f:1b:6c:a4:57:09:b8:70:88:c6:a8:dc:
                    62:97:95:05:d6:d3:39:18:bd:31:c8:3b:90:5a:e8:
                    b2:51:7f:26:f6:48:8d:9a:53:5d:fc:c2:e1:92:cf:
                    6b:36:b1:a9:d5:e1:86:08:76:31:0c:35:08:c1:90:
                    70:52:40:c8:96:a3:8e:d1:20:14:32:78:27:75:c4:
                    04:2d:d0:3f:f2:f9:e4:c6:20:f0:dc:48:be:f8:d2:
                    14:62:44:32:cd:50:42:77:5d:1b:ca:03:0b:e7:79:
                    5d:ac:16:0f:2d:b5:0d:b7:f2:f2:84:2d:cd:56:89:
                    c4:95:7f:45:2d:b9:c6:79:51:59:74:1d:17:95:c0:
                    e5:65:51:7b:eb:ab:4c:fb:53:2e:53:86:f4:6c:4c:
                    69:f7:ac:b3:e1:11:61:ac:8c:c4:63:f9:bc:1f:ce:
                    00:5d:dd:3d:1e:39:b0:64:7a:fa:cc:65:e8:5c:05:
                    36:a2:1f:73:01:77:6a:22:84:a2:8b:bb:3f:c3:f0:
                    1c:39:05:11:49:87:34:99:2e:ab:51:90:a9:43:c6:
                    46:de:1f:b2:61:68:25:ef:9c:3e:5d:26:63:9d:70:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:DE:95:40:DC:EA:AA:1E:2F:60:D5:46:0A:FF:02:94:7B:86:63
            X509v3 Authority Key Identifier:
                keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:07:9f:ae:71:4b:38:95:c8:0a:cd:b8:33:06:5f:1d:9f:
         eb:b6:a8:30:96:3a:5c:db:cb:74:9b:bf:98:b5:29:7d:90:6d:
         a8:31:44:d2:85:ca:7e:5a:55:bd:07:78:0a:26:e5:d5:cd:67:
         c2:e7:c1:b2:cd:17:87:85:dc:c8:ef:87:16:7e:69:69:ab:40:
         44:8f:46:a4:a2:c7:b6:35:3e:b3:e4:a3:f8:72:f7:3e:5f:7e:
         16:88:d6:d6:dc:71:e0:1f:ea:1d:42:a1:31:eb:a0:e3:ad:e2:
         f2:c8:0c:a4:1f:83:30:1b:68:fe:1f:8d:fb:56:46:40:71:cf:
         1d:67:d9:d8:49:17:9e:9d:ec:1e:23:5e:c4:c1:e2:4b:dd:3c:
         22:dd:11:21:84:2b:72:a2:21:95:de:ef:6e:e7:bb:6b:f5:0b:
         a0:6a:6b:fe:13:bd:c3:b5:a8:72:09:7e:d7:30:ea:20:74:16:
         03:54:3c:0d:c4:ca:7c:ed:33:db:e3:c9:6c:bd:4c:1a:2f:18:
         53:c0:f7:f6:c3:9e:f5:03:dd:ae:23:f9:c6:67:fd:33:8b:5e:
         dc:4a:15:42:a5:77:3c:6c:93:dd:b1:41:a3:91:c5:c8:41:bf:
         2c:97:b3:01:13:6f:b0:1c:c1:b9:84:e8:e5:47:d2:e7:9a:62:
         d5:90:16:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkExMEExMTAvBgNVBAUTKEVCNDRBN0M2RDcyRTY0NkQ4NEEyQzdCNkQyRTlBNzMy
MTAxQjgxM0EwHhcNMjYwMTI1MDAyOTQ1WhcNMjYwMjAxMDAyOTQ1WjAYMRYwFAYD
VQQDDA02OTc1NjNmYS0wYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjIsZnZH92UsDgwUV//Uh+Joh8RU0GyzGg1X9Cpi6mR/G2ykVwm4cIjGqNxi
l5UF1tM5GL0xyDuQWuiyUX8m9kiNmlNd/MLhks9rNrGp1eGGCHYxDDUIwZBwUkDI
lqOO0SAUMngndcQELdA/8vnkxiDw3Ei++NIUYkQyzVBCd10bygML53ldrBYPLbUN
t/LyhC3NVonElX9FLbnGeVFZdB0XlcDlZVF766tM+1MuU4b0bExp96yz4RFhrIzE
Y/m8H84AXd09HjmwZHr6zGXoXAU2oh9zAXdqIoSii7s/w/AcOQURSYc0mS6rUZCp
Q8ZG3h+yYWgl75w+XSZjnXDwtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiE3pVA
3OqqHi9g1UYK/wKUe4ZjMB8GA1UdIwQYMBaAFOtEp8bXLmRthKLHttLppzIQG4E6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEwQS9FNTE4QjA3NjEz
OTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpHMkVvc2UyMHVtbk1oQWJn
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYwU254dGN1WkcyRW9zZTIwdW1uTWhBYmdUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTEwQS9FNTE4QjA3NjEzOTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpH
MkVvc2UyMHVtbk1oQWJnVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAt3gefrnFLOJXICs24MwZfHZ/rtqgwljpc28t0m7+YtSl9kG2oMUTS
hcp+WlW9B3gKJuXVzWfC58GyzReHhdzI74cWfmlpq0BEj0akose2NT6z5KP4cvc+
X34WiNbW3HHgH+odQqEx66DjreLyyAykH4MwG2j+H437VkZAcc8dZ9nYSReenewe
I17EweJL3Twi3REhhCtyoiGV3u9u57tr9Qugamv+E73DtahyCX7XMOogdBYDVDwN
xMp87TPb48lsvUwaLxhTwPf2w571A92uI/nGZ/0zi17cShVCpXc8bJPdsUGjkcXI
Qb8sl7MBE2+wHMG5hOjlR9LnmmLVkBbq
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:29 2026 by rpki-client