This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          o4MQ6/vhQX65WcGMs4xxB8JGAZCmMt5KZUvbC+B7XBU=
Subject key identifier:   88:6A:38:08:D7:1C:37:DE:B4:41:E3:20:9B:40:70:B1:15:8D:40:AD
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0CF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0CE7
Signing time:             Sat 24 Jan 2026 17:50:35 +0000
Manifest this update:     Sat 24 Jan 2026 17:50:35 +0000
Manifest next update:     Sat 31 Jan 2026 17:50:35 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: JRZ5cuQ0MIg4kYSXbTogY0UWihu1X9h6noBAhTdGKpg=)
                          2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: CYogDkkcuThBt0m18SN49Ve4wWE9zs9AU2x6u6Qm/Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3321 (0xcf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Jan 24 17:50:35 2026 GMT
            Not After : Jan 31 17:50:35 2026 GMT
        Subject: CN=6975066b-0978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:a8:a3:6f:3a:98:8f:f8:89:98:c9:cd:e3:
                    d7:59:96:a0:9b:82:1e:5c:8e:5b:f3:9b:88:bb:02:
                    62:11:ad:42:b8:68:b4:23:92:ed:d3:5c:52:91:1b:
                    55:3a:0d:6a:55:89:cf:89:35:f8:1d:ef:75:a8:e2:
                    33:e0:b8:7e:e7:b8:eb:e1:18:3c:9e:df:9f:dc:d6:
                    8f:aa:dc:47:06:e1:4d:4d:6e:94:dc:fa:95:92:22:
                    ee:0b:fd:12:f6:f7:12:f4:63:69:b8:0d:71:48:13:
                    a3:cc:be:c3:49:0a:65:55:d8:33:1a:63:42:ef:ba:
                    0f:39:ae:fb:9a:46:91:9b:e1:40:b6:78:49:d0:0b:
                    c4:87:be:9d:5b:df:27:f0:77:e8:ba:44:ef:d5:c7:
                    fd:4e:a3:05:81:34:de:fb:c0:9d:8d:68:de:d6:41:
                    b7:b2:e5:fd:db:32:e2:1c:b0:2f:0c:d7:0b:e4:94:
                    26:8a:22:bb:04:99:4b:d4:0d:8b:5f:55:dc:ca:d2:
                    80:a1:8e:bd:13:05:df:07:97:51:63:b4:ee:a8:75:
                    c5:97:ae:46:f7:79:72:1a:f3:eb:9f:f8:cd:da:4f:
                    e4:6a:b2:6d:76:21:99:c8:00:0e:bc:61:8d:7b:89:
                    8b:76:95:a2:57:c1:34:35:75:4b:e6:81:34:d8:76:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6A:38:08:D7:1C:37:DE:B4:41:E3:20:9B:40:70:B1:15:8D:40:AD
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:28:68:7c:14:57:f0:56:0c:31:bc:fb:fd:f7:4b:88:45:b0:
         9e:5b:e0:be:77:25:87:7f:94:3e:8f:43:71:2d:17:cd:c3:72:
         3c:41:eb:57:6c:59:a0:73:ca:de:d3:ae:8c:7c:93:55:b7:f2:
         ef:4a:5b:01:7e:6b:e1:01:3a:f7:db:0a:b0:81:26:30:62:5f:
         7d:fc:f0:c8:a8:6a:ef:90:1d:87:fd:00:17:07:e8:f1:5b:e2:
         07:12:93:7d:fb:3b:be:77:08:ce:5f:bb:95:02:cb:6a:e5:b0:
         97:37:b5:ef:41:26:86:12:33:af:fa:33:23:ff:4f:86:e9:f0:
         06:8d:49:05:15:a7:70:1a:62:7c:62:8e:44:d8:29:86:fa:df:
         da:ab:6b:74:77:ec:2c:66:98:56:b2:39:06:7e:d6:2a:2c:0e:
         1e:b0:2b:b1:04:0c:63:9e:5e:57:70:a0:54:ee:ff:71:94:60:
         81:88:af:82:96:1f:c4:7f:1b:a1:02:4d:49:a6:00:d4:be:1c:
         d8:0b:61:3d:5b:92:6a:f9:90:0b:b0:c1:a8:6c:82:17:11:a9:
         7d:82:12:7c:a6:5b:01:19:e9:c5:f4:47:01:6f:d9:5a:09:5c:
         65:5c:a3:ab:db:1f:60:a6:d2:ed:eb:06:09:f8:ac:20:2e:6a:
         e7:7d:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:52 2026 by rpki-client