This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          v4CkqikErS5eu4Z7++v++SGDNIA4AliwyTCfFJhJxI0=
Subject key identifier:   2D:6B:1B:45:DB:3F:14:6E:3B:74:A6:6F:D7:3E:95:B6:0D:34:45:ED
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0E6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0E58
Signing time:             Sat 24 Jan 2026 17:27:20 +0000
Manifest this update:     Sat 24 Jan 2026 17:27:19 +0000
Manifest next update:     Sat 31 Jan 2026 17:27:19 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: PO8OLNAbPfCb5t2ZRCGP/qhytt9Kb/8rbi5JZtPTqKQ=)
                          2: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: zNtcNtlfhOp5rrdq7IsqZIll5wTiy9EfvtnOMRdZ+PY=)
                          3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: zsBzQXlrop3QXwRjd71J0Riqde1kTtjObGNIMhQrjtk=)
                          4: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: SL8FzgT9OVj8sdsnB4xU4ICjAq4jGd5hRYBkcZgW2/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3692 (0xe6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Jan 24 17:27:19 2026 GMT
            Not After : Jan 31 17:27:19 2026 GMT
        Subject: CN=697500f7-17c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:93:b4:82:67:b1:43:55:60:cb:6f:d0:c0:
                    8b:0e:7b:b2:47:16:b9:ba:f2:0c:c3:04:2b:f7:c8:
                    4d:0b:5b:28:d4:97:ab:42:6d:34:24:c7:9e:43:ab:
                    1d:d5:ca:21:f4:7f:c0:c1:79:3a:d6:31:63:d6:7b:
                    63:9d:54:10:d8:74:4b:ac:8a:d8:74:9a:9e:77:1c:
                    2f:4f:7b:34:77:86:eb:70:8d:1c:e9:23:1c:56:2c:
                    ad:84:f6:dd:6b:7b:a3:9a:04:c6:6a:de:a9:03:c2:
                    fa:b3:1a:b8:61:17:e6:fc:6c:8f:af:ad:97:9a:46:
                    9d:57:a4:01:b7:1d:12:ec:1f:64:d1:65:9e:50:26:
                    c8:fe:71:69:90:97:ea:3c:68:30:ca:d0:22:34:e8:
                    6f:8f:eb:9c:71:3f:2a:32:19:a1:d6:67:84:40:8f:
                    9a:16:88:75:89:e1:b5:85:05:dd:58:0b:36:c8:82:
                    5f:56:5f:60:35:fc:cc:83:4d:01:98:a7:dc:8b:77:
                    a3:6a:6f:77:93:c0:dd:4a:de:92:9d:bc:b1:0c:42:
                    e7:d8:87:37:f4:9e:6b:ae:b9:49:4d:ee:c0:6f:5a:
                    b0:9f:fd:46:1e:6b:a6:0b:91:2f:63:94:68:2e:79:
                    26:98:5a:96:e7:f7:de:08:7d:82:06:2e:f8:74:23:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6B:1B:45:DB:3F:14:6E:3B:74:A6:6F:D7:3E:95:B6:0D:34:45:ED
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:39:55:a1:78:f1:3b:3f:76:94:9b:fa:db:93:3f:51:86:ea:
         99:9b:1f:38:41:1a:a7:6e:e0:74:5d:42:c9:e2:ce:18:e2:63:
         7e:14:cc:29:1a:71:80:9f:99:95:49:5c:18:b6:23:cf:58:5c:
         4c:6d:62:9e:06:c6:a4:d2:cb:fd:3f:40:56:b3:82:d6:bd:f4:
         c7:fa:62:eb:fe:39:11:81:26:96:34:f7:2e:51:c3:f9:56:84:
         96:03:20:76:31:e2:f1:07:b1:6b:d7:2f:85:f3:5c:84:85:f3:
         9c:ca:a4:44:be:42:1d:a2:82:7e:62:92:ec:50:ba:fb:4b:72:
         bd:4c:4b:e5:43:74:30:f6:cf:53:a9:44:d2:cf:44:15:86:15:
         a0:b1:7b:65:6f:2b:2f:b9:de:72:d8:81:35:80:e6:a1:86:ff:
         c2:02:6f:12:8b:11:09:21:45:e2:14:17:95:c8:c4:9b:10:fd:
         40:0e:2a:9e:b7:7d:86:54:a7:c1:0d:04:cc:3a:b0:cd:ab:e8:
         63:26:bb:b6:ae:06:bb:92:9c:7a:35:c4:35:04:2e:42:6b:bd:
         87:f9:ce:51:d3:c8:51:c4:9b:37:fa:42:2d:72:59:7e:fa:75:
         fe:88:fe:c0:d8:f8:88:9d:9c:14:a3:ef:ad:36:ab:d1:b2:7f:
         a3:cb:b4:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG
MEUyMUY4MzYwHhcNMjYwMTI0MTcyNzE5WhcNMjYwMTMxMTcyNzE5WjAYMRYwFAYD
VQQDDA02OTc1MDBmNy0xN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2SiTtIJnsUNVYMtv0MCLDnuyRxa5uvIMwwQr98hNC1so1JerQm00JMeeQ6sd
1coh9H/AwXk61jFj1ntjnVQQ2HRLrIrYdJqedxwvT3s0d4brcI0c6SMcViythPbd
a3ujmgTGat6pA8L6sxq4YRfm/GyPr62XmkadV6QBtx0S7B9k0WWeUCbI/nFpkJfq
PGgwytAiNOhvj+uccT8qMhmh1meEQI+aFoh1ieG1hQXdWAs2yIJfVl9gNfzMg00B
mKfci3ejam93k8DdSt6SnbyxDELn2Ic39J5rrrlJTe7Ab1qwn/1GHmumC5EvY5Ro
LnkmmFqW5/feCH2CBi74dCNB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1rG0Xb
PxRuO3Smb9c+lbYNNEXtMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1
MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY
Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmOVWhePE7P3aUm/rbkz9RhuqZmx84QRqnbuB0XULJ4s4Y4mN+FMwp
GnGAn5mVSVwYtiPPWFxMbWKeBsak0sv9P0BWs4LWvfTH+mLr/jkRgSaWNPcuUcP5
VoSWAyB2MeLxB7Fr1y+F81yEhfOcyqREvkIdooJ+YpLsULr7S3K9TEvlQ3Qw9s9T
qUTSz0QVhhWgsXtlbysvud5y2IE1gOahhv/CAm8SixEJIUXiFBeVyMSbEP1ADiqe
t32GVKfBDQTMOrDNq+hjJru2rga7kpx6NcQ1BC5Ca72H+c5R08hRxJs3+kItcll+
+nX+iP7A2PiInZwUo++tNqvRsn+jy7RY
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:27 2026 by rpki-client