This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
File:                     5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json)
Hash identifier:          TduceD02QAbgao4DIhMkhzBNLiikTSHXYW7ti4mzG34=
Subject key identifier:   4D:2A:BC:73:FA:70:4F:AF:9D:F3:C3:EA:6D:31:47:98:67:43:1C:B3
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Certificate issuer:       /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial:       3508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
Manifest number:          3502
Signing time:             Sat 24 Jan 2026 14:48:33 +0000
Manifest this update:     Sat 24 Jan 2026 14:48:32 +0000
Manifest next update:     Sat 31 Jan 2026 14:48:32 +0000
Files and hashes:         1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: zi4O5CkEjHbR+OtSZaUNti+sI2Ykp4enI9ITkKTztf0=)
                          2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: tieWSzu8lKOoBqQ293X6Mhk+ox3CzZ2+KgEe+KsaI+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
                          rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13576 (0x3508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
        Validity
            Not Before: Jan 24 14:48:32 2026 GMT
            Not After : Jan 31 14:48:32 2026 GMT
        Subject: CN=6974dbc1-12de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:e1:f7:78:0d:c8:2e:d2:b2:fe:f8:8a:9c:
                    81:df:9f:69:60:2b:4e:34:4b:d3:26:d6:01:ee:14:
                    e7:0e:dc:f7:15:e3:e4:99:a4:99:d0:c6:ce:0b:28:
                    f0:df:89:5e:ea:00:8b:6a:b8:4f:76:97:60:74:a2:
                    58:a7:79:b6:f0:b9:7e:3f:b7:70:1d:13:be:78:9b:
                    e4:a7:71:8f:9e:41:6d:ed:60:5a:65:16:4a:28:0f:
                    d8:b1:4c:d6:76:bd:42:13:99:33:52:3c:2d:81:63:
                    62:88:1a:83:56:d3:bf:26:62:2f:b9:0a:92:03:4b:
                    60:22:2f:6a:0c:93:0d:39:dd:ff:78:90:a1:30:2a:
                    f4:c0:a3:e1:03:08:88:b7:cd:4f:73:4c:4e:32:5d:
                    da:ce:69:cf:30:db:45:38:8c:a8:d0:e8:c4:b1:19:
                    b4:85:d0:fb:dd:c7:36:58:39:32:98:a9:0c:de:46:
                    cf:ce:1d:97:87:32:de:c4:4f:c3:5b:06:9f:3c:5e:
                    b5:f6:09:a0:7f:b7:c1:e1:ee:8c:e9:87:8a:99:7b:
                    31:83:eb:6a:3b:1e:f1:de:03:d9:ba:dd:a2:e9:be:
                    03:4f:a2:55:5b:94:2a:0e:bd:e5:4c:70:8d:d9:f1:
                    ad:6c:73:18:3a:01:0e:26:63:2a:48:89:d5:80:50:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2A:BC:73:FA:70:4F:AF:9D:F3:C3:EA:6D:31:47:98:67:43:1C:B3
            X509v3 Authority Key Identifier:
                keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:11:c8:d6:ae:a4:2d:5b:e7:67:36:09:9d:f8:91:1b:c0:
         78:67:bb:1c:6c:87:59:a8:9e:51:0e:a1:cf:aa:a0:31:13:d1:
         55:f1:39:64:74:d3:7f:7f:c6:4c:5a:97:40:1f:54:79:85:6c:
         b0:b9:fd:bb:87:4d:95:fd:74:12:6f:14:62:c0:3b:8b:72:ae:
         6e:36:00:8e:db:94:10:a4:fd:12:b6:f3:a9:57:21:d0:3f:3d:
         45:6a:96:98:f2:fc:f9:a5:82:b5:d6:c0:5a:ce:2d:6c:fb:0e:
         38:cb:84:29:e7:17:91:3c:12:27:e4:7a:2d:b0:13:2a:18:ba:
         12:3a:b2:67:c6:fe:60:81:3c:b8:75:42:4d:25:ac:59:f7:88:
         f9:54:52:ca:f3:12:9c:44:a9:96:87:ec:9a:a2:62:2b:6c:28:
         44:a1:a6:d0:89:f7:3e:d1:78:45:45:5a:b0:a9:7f:94:f3:05:
         26:07:42:b0:24:09:f0:d1:dd:8d:ca:bd:3c:ea:eb:d5:37:a3:
         f0:64:c8:34:75:69:66:70:30:8f:f1:04:e5:b7:92:e9:5c:6b:
         31:2a:0f:16:4f:68:99:97:cb:93:16:a4:5f:0f:f3:ff:c9:ad:
         e5:df:0e:e7:c7:9d:12:7f:c6:62:35:80:65:c4:c5:6a:aa:6d:
         8d:15:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:09:38 2026 by rpki-client