This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
File:                     A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json)
Hash identifier:          Da9Dg8tWOds6/0cxfBdd7ZqadDHDHwL/rzPnyfewguE=
Subject key identifier:   87:62:BB:5E:6C:4F:97:27:6D:53:79:A8:CA:44:9D:EC:39:96:85:01
Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59
Certificate issuer:       /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
Manifest number:          DC
Signing time:             Fri 23 Jan 2026 04:44:09 +0000
Manifest this update:     Fri 23 Jan 2026 04:44:08 +0000
Manifest next update:     Fri 30 Jan 2026 04:44:08 +0000
Files and hashes:         1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: OS3aX/mD/LbcyDixSOI/8+TCILskLVV1yQGWMWe+4cE=)
                          2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: Gr0PXwxUpmRKlbQEfvqS5eHW+A4ehoPUWPtwkZnjT0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559
        Validity
            Not Before: Jan 23 04:44:08 2026 GMT
            Not After : Jan 30 04:44:08 2026 GMT
        Subject: CN=6972fc98-132a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:39:f9:f1:16:87:a4:61:f2:4b:8f:61:37:
                    b1:a4:f2:c5:a9:89:33:b3:dc:2c:d7:4b:75:bd:27:
                    b5:c0:33:fa:15:95:c0:da:c2:ca:1c:8d:81:41:a1:
                    d9:b2:30:9d:38:a6:c5:2c:e9:c6:d9:d1:73:8b:08:
                    cf:84:6d:23:2c:94:90:40:fe:92:0f:a9:71:99:bf:
                    6a:57:48:39:d6:07:97:fc:b5:30:cc:b0:bd:23:9f:
                    f4:b4:73:7f:de:99:f7:f5:90:b6:29:64:6b:02:12:
                    a5:cf:04:01:42:02:b3:f8:e8:17:1b:b8:c5:d5:e3:
                    53:c2:c0:48:f7:cd:85:eb:01:9b:aa:23:b0:a7:31:
                    87:f5:13:09:d8:22:9f:e4:48:b8:d6:bd:d7:e4:f9:
                    31:3f:66:52:c5:1d:42:db:b1:9b:8a:ce:67:6d:f8:
                    b8:8f:88:a8:a5:3e:f9:93:0c:6c:0d:fa:9c:75:86:
                    d1:a9:16:45:b7:2c:e5:43:40:d0:26:c2:de:cf:12:
                    46:01:c5:31:88:53:d6:11:66:8c:d3:f0:57:b7:db:
                    2b:61:3b:46:59:84:1e:b4:4d:3a:c7:bc:3b:0d:34:
                    62:f8:2a:df:68:c3:5d:1f:b0:bf:f1:12:5f:34:2c:
                    d5:0a:6d:43:d9:24:33:52:cc:d3:bb:e5:81:ed:8b:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:62:BB:5E:6C:4F:97:27:6D:53:79:A8:CA:44:9D:EC:39:96:85:01
            X509v3 Authority Key Identifier:
                keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:87:dc:cf:34:f3:b1:a9:39:99:0b:26:4c:66:b7:78:96:
         9d:43:19:20:f0:00:29:59:85:7c:9b:a8:5a:08:e3:5a:fc:59:
         64:06:cb:fc:fa:31:bd:49:52:26:2f:cb:3e:d5:f4:e3:5f:ad:
         a5:61:cc:50:05:57:fe:7d:00:40:fb:e2:14:4f:23:c7:57:38:
         4c:61:da:4e:2b:b7:b6:f3:1b:9d:74:22:39:1a:a7:8c:6c:8b:
         11:be:d8:06:93:66:22:0f:a2:41:87:8c:8a:83:15:28:6b:a1:
         94:a1:68:39:0d:6c:55:a0:13:17:66:17:10:d2:14:8f:36:44:
         07:cb:1b:35:70:5a:bc:0e:d0:23:52:cf:98:ae:a8:55:77:c8:
         1f:6a:e4:d4:7d:e3:f5:66:ad:5d:1e:d5:26:2f:72:c9:6e:fd:
         d1:a7:43:f9:f4:ef:ef:78:f7:da:38:1c:11:f3:7f:2b:65:94:
         d5:22:52:01:c2:cb:f0:ea:f1:ea:46:37:96:2d:7c:8f:2d:8b:
         6d:27:37:ed:19:23:bd:af:5b:24:c3:3f:ee:a5:ff:e2:66:cc:
         b6:60:33:db:ae:f5:3a:b0:80:1c:d7:95:58:fe:4a:1e:4a:7f:
         a1:76:e1:1a:bc:e4:10:ed:03:e9:24:2a:42:32:21:22:94:d6:
         ef:e8:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:27 2026 by rpki-client