This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
File:                     4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json)
Hash identifier:          eIAcPB2w1xiQ9REgZLwxmDaf3BnAC2M7UKIYu7W4TfM=
Subject key identifier:   0C:A9:9D:7E:7B:1E:E9:E2:9F:F6:5A:C0:5C:37:7A:80:13:45:95:56
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Certificate issuer:       /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
Manifest number:          0199
Signing time:             Sun 25 Jan 2026 02:42:25 +0000
Manifest this update:     Sun 25 Jan 2026 02:42:25 +0000
Manifest next update:     Sun 01 Feb 2026 02:42:25 +0000
Files and hashes:         1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: wg33ee/6RPd6GsUU3bj+tGirIqR0C/a5CXuzJTdyGw8=)
                          2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: UBqMKcD6QQJBVJugYFB7uy9ERpQ+nq3RYZ0virL4StU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
                          rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
        Validity
            Not Before: Jan 25 02:42:25 2026 GMT
            Not After : Feb  1 02:42:25 2026 GMT
        Subject: CN=69758311-b142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:d0:79:ed:be:b0:b8:ed:58:6b:d2:5e:90:
                    dc:62:f5:2e:94:6a:d6:45:bf:ff:61:e4:7d:14:85:
                    9f:a5:33:26:4c:63:9f:30:6f:e8:f6:66:1b:61:01:
                    d7:b2:93:dc:4f:45:c4:07:db:cf:39:2e:eb:f9:2b:
                    a7:d7:f3:7c:49:31:26:ce:31:e8:99:bd:92:97:b2:
                    1d:59:71:d0:f6:33:09:52:e7:e8:78:9c:d8:f2:6a:
                    66:b3:04:34:a1:3f:3f:0e:60:3d:1a:33:0e:53:dd:
                    1a:1b:30:a7:05:19:e3:cb:a5:00:fa:52:9a:6e:cf:
                    5a:ea:97:6a:81:2f:9f:57:b7:89:cb:b7:35:96:7d:
                    90:bd:ed:8a:28:59:96:bb:34:51:e8:ae:2e:26:36:
                    51:e0:9e:a3:62:bf:da:26:cd:70:0e:1d:86:1e:da:
                    88:11:f6:d3:23:c5:d5:71:3f:63:9d:ed:fe:06:a0:
                    f4:19:89:89:de:f6:15:34:8b:30:f0:2a:99:86:83:
                    31:1f:16:c8:4d:19:d4:08:4a:c0:85:d4:ab:0f:d9:
                    4a:75:b4:f6:87:62:b4:0a:ea:b1:3b:50:21:13:f7:
                    81:20:e1:b1:8c:1a:0c:a9:a7:bf:33:4a:8b:21:6a:
                    dc:df:b1:e7:e1:eb:e4:46:39:bd:e1:e4:35:85:f3:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:9D:7E:7B:1E:E9:E2:9F:F6:5A:C0:5C:37:7A:80:13:45:95:56
            X509v3 Authority Key Identifier:
                keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e3:86:e9:b5:7f:82:fd:06:fe:20:80:1d:8a:b3:ab:b0:f6:
         4b:97:96:a6:d3:00:94:41:97:57:cd:21:2b:8a:4f:cd:e4:e1:
         38:ab:2c:37:ef:17:08:28:4e:20:00:4d:96:7c:49:41:8b:82:
         d6:21:cd:d2:4e:6f:b7:66:2a:db:72:df:1b:87:bb:01:9d:93:
         bf:df:b1:25:0e:56:40:01:08:1e:bb:85:6f:f4:88:cf:9a:77:
         5e:bc:20:23:aa:a5:67:37:2e:36:ca:92:9a:c1:a4:8c:72:2b:
         8d:5d:d8:e4:9b:12:4d:17:b3:5c:c4:57:2e:d9:07:f9:08:1d:
         3a:fc:08:d5:00:62:89:55:00:c9:73:df:27:d2:a9:91:03:ac:
         e3:cc:95:ac:f9:19:50:af:1c:8a:b9:d8:20:97:58:48:8a:44:
         c3:73:9a:93:d4:42:6c:84:65:c1:69:92:8c:fc:6a:40:cf:bb:
         79:60:ec:18:fb:2d:33:39:9d:b8:59:16:d7:d0:6e:8e:a0:85:
         06:89:12:39:a7:55:f7:e0:3e:47:1a:34:59:01:b2:60:68:ab:
         b0:59:40:e9:f6:f8:45:e8:e6:c4:d7:ac:b4:00:4a:db:f2:b7:
         8a:fc:84:a0:42:c4:2a:d0:0c:ec:8b:e0:aa:74:f8:10:db:f3:
         e4:27:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:28 2026 by rpki-client