This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File:                     P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier:          PKcKTb/PuYEcKIlsRKcfSuABIaeaIQ96LNQ9vTSZeqU=
Subject key identifier:   9B:64:96:95:B5:23:C2:24:19:C8:B5:80:C9:59:9F:C6:10:23:F7:59
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer:       /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number:          01D6
Signing time:             Sun 25 Jan 2026 02:07:58 +0000
Manifest this update:     Sun 25 Jan 2026 02:07:58 +0000
Manifest next update:     Sun 01 Feb 2026 02:07:58 +0000
Files and hashes:         1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: IIgrREAk/UP9xta3YQhTSbhSOq7dQGoCYOyWsGbTn7Y=)
                          2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: Q3p56EBz1xC365ZPw62kRQzqXww33xOtvu79Twkm2RE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
                          rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
        Validity
            Not Before: Jan 25 02:07:58 2026 GMT
            Not After : Feb  1 02:07:58 2026 GMT
        Subject: CN=69757afe-6ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:f7:97:0d:a0:75:45:0e:2f:cd:cd:f0:3f:
                    ce:c9:80:ad:0e:b3:ad:d1:e0:19:f5:13:5b:c8:08:
                    9a:31:07:90:9c:4e:1d:86:91:60:e9:05:15:d9:36:
                    fc:8b:91:89:6a:24:6e:b1:77:1c:ac:44:30:15:94:
                    7d:bb:c1:50:57:6b:99:26:76:48:d7:e9:7c:6a:38:
                    bd:51:1a:8c:0e:9e:9e:d6:32:67:61:6f:69:7d:bc:
                    fe:b5:08:34:16:b5:33:e8:8c:1c:b0:5d:f3:65:d0:
                    4c:bc:1d:5f:6b:80:a7:9f:d9:32:e8:a8:42:bf:3d:
                    70:9e:d8:b2:f5:ea:59:79:ec:59:a6:45:9c:d4:34:
                    6e:44:76:1a:fa:50:42:c8:70:3c:cb:16:48:f8:db:
                    9c:e8:7b:f6:b1:e9:5d:a7:6e:38:a6:48:4d:7f:fe:
                    8b:54:bd:13:26:b2:a7:45:5d:ad:da:40:47:f7:d9:
                    f2:2b:ad:33:d5:20:68:58:78:d0:df:7d:0d:d3:30:
                    44:98:d5:04:f6:a4:ef:cc:e4:94:b0:8b:c3:d2:a2:
                    b9:f7:17:e5:42:cc:da:f0:39:49:fa:94:f5:e9:2f:
                    22:c0:3f:ad:23:f1:4f:7c:29:13:c4:a5:13:d0:60:
                    20:78:f3:9f:92:c1:d3:69:73:28:ca:a8:e9:04:34:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:64:96:95:B5:23:C2:24:19:C8:B5:80:C9:59:9F:C6:10:23:F7:59
            X509v3 Authority Key Identifier:
                keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:58:41:af:99:c7:1c:d8:bc:3e:12:70:ab:ad:05:bd:bb:
         8a:3d:12:f6:80:7c:8e:12:0c:f1:53:ab:38:32:65:8c:aa:09:
         19:56:4d:e2:1f:bf:42:6a:f1:34:d1:0c:4d:d9:46:db:63:ae:
         f5:b6:c7:9f:86:95:ae:d2:65:6d:07:2b:85:66:fa:ec:12:71:
         08:0b:f8:dd:e1:b9:37:eb:65:c9:2a:e2:4a:d3:b8:91:34:db:
         40:9a:bd:38:ca:6d:ba:c8:ff:e0:8e:3b:bf:86:ae:5e:bc:cf:
         7e:5e:e5:a5:50:08:38:03:24:9a:75:06:33:fb:30:53:99:f0:
         f4:4a:6c:95:0f:6a:cb:46:cb:a2:ea:ea:a1:c0:01:df:f4:93:
         48:65:bc:7a:27:e4:93:34:08:7c:1e:f9:11:e8:84:9b:3d:af:
         19:b3:66:13:2c:75:fd:e1:34:3a:89:73:03:05:ed:2f:e4:1a:
         af:e3:de:9b:e4:59:dc:32:e0:97:a0:53:c2:4d:85:00:7c:d5:
         0c:e4:f1:92:94:f5:05:f2:d7:70:99:4f:4f:97:05:08:79:24:
         ff:67:09:c9:59:be:44:03:90:b2:7b:e0:ab:b7:4a:ed:93:13:
         0b:76:e3:87:6a:a5:21:88:bb:70:d7:93:c1:8c:b2:c7:f0:44:
         58:3e:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:33 2026 by rpki-client