This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File:                     5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier:          5kxPCbBy4UO6ow9mySy+H6hsp8bfWMuLAALjNIOwCEs=
Subject key identifier:   B6:D3:05:98:DE:C7:1B:87:4C:94:42:19:05:53:F4:DD:DC:48:15:FE
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer:       /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial:       34FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number:          34FB
Signing time:             Sat 24 Jan 2026 15:02:27 +0000
Manifest this update:     Sat 24 Jan 2026 15:02:27 +0000
Manifest next update:     Sat 31 Jan 2026 15:02:27 +0000
Files and hashes:         1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: rDcLComLvZQQOGaavIAWwga5TNDJn4OMU254NqlEGXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
                          rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13566 (0x34fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
        Validity
            Not Before: Jan 24 15:02:27 2026 GMT
            Not After : Jan 31 15:02:27 2026 GMT
        Subject: CN=6974df03-5363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:6b:4f:9b:91:fa:98:d5:eb:57:c6:df:98:
                    ed:c3:51:b9:d5:a3:1d:9f:cd:3f:32:d1:90:d8:fa:
                    30:59:8e:64:2d:f0:78:f9:51:3e:7a:96:12:c0:22:
                    30:97:af:bb:9a:e2:db:85:fd:4e:93:cd:d5:fa:25:
                    0c:15:98:11:9e:08:40:34:a6:b3:6c:d5:08:fc:7d:
                    bc:94:30:bb:7c:89:45:4f:da:81:b4:c9:c2:19:7f:
                    70:1c:26:dc:a5:f7:e2:78:c6:54:ec:3e:7b:bd:de:
                    57:01:0c:16:55:c9:3b:9f:60:bc:f0:cf:6c:8e:d8:
                    77:6b:b2:c5:0b:99:79:9e:e1:a9:8c:11:9d:e5:9e:
                    53:1f:aa:12:ee:37:d8:5a:1d:11:83:18:82:cc:de:
                    cf:a7:62:ee:db:bb:ee:9c:4a:39:de:0a:ef:a1:97:
                    89:07:95:53:85:43:80:fa:57:98:bd:9d:1b:a6:b0:
                    75:77:35:9f:26:b7:81:4d:5a:7d:a6:af:e7:1a:80:
                    20:a7:60:d3:c9:aa:08:68:bf:d9:3c:c0:59:45:26:
                    74:5f:ff:00:e5:1a:1c:71:5a:22:16:2e:80:82:15:
                    a3:0d:c9:dc:19:26:27:a3:97:a9:41:8c:0a:40:6e:
                    64:b3:55:72:10:a3:77:e2:1b:4b:84:b7:c7:db:32:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:05:98:DE:C7:1B:87:4C:94:42:19:05:53:F4:DD:DC:48:15:FE
            X509v3 Authority Key Identifier:
                keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:67:9a:a7:ba:0f:53:fe:5f:07:14:e8:7c:92:38:d8:76:
         dd:97:8a:ca:b6:3d:2f:5c:a4:06:67:62:5e:7c:80:6c:a5:45:
         17:82:b1:ad:85:85:f8:e7:a1:dd:f4:38:42:b2:09:97:12:5e:
         16:d8:8b:e5:65:4e:29:51:cd:6f:6c:82:50:1e:f5:32:e6:bd:
         0c:8e:99:2d:28:a7:71:ae:21:1b:47:32:03:62:20:af:99:57:
         57:19:7d:e4:19:5f:d0:ec:7a:a1:34:c1:37:01:cf:5c:f0:76:
         39:6a:70:f4:97:94:8d:8b:ab:71:42:84:07:d4:08:c8:9b:af:
         da:da:74:78:b8:72:10:31:8a:4b:1c:86:86:9c:3d:00:0e:71:
         b9:37:b1:e9:0d:4d:b7:c8:e6:d6:4d:3f:c2:0a:5d:56:a9:2e:
         1e:63:2f:69:1f:a1:28:f9:66:5e:0d:bf:4f:06:ca:9c:a1:3d:
         00:69:9f:60:c8:47:7b:ed:3b:4c:b5:e2:a4:60:d2:c2:6a:5d:
         fd:85:15:a5:e0:43:ec:81:86:88:62:e5:47:53:a2:dd:be:0c:
         5c:5e:bc:25:9e:58:48:21:81:34:c2:a8:43:4f:20:2e:a7:f7:
         07:29:36:80:0d:bf:67:58:0e:26:2e:fa:b4:13:40:92:9d:1d:
         e9:e0:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:20 2026 by rpki-client