This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File:                     5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier:          vE+RXiqGh5hd3O16ragge8orYdCnk98+gdmcGhmXI9k=
Subject key identifier:   C8:96:BC:96:DB:6E:7F:98:3A:CE:1D:75:B5:68:E6:C8:42:B3:27:D4
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       0919
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number:          0891
Signing time:             Sat 24 Jan 2026 20:32:02 +0000
Manifest this update:     Sat 24 Jan 2026 20:32:02 +0000
Manifest next update:     Sat 31 Jan 2026 20:32:02 +0000
Files and hashes:         1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: t3yy0KyLv2sBykdPCEW7omFZEI9oAlQuVMcq1Ryg17Q=)
                          2: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: /nLaGI3z1xCPylElkOX2xhje5D3mGsOohSwIv2xzDUQ=)
                          3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: D4/4gO/cbJfEP5wlYW+iiyf7YJHeT+1Ir2WyIsZ62e8=)
                          4: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: bA19Y+YseTfcXQaXEUZi3q3mODfpiIfKTPYCQNkXISs=)
                          5: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: 3KAXB0y77UEXT0NSmBqRqJYol3EdpUOQESEbjqAUowo=)
                          6: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: VzbPsPGLDl5f/oFOZ9NpXnSyLExyEIRw6V+vhyTevuk=)
                          7: C34D8010A7D311F0A3E6E75EC4F9AE02.roa (hash: E/cmWCt7wJm7XfYKnd6uTnnMTRXprrckSYOl8rNGMiw=)
                          8: 311C494286CC11F09348D16BC4F9AE02.roa (hash: +BsmD54GLCQa0LnHgyrHw492ycZW9i6yM0KqljFRK2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
                          rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
        Validity
            Not Before: Jan 24 20:32:02 2026 GMT
            Not After : Jan 31 20:32:02 2026 GMT
        Subject: CN=69752c42-e0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:e7:b9:36:a0:70:fe:58:ea:82:c8:59:d4:
                    ee:22:1c:bf:5c:67:79:8c:82:ed:90:a9:e0:e6:10:
                    dc:be:ae:ea:2b:46:93:5e:8b:b6:91:d4:3b:df:81:
                    96:75:b9:be:15:b2:c4:91:9e:16:0e:92:bf:41:7a:
                    07:65:1a:b1:98:51:9b:a3:34:22:f5:bb:39:19:e1:
                    67:81:33:6d:77:e6:ac:af:a3:b5:e9:51:95:a6:f6:
                    0b:57:3c:c9:d6:bd:81:93:ac:9d:f6:bd:c8:38:e3:
                    45:5b:a8:34:af:1e:f9:77:2f:60:b0:de:8a:4f:ce:
                    b9:e7:70:8f:36:58:a9:53:8e:bd:7d:20:1d:6f:76:
                    32:db:fc:45:63:08:a7:c6:da:82:58:a3:01:f7:13:
                    ef:0b:da:e8:08:19:fc:64:0b:7d:73:14:c2:c4:e8:
                    dd:06:f7:87:3b:8b:2c:78:ec:e9:d4:0b:c6:ac:f8:
                    87:15:19:d4:f6:db:cf:db:4e:30:b1:21:a3:45:48:
                    54:59:1b:03:1b:e8:9d:23:f5:64:35:34:eb:e1:74:
                    f5:f1:1c:39:7e:f8:32:22:9b:33:d3:26:0d:4d:9f:
                    a5:32:44:3b:67:2f:fe:96:10:ce:d3:28:21:18:8a:
                    b0:a1:31:d2:57:b5:55:fc:41:3b:a3:bc:05:78:96:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:BC:96:DB:6E:7F:98:3A:CE:1D:75:B5:68:E6:C8:42:B3:27:D4
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3f:28:b7:ba:33:0a:c3:2c:7b:99:bc:ac:d7:74:9f:c0:1e:
         52:56:6e:9a:ca:f6:03:2c:18:52:5f:dc:77:c1:f3:32:c1:7b:
         9e:1b:62:64:31:e6:ca:b5:88:b7:2b:e9:51:a0:98:8d:fd:2d:
         ce:28:4e:74:b6:49:a2:67:84:a6:08:5a:79:10:d4:d2:94:eb:
         22:80:07:6a:c6:5c:e4:e9:f6:9a:dd:df:06:03:41:80:ad:b3:
         ec:c4:5e:84:88:e4:37:5f:64:c1:81:ca:cd:7f:77:33:2e:1d:
         41:84:aa:a7:6d:5d:ca:51:50:6b:7e:e4:22:b7:2e:f5:aa:1b:
         c3:09:3c:c6:5e:82:59:d0:d4:b0:ab:d3:8f:c5:4e:8e:d4:5d:
         0e:eb:3b:d1:4f:5f:83:29:21:4e:da:34:2b:8d:65:ab:01:e6:
         27:5c:a2:8a:17:35:ca:d9:5e:38:7c:61:34:f2:73:aa:3d:e3:
         72:98:16:13:52:96:db:48:6a:f1:0c:f3:af:9b:56:e5:50:96:
         cf:b8:9c:cf:3d:1e:4d:0d:db:cc:c5:98:9c:c5:42:f9:ba:17:
         5d:06:4d:00:87:f8:c1:46:90:47:a8:3a:eb:5a:af:2a:33:07:
         97:2e:55:a8:34:d1:dd:42:65:7d:97:d4:d0:b3:db:78:9e:33:
         4c:34:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:18 2026 by rpki-client