This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
File:                     t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json)
Hash identifier:          t2DfPoerGbEZApkDd29kG5hW2xQbCs37aC3vIiPmBbw=
Subject key identifier:   3C:6A:B8:2D:DF:26:92:F9:BC:BD:3E:85:3C:1B:71:4C:CC:C3:8B:46
Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
Certificate issuer:       /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Certificate serial:       08AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
Manifest number:          089F
Signing time:             Sat 24 Jan 2026 19:55:22 +0000
Manifest this update:     Sat 24 Jan 2026 19:55:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:55:22 +0000
Files and hashes:         1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: a5DnUMeDTlS1iPyi0RCf0YZrx2C4WHXeakUHXFyAujs=)
                          2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
                          rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
        Validity
            Not Before: Jan 24 19:55:22 2026 GMT
            Not After : Jan 31 19:55:22 2026 GMT
        Subject: CN=697523aa-70e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:f8:69:fd:94:7e:a8:07:68:cb:83:62:7b:
                    2c:f8:fe:a1:bb:e1:84:0b:56:4f:c8:a6:83:7a:57:
                    a7:fd:91:dd:3d:45:09:c7:a6:f9:18:2c:b6:26:47:
                    ac:0e:02:46:91:81:d6:88:98:8a:cf:e6:85:d8:fd:
                    86:ec:21:40:65:dc:9f:ce:0d:5a:7c:7d:0d:cb:ec:
                    82:65:76:77:12:3f:07:34:f8:ee:b0:03:42:ca:77:
                    86:fb:20:84:60:e7:71:a7:a3:f9:31:e8:08:04:fb:
                    32:76:2b:98:da:61:88:c7:13:65:cb:97:b1:03:8b:
                    e5:77:47:e4:a1:f9:0b:b8:44:54:50:bc:6c:7f:0a:
                    08:46:56:67:e7:a5:da:55:30:76:1c:87:af:5b:ae:
                    55:05:c6:f2:cc:48:9a:5e:28:c3:e4:e9:89:7e:c3:
                    cc:32:d6:f5:76:b2:94:19:07:be:0d:3f:1d:24:ca:
                    8c:1c:48:60:97:f2:a6:ab:d1:e5:5a:5a:10:9e:94:
                    fa:b2:65:9a:ac:1d:98:d0:06:03:0a:a9:d7:66:22:
                    2d:d5:ee:96:e3:db:1a:fb:d2:d7:ce:5b:d3:06:4e:
                    b4:ca:a4:80:cd:8c:47:a1:4c:b8:52:3c:34:40:14:
                    bf:e9:46:32:44:5b:bd:02:c4:06:57:e8:24:01:a2:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:B8:2D:DF:26:92:F9:BC:BD:3E:85:3C:1B:71:4C:CC:C3:8B:46
            X509v3 Authority Key Identifier:
                keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ed:d3:e0:b1:01:71:0d:28:72:e7:81:21:6a:eb:c3:13:68:
         16:d7:f3:1c:2a:59:87:45:cf:c5:fa:85:0d:aa:d8:41:ba:54:
         b7:02:e4:27:99:c1:b7:a2:0a:d0:47:79:20:f4:f4:fa:9c:04:
         98:4d:3d:42:e7:6f:6c:c6:6f:44:fc:e1:29:1a:47:05:86:ba:
         07:66:4b:e7:7f:38:2a:e8:e0:29:b8:e1:f9:25:79:8b:bc:fe:
         9a:4c:e9:9d:82:a5:5e:67:d4:28:3f:40:cb:5e:05:39:e3:ba:
         b9:66:c7:bd:c9:68:c5:a2:ed:19:e3:07:db:62:0e:ef:a0:a9:
         b6:2d:47:a1:85:b7:71:2e:6f:b7:6b:aa:c0:95:88:aa:31:22:
         b5:8c:5e:bb:78:18:de:61:d2:e7:06:71:8e:33:4a:7d:42:1f:
         ee:18:33:6a:d8:06:ff:d6:84:2e:1c:a8:6d:55:0a:b3:e9:2c:
         2c:63:1c:22:c1:f0:a8:c3:6c:52:b0:35:16:d6:e8:c2:56:1e:
         1f:8c:c9:4e:05:ca:1e:66:05:0d:30:20:0c:14:ce:b9:e0:29:
         da:b7:89:78:d7:b0:d8:3a:b9:1b:f4:c8:0a:a9:71:8c:91:8a:
         38:da:1b:cd:90:03:47:d1:f6:66:cc:fe:6b:40:c3:3e:c5:27:
         bb:62:d6:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2
MEE2Mzc5MEUwHhcNMjYwMTI0MTk1NTIyWhcNMjYwMTMxMTk1NTIyWjAYMRYwFAYD
VQQDDA02OTc1MjNhYS03MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvD4af2UfqgHaMuDYnss+P6hu+GEC1ZPyKaDelen/ZHdPUUJx6b5GCy2Jkes
DgJGkYHWiJiKz+aF2P2G7CFAZdyfzg1afH0Ny+yCZXZ3Ej8HNPjusANCyneG+yCE
YOdxp6P5MegIBPsydiuY2mGIxxNly5exA4vld0fkofkLuERUULxsfwoIRlZn56Xa
VTB2HIevW65VBcbyzEiaXijD5OmJfsPMMtb1drKUGQe+DT8dJMqMHEhgl/Kmq9Hl
WloQnpT6smWarB2Y0AYDCqnXZiIt1e6W49sa+9LXzlvTBk60yqSAzYxHoUy4Ujw0
QBS/6UYyRFu9AsQGV+gkAaKVNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxquC3f
JpL5vL0+hTwbcUzMw4tGMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2
NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh
cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCz7dPgsQFxDShy54EhauvDE2gW1/McKlmHRc/F+oUNqthBulS3AuQn
mcG3ogrQR3kg9PT6nASYTT1C529sxm9E/OEpGkcFhroHZkvnfzgq6OApuOH5JXmL
vP6aTOmdgqVeZ9QoP0DLXgU547q5Zse9yWjFou0Z4wfbYg7voKm2LUehhbdxLm+3
a6rAlYiqMSK1jF67eBjeYdLnBnGOM0p9Qh/uGDNq2Ab/1oQuHKhtVQqz6SwsYxwi
wfCow2xSsDUW1ujCVh4fjMlOBcoeZgUNMCAMFM654Cnat4l417DYOrkb9MgKqXGM
kYo42hvNkANH0fZmzP5rQMM+xSe7Ytbm
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:18 2026 by rpki-client