This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File:                     c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier:          fl8rYrJs5pX6eSVYxQIQ61Rc26jXOgz5zfLM/UcHrxs=
Subject key identifier:   08:91:6C:1C:90:E5:C5:5F:C6:58:2C:97:C3:7F:1A:F8:B5:06:DB:51
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer:       /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number:          01C4
Signing time:             Sun 25 Jan 2026 02:16:25 +0000
Manifest this update:     Sun 25 Jan 2026 02:16:25 +0000
Manifest next update:     Sun 01 Feb 2026 02:16:25 +0000
Files and hashes:         1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: kQIdUdrWV3wLYud11CTmqYz1SoprDJL5jOcbzYz4L38=)
                          2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: +ZAU+8WW385rm9bRvwCNNyyrrQtRcVOXdwkDCIZKchs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
                          rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
        Validity
            Not Before: Jan 25 02:16:25 2026 GMT
            Not After : Feb  1 02:16:25 2026 GMT
        Subject: CN=69757cf9-0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:c9:9a:8c:10:4f:23:85:e5:59:d5:48:27:
                    7e:59:f8:a4:f7:71:b2:b8:f1:a2:c5:8a:1f:04:3d:
                    7f:f3:a1:15:0d:cf:81:a7:de:f6:77:d5:54:4e:72:
                    46:69:ef:cd:6a:61:fa:42:59:37:c6:30:f0:f1:1c:
                    9a:88:94:47:6a:d8:0e:26:94:4f:8a:42:1c:9d:f6:
                    be:0e:e7:b5:50:da:a1:a9:ba:7a:01:92:ba:a1:75:
                    21:85:9d:0d:e5:88:89:5e:aa:5d:3b:f5:fc:bf:dc:
                    c5:ea:a3:ba:af:28:d6:c7:15:86:7f:12:68:ab:8c:
                    6d:d3:ef:8e:e3:41:14:3a:ec:ae:95:26:2b:96:6d:
                    49:50:42:55:b2:40:3d:9c:77:1c:41:cf:83:e1:a5:
                    0b:56:27:8f:e0:ea:52:e8:4a:96:c1:db:ad:41:00:
                    1c:83:ef:ad:2b:1d:d8:56:bc:a3:d7:e7:95:34:44:
                    07:6b:59:40:d0:c0:c7:a8:9e:39:8c:ad:32:cd:c5:
                    19:91:13:fb:0e:c3:7f:b9:24:d0:ab:0b:11:cc:20:
                    59:42:b3:d7:6c:4c:0c:e6:ca:3a:2f:3f:8f:d7:f5:
                    d3:5e:92:f1:6f:b1:6c:d4:9c:55:af:60:8c:5e:bc:
                    d0:a8:8c:3b:e8:d8:69:6b:d0:03:bb:07:09:e7:64:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:6C:1C:90:E5:C5:5F:C6:58:2C:97:C3:7F:1A:F8:B5:06:DB:51
            X509v3 Authority Key Identifier:
                keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:33:96:45:f0:c3:cc:c6:5f:b5:58:14:1f:05:96:01:29:be:
         04:c8:da:53:b0:20:3e:6f:08:51:47:81:37:61:3d:a3:2e:df:
         dd:58:61:67:50:9a:3b:4c:8c:32:a9:30:e3:8c:76:d1:79:0c:
         43:76:53:f7:07:ef:40:d4:c9:19:07:97:5e:b2:56:4f:9a:8f:
         f6:da:d4:d5:be:99:7a:30:82:36:52:c6:9a:4d:28:0c:3a:5d:
         2e:db:ab:54:5f:55:da:f9:2c:9e:40:be:80:b2:e0:10:69:b4:
         69:ba:13:fa:d9:9b:cf:2f:21:20:2b:0b:3c:e2:ac:17:92:fb:
         b7:9d:4a:b3:29:49:90:00:bd:17:0c:eb:c7:22:f9:ff:09:93:
         ab:fb:70:04:95:6e:60:12:45:b9:c3:85:bb:72:82:58:40:20:
         f9:f8:78:c8:ef:bf:7d:33:de:f3:da:6c:36:4a:1c:3c:94:dd:
         6c:5a:90:0c:86:7a:11:ba:fa:70:35:a1:6f:04:32:88:e6:c6:
         11:b7:c9:0c:9f:29:bf:03:b5:43:47:bd:ac:61:c7:a9:e3:e4:
         fe:fa:42:78:03:b2:4e:ef:c1:62:39:db:b5:c9:23:02:4b:7e:
         85:3a:bc:7a:5c:36:e7:b3:a9:c8:75:7d:de:23:60:7e:1d:bd:
         3d:91:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:23:48 2026 by rpki-client