This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File:                     5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier:          jrMZvlYFwIf/VwX7ZKY6G6I+aQTkQkxqwJRpdbOoons=
Subject key identifier:   20:04:0D:F5:D8:4E:49:A3:98:3F:78:91:2A:9F:C0:A3:21:72:34:10
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer:       /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number:          0158
Signing time:             Sun 25 Jan 2026 03:23:52 +0000
Manifest this update:     Sun 25 Jan 2026 03:23:51 +0000
Manifest next update:     Sun 01 Feb 2026 03:23:51 +0000
Files and hashes:         1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: 74+PCXVRo6YGKoP1U3KnJQmJsv2VwkWsvb/LYz3Pmbs=)
                          2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: cI4FDEKWRhQY0ajIeTjSoz0f1fAREqKz57rarUIiyGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
        Validity
            Not Before: Jan 25 03:23:51 2026 GMT
            Not After : Feb  1 03:23:51 2026 GMT
        Subject: CN=69758cc7-2caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:76:9b:9c:b3:99:97:86:de:ed:0a:01:7f:
                    2f:22:bc:51:80:6b:5e:1c:71:dc:41:1c:5f:aa:26:
                    6b:22:cd:1f:34:b7:89:62:2a:22:6a:14:d9:67:6b:
                    7e:2f:3d:09:87:e7:59:24:a2:34:f3:c7:54:54:61:
                    7b:dc:ee:0e:03:28:5f:48:e0:e8:0d:95:15:3d:07:
                    cb:15:80:df:c9:8a:a5:cd:2a:e5:5c:04:cf:9e:95:
                    b7:3b:01:02:49:b3:bf:98:f4:09:62:33:10:49:95:
                    60:1d:81:8b:50:67:8c:23:51:77:00:02:6e:6c:91:
                    70:fc:2b:72:2d:6b:df:7c:1f:e6:6e:8e:a5:4e:bd:
                    59:13:6a:99:9a:94:6d:5b:2d:9d:bf:c4:5d:ae:c6:
                    c6:d4:6a:19:37:71:a1:0f:22:43:2a:64:17:bc:cd:
                    c5:1c:09:9c:4f:db:54:36:05:02:69:33:27:f0:a2:
                    68:ca:6c:86:78:b8:b1:45:b1:44:3f:66:00:17:2b:
                    b9:b3:83:7a:6c:c5:b6:a2:16:a2:a9:2b:4d:f1:dc:
                    54:a9:38:9d:3b:0a:81:2e:08:24:cf:8c:67:c5:5e:
                    0b:27:e0:42:4c:b5:8b:0f:c2:5b:4a:57:45:17:cc:
                    35:30:75:78:ef:d9:66:1e:26:8c:61:fe:bc:96:cc:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:0D:F5:D8:4E:49:A3:98:3F:78:91:2A:9F:C0:A3:21:72:34:10
            X509v3 Authority Key Identifier:
                keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f3:18:bc:c4:15:5c:31:d1:29:f4:f0:bb:f7:f5:76:b8:d0:
         d0:07:74:73:7a:2d:c8:4e:4a:50:ee:28:6a:68:da:14:c6:6e:
         42:3d:e9:4d:70:46:65:8c:9c:41:7b:e7:f0:fc:e0:0c:b8:9e:
         21:61:f2:8c:98:e6:d5:40:b9:e4:5f:95:24:bb:b4:10:09:78:
         8c:ca:e5:8e:b5:3e:9d:2f:73:cb:e8:a3:87:71:45:63:a8:8f:
         3b:7c:a4:7e:39:b4:7e:56:12:84:7a:3f:d9:0a:29:e6:64:aa:
         21:ff:d8:35:83:97:54:0a:44:b2:4b:c3:66:f2:8a:9f:b5:70:
         67:06:c5:22:96:cd:ed:0d:1c:40:be:a2:ce:b9:6a:ac:60:4f:
         1e:d4:2f:88:a0:93:7e:bb:fd:4c:fc:19:63:81:a8:9e:c6:95:
         c4:ed:4b:0f:b9:d0:62:71:70:14:d0:78:29:9a:0f:ec:40:87:
         1d:24:ec:f8:b0:61:00:2d:3c:02:64:e7:49:cd:9c:65:81:58:
         48:17:6c:01:d2:62:37:e2:15:97:2b:6c:8f:47:4d:e5:3c:a2:
         4a:68:a8:66:85:ef:fd:c2:88:07:eb:58:04:37:a2:6d:5f:e0:
         2c:53:6a:22:5b:63:dc:3c:f9:6f:d4:42:87:80:d3:8f:45:31:
         32:3c:f9:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
M0I1QzcxMTAvBgNVBAUTKEU0MUVENzU2MDc0QjM3QUREQzc5NEY5NDBCRDFGNTNF
M0Y2NzZCOTMwHhcNMjYwMTI1MDMyMzUxWhcNMjYwMjAxMDMyMzUxWjAYMRYwFAYD
VQQDDA02OTc1OGNjNy0yY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/N2m5yzmZeG3u0KAX8vIrxRgGteHHHcQRxfqiZrIs0fNLeJYioiahTZZ2t+
Lz0Jh+dZJKI088dUVGF73O4OAyhfSODoDZUVPQfLFYDfyYqlzSrlXATPnpW3OwEC
SbO/mPQJYjMQSZVgHYGLUGeMI1F3AAJubJFw/CtyLWvffB/mbo6lTr1ZE2qZmpRt
Wy2dv8RdrsbG1GoZN3GhDyJDKmQXvM3FHAmcT9tUNgUCaTMn8KJoymyGeLixRbFE
P2YAFyu5s4N6bMW2ohaiqStN8dxUqTidOwqBLggkz4xnxV4LJ+BCTLWLD8JbSldF
F8w1MHV479lmHiaMYf68lsz5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAEDfXY
TkmjmD94kSqfwKMhcjQQMB8GA1UdIwQYMBaAFOQe11YHSzet3HlPlAvR9T4/Z2uT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDNy82N0QyNDM5NkU4
MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42M2NlVS1VQzlIMVBqOW5h
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVCN1hWZ2RMTjYzY2VVLVVDOUgxUGo5bmE1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjVDNy82N0QyNDM5NkU4MDkxMUVFQkU0ODk1NjNDNEY5QUUwMi81QjdYVmdkTE42
M2NlVS1VQzlIMVBqOW5hNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA98xi8xBVcMdEp9PC79/V2uNDQB3Rzei3ITkpQ7ihqaNoUxm5CPelN
cEZljJxBe+fw/OAMuJ4hYfKMmObVQLnkX5Uku7QQCXiMyuWOtT6dL3PL6KOHcUVj
qI87fKR+ObR+VhKEej/ZCinmZKoh/9g1g5dUCkSyS8Nm8oqftXBnBsUils3tDRxA
vqLOuWqsYE8e1C+IoJN+u/1M/BljgaiexpXE7UsPudBicXAU0Hgpmg/sQIcdJOz4
sGEALTwCZOdJzZxlgVhIF2wB0mI34hWXK2yPR03lPKJKaKhmhe/9wogH61gEN6Jt
X+AsU2oiW2PcPPlv1EKHgNOPRTEyPPk4
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:21 2026 by rpki-client