This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File:                     xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier:          sE13w0j6K+J5K+E95bM+4TckgiIPNL/ZCMsVekBwtrI=
Subject key identifier:   DB:B1:66:1F:ED:54:6E:49:0C:B6:2C:B3:2D:DC:1C:50:27:A3:A3:D0
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer:       /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial:       0540
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number:          052A
Signing time:             Sat 24 Jan 2026 22:51:17 +0000
Manifest this update:     Sat 24 Jan 2026 22:51:16 +0000
Manifest next update:     Sat 31 Jan 2026 22:51:16 +0000
Files and hashes:         1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: n6/bpus+zJ6BtH4U6DAlnZ/wM/dsYmCxPP1QHGl3gyo=)
                          2: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: NqCe6ivtot+2EiDBeB5rI+v3Md3AvU9IqI8GrM7MqMs=)
                          3: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: 91lchPpa042FpgG6srtZePU2M6YFFk53ibQ4Z1+SlLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
                          rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
        Validity
            Not Before: Jan 24 22:51:16 2026 GMT
            Not After : Jan 31 22:51:16 2026 GMT
        Subject: CN=69754ce4-9e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:f0:6b:0c:4e:b7:4b:58:8c:d4:aa:8e:d9:
                    85:4f:4b:af:73:a9:59:34:7c:5b:85:f1:c8:c8:d4:
                    48:aa:22:d9:89:e5:eb:ec:64:12:5b:82:d6:50:8c:
                    e8:c0:00:88:08:fc:b4:a1:77:ff:ab:41:8f:c3:ed:
                    43:aa:e4:2f:b7:ad:a8:4f:ec:82:5c:95:50:5b:6c:
                    49:a8:5d:35:10:b0:4b:3b:d6:0a:b4:ca:d8:6d:46:
                    80:c4:cd:92:0d:f4:4b:4e:ae:74:5e:8d:47:33:54:
                    46:ec:37:ad:40:a8:8e:bb:bd:0f:c0:59:1b:b3:b5:
                    67:82:76:99:7d:c8:e0:e0:e3:a4:77:a9:1b:71:04:
                    7b:07:2d:74:ba:60:7b:37:5e:bb:28:86:33:9f:f7:
                    2a:9e:22:2d:54:8c:d3:73:06:80:93:e3:f6:46:1d:
                    0c:85:00:9a:1a:7d:c9:13:12:03:e6:a0:65:2b:35:
                    c1:3c:e2:c7:ae:06:40:c9:54:fd:51:d0:80:b6:33:
                    85:6a:1c:37:a6:18:f9:9d:b4:e4:dc:0c:5a:a7:05:
                    f5:25:c5:1a:bf:7e:db:93:28:90:47:23:2b:ef:db:
                    d0:3d:cf:c2:28:dd:44:e7:29:2d:63:a0:b6:8a:d0:
                    d9:f2:9c:54:f6:0c:4e:d2:da:33:9f:20:ae:b3:d5:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B1:66:1F:ED:54:6E:49:0C:B6:2C:B3:2D:DC:1C:50:27:A3:A3:D0
            X509v3 Authority Key Identifier:
                keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:12:a1:52:66:ae:70:15:2c:dc:98:35:bf:04:82:2e:50:65:
         c3:96:6a:8e:9a:c4:78:1a:2e:4f:a1:c4:21:f3:1c:20:bc:c3:
         a4:c4:77:22:0e:c5:f0:78:2c:76:0d:c1:d3:e2:7e:07:59:90:
         9a:9d:cc:f1:d1:89:1a:32:51:c7:36:81:4e:d1:53:89:f8:32:
         bf:df:c4:cf:ce:2c:2d:26:83:eb:18:38:64:c2:03:e5:ed:5b:
         5f:53:3b:bb:19:46:d4:6c:14:80:d4:a1:79:55:ee:9a:e6:a0:
         7a:5b:97:9d:a1:f6:00:ac:7d:f6:cd:b6:ff:bd:72:d8:8a:0b:
         6b:8b:14:39:4d:e6:d8:95:47:93:fd:60:61:6a:fb:00:d6:bc:
         75:42:bb:bd:e5:f2:09:da:8f:f0:2b:05:4f:f2:5c:de:19:8a:
         e5:1c:de:c9:31:95:00:4c:6e:e9:46:66:05:cf:e9:8d:23:ee:
         d7:45:63:f2:3c:3b:2f:8e:4d:f7:dc:34:8e:3b:af:32:ea:fe:
         66:15:98:6e:d3:01:3b:f1:c6:19:fb:64:d7:be:8c:48:5a:f1:
         67:8f:64:7c:5c:a7:64:20:b9:8e:79:18:16:63:6f:26:50:bc:
         bd:05:c4:c6:75:d3:cc:07:df:70:5a:ac:fd:4b:cf:88:ff:98:
         c4:e5:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:14 2026 by rpki-client