This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          Z3uY61aEBsaBCQTZUyB2JzG/rTo8BhLvWGRbsufwAes=
Subject key identifier:   75:E3:EB:2B:91:69:F3:48:D4:06:09:0F:78:BC:94:FC:98:D3:13:70
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          02B8
Signing time:             Sun 25 Jan 2026 00:45:25 +0000
Manifest this update:     Sun 25 Jan 2026 00:45:25 +0000
Manifest next update:     Sun 01 Feb 2026 00:45:25 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: pgTk6JUW6P7JuQT+4eUhwMEaUHRuVu4pWBrHsJV0Bc8=)
                          2: E735782EBB8911F083DB6D28C4F9AE02.roa (hash: DtI/oqkiWboVJMrxf+AJQVqm3sJam1L59OT8VLDxLy4=)
                          3: 40257FE64D0E11F082837352C4F9AE02.roa (hash: t+W+PRfrQYrbh7XQx2IvYqeiIe6MUWIZrFxO4Nad7Z4=)
                          4: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: tfcxbYznbfdNFe5IyNR+LEROebxYb/8i/hlu8FYb7dY=)
                          5: 0634745A36D311F091108A4EC4F9AE02.roa (hash: 3yh/68gpCyEqCQ/Ky45g+z98d0F72oYMNRhmKFBodog=)
                          6: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: /rZTkJxVrGCaCBBgHdKeTa4sjbp9JrB7x7YeDlLQmWI=)
                          7: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: ayEokobuKAzbqvCaAoaCylFKkvK+sjY0F0KFlKTTFc4=)
                          8: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: bN4NSjvaPpduKJ8hFPdH1/hqPY1KwXaEg5DnN2E/UzQ=)
                          9: EDD791BCA80611F09091490CC4F9AE02.roa (hash: 7EwYWHS6dsCKAPZjwARxzZsBgs3/85v8z/ckbLHErGs=)
                          10: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: E/uKntVD2+9vdpCix7BMkc1QuxAQJdv4lN8XtGXBEM0=)
                          11: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: CYzwqEoc6/SMC0B/IJXP6m4h+1RezXtW9hoKBP1iVW8=)
                          12: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: 2Evya7hywKuNJFdgTG2e4swVW1ljlMY4FziED4YUKX0=)
                          13: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: XxMv8nZKNJPUu/BjW+vTrxZ9Rq/HgNwFNQXlSa81xhI=)
                          14: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: jL8RSSnxlTI7zp7fpF6wAekdhf9q+8pPVD5T20++cfg=)
                          15: A6A5DF628AEF11F08634D486C4F9AE02.roa (hash: LC8wceWAXKoHozEbz1+x7Kz1y+OGe/mag6fLZz/IJeQ=)
                          16: B895CEFADD9A11F0956A19D3406F56BC.roa (hash: Y+2S0kH1InaLP9MRdMpYYsJI6h/UeSl/BzDqS2Qk/vs=)
                          17: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: pHfxUt8K0OrHVzjUPOPoVf9o2SIlt12ArsG85I0HnP4=)
                          18: 359EA23662B311F081881A48C4F9AE02.roa (hash: 6h9T2b+C3NcCtzKQC4faAFGmqG/D044Q3+VCE/pFz5s=)
                          19: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: E3zZxUdrUmOYhriWMVCPLH1bYJD2HjLpAdPaY2SX7v8=)
                          20: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: 6fQ9RtJZkeAm2/Mx6K4V4QJpuiRsWx//JNYH/Hg0zIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Jan 25 00:45:25 2026 GMT
            Not After : Feb  1 00:45:25 2026 GMT
        Subject: CN=697567a5-ee83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:43:f1:bc:03:29:6e:d1:39:d6:68:55:b6:
                    27:12:4a:9b:c7:3f:cc:d4:72:5d:cc:7e:d5:ec:cc:
                    16:4d:e3:90:f2:88:ca:7f:ae:6e:1d:ca:7d:81:94:
                    95:96:82:4c:0a:29:43:ca:c7:bd:32:75:9c:9b:6e:
                    3c:7b:f7:5a:78:45:b7:7a:bb:a2:a0:e5:13:f6:f8:
                    85:fc:b7:91:8e:3e:7f:02:ee:22:be:0b:3e:90:37:
                    b1:ea:01:25:e8:9e:cd:67:93:0f:7b:91:15:17:6d:
                    72:d2:74:62:3f:9c:f8:67:e5:e9:86:0e:60:98:49:
                    ac:43:9c:8e:ba:ca:17:25:4b:05:f7:97:86:7b:83:
                    b8:af:08:ee:c7:6e:e1:70:0c:40:63:32:40:55:4c:
                    b9:b7:dd:33:62:6c:3f:c9:ef:8a:49:a3:eb:46:96:
                    8b:b8:20:cd:23:f9:d8:37:fd:ea:70:4a:2f:36:e4:
                    b0:57:5d:a7:d1:f3:e2:b9:75:de:02:ad:a7:3d:ad:
                    07:87:49:cf:e8:20:95:27:41:e8:e4:f9:79:22:9b:
                    1a:07:ee:b6:6d:57:a6:1d:ea:2a:e0:4e:28:46:cf:
                    5b:cb:2a:52:ef:67:b9:ab:d1:7f:e1:7c:ef:e6:e4:
                    b8:3a:79:01:10:ee:c4:94:be:2e:c2:81:e3:0e:c1:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:EB:2B:91:69:F3:48:D4:06:09:0F:78:BC:94:FC:98:D3:13:70
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:30:64:8b:c2:ec:c9:6f:17:4d:50:29:bc:41:f4:5b:f9:8f:
         31:1b:89:4b:15:b6:8a:20:16:02:84:f9:f8:7e:85:19:19:9c:
         7e:19:a5:f8:8f:89:f7:55:47:55:58:5f:5a:d9:37:ba:a5:22:
         fa:b7:51:d7:b7:c3:7b:40:60:0a:72:14:bc:09:c7:23:b0:91:
         32:24:5b:9d:20:8d:65:7c:a7:65:65:55:dd:6d:41:1e:b3:01:
         05:01:dc:a8:83:a2:20:e5:90:5e:f2:82:4d:b4:39:bd:f3:0d:
         bf:59:c0:88:fd:f6:c0:94:c0:b4:38:b7:43:35:c7:dc:ff:51:
         3c:eb:dd:ce:85:ba:29:9b:65:68:75:82:e8:e3:41:80:05:ea:
         1c:3e:35:5e:1a:9e:b4:9d:46:6c:d0:c9:4d:f5:00:b7:fb:3f:
         01:3d:e8:85:31:05:a0:fc:57:03:60:23:d4:d8:4d:c3:8f:a3:
         69:55:72:fc:c6:70:3f:8b:8c:f9:2b:c8:ff:00:f0:70:ab:7f:
         11:90:25:53:ae:0f:6c:15:56:e0:2f:5c:ce:27:e3:30:80:35:
         95:09:da:72:c0:db:a2:ae:fa:7f:20:80:e9:f3:f0:87:97:86:
         77:d9:61:8d:c6:bf:26:16:65:b5:ee:7b:6b:ce:85:c2:c8:3e:
         ea:fe:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:47 2026 by rpki-client