This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File:                     5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier:          UESYUObgrHvQ1cRXiFraguX6FDhQSkj1qi1NLVnSGr0=
Subject key identifier:   2C:82:E7:E3:FE:9D:5D:6E:6C:7A:9E:27:A0:AA:65:4C:B1:2A:32:DC
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       05C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number:          05A1
Signing time:             Sat 24 Jan 2026 22:33:21 +0000
Manifest this update:     Sat 24 Jan 2026 22:33:21 +0000
Manifest next update:     Sat 31 Jan 2026 22:33:21 +0000
Files and hashes:         1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: byV5z0+Qj50RokT1S9GAxLfCigOaaCmu0jE87zxRovA=)
                          2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: qDUJODkwDIIJRA6eE37o52LxfEd01z/xEmopFBMRwmA=)
                          3: D5AEE7FEF61A11F0A42262E05A6F56BC.roa (hash: STqE01wcEpvG9mE1P65luFTBT5p7VxYJV8MWZJ8Gibk=)
                          4: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: CR7Vm6k10NdfaHEGJBzf3nqkUTJVkVp4uf4oPCLeUeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
                          rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Jan 24 22:33:21 2026 GMT
            Not After : Jan 31 22:33:21 2026 GMT
        Subject: CN=697548b1-4d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:0d:d7:82:a0:c4:6a:05:80:3c:d3:8f:21:
                    64:8a:a9:62:57:b6:8e:22:5d:db:d2:d6:19:a6:15:
                    b9:ec:ed:0d:d1:05:46:26:98:55:26:09:6f:07:ed:
                    98:54:37:34:23:09:d9:c3:df:77:76:1d:b7:7d:c9:
                    23:bb:2c:6e:e8:bb:7a:5d:b5:19:cb:f3:b1:2d:21:
                    d9:f0:bc:7a:1c:98:d7:2f:c2:90:f5:64:1a:a0:8c:
                    0a:00:9e:0b:85:fa:eb:2e:1e:64:49:be:9d:5d:30:
                    b1:c5:b4:2e:eb:58:22:a5:4d:fb:71:63:1f:d0:b4:
                    01:55:bc:ec:3b:7a:3a:84:fe:df:80:aa:b7:d9:91:
                    08:bd:19:9d:17:60:4c:20:17:90:3f:b1:13:5b:e6:
                    2f:70:d5:e5:48:f3:68:4b:0c:b9:21:11:85:fa:2d:
                    40:5a:9e:91:1d:16:99:19:29:54:cf:65:cf:69:bc:
                    ae:3a:b8:70:6e:26:38:e6:2a:96:af:d6:49:8a:8b:
                    1c:cf:17:b9:39:8c:98:24:1d:65:c8:1e:e4:2a:3d:
                    d0:92:30:82:c6:22:8f:18:30:1a:fd:ba:0d:79:69:
                    cd:d5:2b:d6:59:e0:11:df:d7:4a:37:7e:32:cd:bf:
                    db:ee:32:3d:e8:3f:20:67:43:90:99:e8:67:71:46:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:82:E7:E3:FE:9D:5D:6E:6C:7A:9E:27:A0:AA:65:4C:B1:2A:32:DC
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:14:3f:24:29:5c:bd:cc:39:a1:3b:d2:13:ae:5a:de:2a:63:
         a0:f3:14:d2:cf:9d:25:25:91:6f:5e:ac:0e:bd:df:49:b9:7c:
         0f:47:7b:bd:3e:24:3e:2c:af:17:dd:c8:ce:6e:2a:7d:4b:cc:
         d3:ce:6f:99:99:be:58:3b:32:4c:fd:5d:52:91:0f:31:0f:d8:
         94:7f:eb:34:5f:2a:55:9f:1f:25:f0:f3:f7:92:d9:b6:51:88:
         62:fd:cd:25:4a:a0:39:63:81:ae:7e:2d:9a:1f:fa:04:33:85:
         eb:8d:7b:e1:f6:2a:87:db:03:60:e0:22:d7:6a:fc:8d:80:50:
         e6:3c:4f:c0:41:fa:b1:70:25:25:06:b4:5a:df:fe:a0:6a:03:
         ca:ee:6a:4d:3f:9f:99:b3:e4:f3:a2:88:3c:6a:f2:2d:99:0d:
         19:80:8f:ed:47:11:9b:ab:68:90:a1:df:1a:05:11:0a:e2:ac:
         93:c5:be:bb:c1:f8:26:58:30:9f:43:cb:04:47:d7:8b:81:ac:
         d4:56:07:c6:2b:13:9a:e7:cd:50:35:d4:86:6a:ce:4f:ca:b1:
         83:1c:f1:c5:9b:1d:f4:6e:98:bd:68:34:a4:d9:ce:61:59:a5:
         7f:37:19:93:84:47:f9:65:52:11:c3:71:4b:ec:72:d0:c7:55:
         1b:cf:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:40 2026 by rpki-client