This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          8Vua0YP5HVOs7bO1vaj4cZTguY5PQKO291pGM/0ENWA=
Subject key identifier:   52:D5:1A:A5:F5:C5:F1:4C:12:AE:54:E3:C1:28:9E:10:AF:3A:97:27
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       14EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          14E7
Signing time:             Sat 24 Jan 2026 16:35:15 +0000
Manifest this update:     Sat 24 Jan 2026 16:35:15 +0000
Manifest next update:     Sat 31 Jan 2026 16:35:15 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: MvdLXZJ44WRSapF/mncaw/u67FOEeLJ1qPSuTbfTIfM=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: K3UhQQDhvIK9kiqYEaaLUGkHSXsQC8El8DjsvYMTmMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5354 (0x14ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Jan 24 16:35:15 2026 GMT
            Not After : Jan 31 16:35:15 2026 GMT
        Subject: CN=6974f4c3-c247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:9c:a1:6b:16:97:49:43:fa:b2:02:88:c0:
                    54:85:c0:ea:7d:80:55:9c:dd:66:cb:69:64:ad:8e:
                    67:dc:16:a4:ff:a1:d3:58:04:c4:dc:5c:ef:4c:b1:
                    2a:81:dc:45:0a:9f:73:f0:21:e5:e4:09:d5:98:b4:
                    52:50:28:61:c1:52:ef:89:23:66:77:b8:2c:ef:c4:
                    e8:30:25:93:85:9e:82:4d:f3:34:9c:1a:3e:d5:aa:
                    08:ff:30:2c:48:45:5e:4a:fc:9b:ae:e7:41:ab:b9:
                    b2:7b:cc:96:d7:70:e8:29:7d:e0:63:3c:81:f2:10:
                    10:81:fc:29:f4:6f:cd:27:7d:ae:7c:29:c2:f8:a8:
                    d9:56:13:e8:58:62:4c:ed:35:6e:4f:b2:ff:61:5c:
                    db:37:07:d8:fc:4f:e0:5d:1f:0c:e1:9e:ce:5f:03:
                    e6:8c:87:13:61:8c:62:7e:27:c1:2d:5a:4a:0f:fa:
                    1b:df:28:4d:90:09:81:b5:e8:a4:cd:68:aa:b6:0a:
                    4b:81:64:e6:6a:3d:94:77:36:14:64:57:b0:9b:16:
                    d8:de:cf:0f:01:99:54:fb:15:ba:80:cc:df:c3:5a:
                    bb:d6:f0:e9:a1:f0:16:03:71:ab:89:f6:0d:ec:7e:
                    2d:e5:60:4f:9b:d9:7d:0b:dd:4e:03:45:f3:90:22:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D5:1A:A5:F5:C5:F1:4C:12:AE:54:E3:C1:28:9E:10:AF:3A:97:27
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:c4:cb:b8:34:95:a0:b0:68:5b:3e:6b:73:70:c2:16:6b:
         59:b2:0d:f9:8d:2c:d9:05:9f:6b:90:83:ce:2c:4c:94:d8:22:
         b6:4c:fb:bc:18:4a:f0:72:e1:29:31:e0:bb:8a:04:5f:f5:2a:
         de:03:83:b3:5d:9b:e3:58:e9:c8:32:ec:e5:a2:ae:a3:1f:35:
         f8:a0:c4:5d:cb:85:40:05:ac:5d:3b:93:85:3f:e2:f6:f6:2c:
         61:27:b7:c3:b7:d2:f3:11:19:30:cf:29:11:0e:3a:39:44:01:
         d9:6e:8a:f6:2c:58:be:4d:de:17:93:ec:3c:86:4b:3c:f4:ed:
         51:de:f4:cb:8b:36:da:90:2b:cc:6e:d9:4a:35:56:43:df:43:
         ee:f7:84:3e:be:2f:73:8d:f4:33:e4:02:6d:0e:03:35:38:c9:
         88:d6:28:38:7e:80:c6:a6:5a:27:6d:13:ba:7b:b6:10:c4:e3:
         cf:c7:5a:ab:ad:c2:10:db:38:60:00:03:3c:f6:1b:43:de:3e:
         15:c7:60:06:a3:5b:51:36:bf:b5:11:c1:a0:12:e4:b9:69:b3:
         6f:aa:c6:02:c9:4e:cb:3b:d9:bc:5b:aa:4b:c9:a2:7d:11:55:
         ee:ce:02:c3:c4:7e:fb:56:d8:ef:fa:ab:e6:93:0a:6f:b9:01:
         b8:0f:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:38 2026 by rpki-client