This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
File:                     5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json)
Hash identifier:          3XL3oJw/H4jppfIDoQSBPDT8N4ZDvLkKnrCMvabvPeo=
Subject key identifier:   5B:5E:6C:77:42:BD:7C:20:22:A7:80:A4:D8:84:FF:F6:79:D9:7D:F0
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Certificate issuer:       /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
Manifest number:          014D
Signing time:             Sun 25 Jan 2026 03:32:04 +0000
Manifest this update:     Sun 25 Jan 2026 03:32:03 +0000
Manifest next update:     Sun 01 Feb 2026 03:32:03 +0000
Files and hashes:         1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: wDml9B7Q5TzmSv2F62kFmZB1oFD5GV45naGTEmzxVUI=)
                          2: 8C3FF9AEC8A811F08595E263C4F9AE02.roa (hash: JQn/WEVXli5+7O2NyEEFRxRf0sjn39WeQsrq6fJCIUk=)
                          3: 0009532CC8A811F0BA23CF62C4F9AE02.roa (hash: yj3+9Or3fJ55ijczJSobCY4PjRqCSpaINl/up2BYiy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
                          rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
        Validity
            Not Before: Jan 25 03:32:03 2026 GMT
            Not After : Feb  1 03:32:03 2026 GMT
        Subject: CN=69758eb3-c720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d0:71:a7:11:03:f7:66:dc:65:fb:f7:ed:e0:
                    31:0c:3c:cd:ec:a7:21:f0:36:ec:13:4c:90:d0:73:
                    1a:da:47:30:a7:cf:ca:90:8e:3b:d9:42:f6:91:1c:
                    97:22:8d:8b:d5:2a:36:c8:04:91:23:21:a9:1f:0e:
                    32:d1:f1:63:e3:7c:1b:75:71:37:5c:f9:d2:d2:83:
                    23:e0:3c:b7:2a:1b:83:a9:50:71:21:39:15:f0:85:
                    f9:04:72:80:f3:79:8d:66:08:e7:51:e1:fa:ce:e5:
                    0c:ff:a1:f5:38:71:d8:f4:27:fa:b5:a2:a6:59:19:
                    25:02:f9:6c:b4:29:fa:ee:a7:59:fd:ad:ee:f7:ae:
                    e0:f9:c6:28:ed:b5:2b:3a:d0:00:1e:de:77:e7:f3:
                    e7:e7:da:12:71:63:b0:74:e2:71:b8:31:aa:90:33:
                    38:a3:29:09:ec:de:ea:b0:c0:bd:eb:6c:dd:3b:06:
                    f7:55:2f:f5:e7:23:d4:79:04:4a:eb:a0:d9:60:7b:
                    8c:44:6e:5f:d6:53:be:49:24:eb:dd:27:85:9d:e9:
                    af:97:df:34:14:45:35:b8:0c:3d:d8:88:d8:86:ec:
                    ae:5a:a7:b8:67:22:71:ab:b3:de:24:45:f8:7a:0f:
                    ba:b9:7c:b2:1b:05:99:66:4d:41:67:b3:4c:45:38:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5E:6C:77:42:BD:7C:20:22:A7:80:A4:D8:84:FF:F6:79:D9:7D:F0
            X509v3 Authority Key Identifier:
                keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:68:7a:f4:ef:b9:41:c5:44:d6:bb:ad:cd:71:35:44:fe:01:
         0c:cb:69:34:25:db:f4:6c:c9:84:94:56:50:64:f6:fc:ea:6d:
         45:50:3e:a8:ac:87:a7:76:f0:93:61:54:08:a0:66:80:f7:87:
         c7:75:32:b1:d7:23:89:3c:59:83:0a:e8:40:3d:d9:6a:c5:af:
         aa:ca:af:d0:e8:85:e5:ac:fd:93:59:b5:a1:fc:30:6d:9d:7e:
         47:ba:a9:cc:79:29:60:27:37:78:4c:1b:c8:b3:53:e0:62:d0:
         fe:a3:9a:f0:83:35:b7:55:ed:13:8a:68:e1:f1:f6:95:7b:ae:
         6a:9d:20:cf:6d:3a:59:6d:33:07:49:02:50:f1:15:27:4c:2f:
         eb:59:9a:de:22:22:4f:8f:fa:0d:42:21:1d:96:59:1f:9d:22:
         2a:50:a9:59:cc:99:4b:d0:77:fe:74:8c:11:82:d8:8d:b7:6d:
         35:5c:8e:bc:fa:e2:4c:e2:7b:a8:7d:6a:43:ba:88:c1:76:01:
         0f:19:2b:bf:86:d2:4c:cb:cf:f9:7c:82:f8:c1:3c:f2:5d:0f:
         fc:81:91:ca:66:ae:88:43:33:f3:fd:25:43:5f:a7:30:0e:0d:
         99:db:98:14:19:a1:eb:17:a0:bd:e9:17:5f:60:6a:13:4b:c4:
         3d:6c:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:47:14 2026 by rpki-client