This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File:                     5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier:          tz6wlPNZq+LrXBvv2XO5p+cLI4aMzlokVAlh00zfhRA=
Subject key identifier:   3A:2E:B4:AF:98:DE:93:AE:B7:06:1D:E3:67:5E:69:60:62:D9:4B:81
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer:       /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number:          22
Signing time:             Fri 23 Jan 2026 06:49:39 +0000
Manifest this update:     Fri 23 Jan 2026 06:49:38 +0000
Manifest next update:     Fri 30 Jan 2026 06:49:38 +0000
Files and hashes:         1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: pZLzhlnjLD1wRsA2OcK4JQxrgy9/PJtpSJg/G01JSZA=)
                          2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: NmpEc8D8qa0q1zd5A3YpqQoZSHsGMDweaQM/Ibr7UC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
                          rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
        Validity
            Not Before: Jan 23 06:49:38 2026 GMT
            Not After : Jan 30 06:49:38 2026 GMT
        Subject: CN=69731a02-4df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:a4:d6:c4:2d:20:c4:6b:11:6d:da:46:16:
                    81:88:be:ee:16:44:3d:a9:c4:5b:e9:30:32:66:27:
                    36:0c:4c:66:2b:54:9f:9c:80:60:88:f1:f5:df:e1:
                    a9:b3:e0:fe:48:7a:0a:7e:bd:7a:d1:b9:10:a0:40:
                    da:5e:f2:8c:4a:fa:92:da:b4:e9:80:49:46:24:e3:
                    17:34:fd:54:97:a2:a8:a6:b9:1f:ec:57:57:50:4e:
                    c0:a8:c5:65:7c:7f:cd:a4:5a:0c:23:9f:97:56:67:
                    6d:c7:a2:82:28:92:97:d5:9f:2f:ec:ec:e8:e3:d3:
                    8e:d8:73:c3:84:66:37:bf:f3:a9:3d:da:3b:aa:0e:
                    a6:c3:ed:ea:86:de:7a:27:c4:1b:33:5b:39:fb:d1:
                    d4:99:96:01:50:8c:51:4d:00:54:7e:53:e1:f0:8c:
                    e3:9c:55:79:03:81:22:fd:26:a6:ec:b3:d5:e9:53:
                    32:8a:6c:33:a9:b5:30:0f:d5:c5:63:24:b9:42:8e:
                    39:f4:4b:5d:a9:a9:d8:3e:6f:05:a8:78:2e:7c:c7:
                    75:1b:d2:0d:0b:75:d0:14:01:e5:83:01:fc:39:92:
                    66:c2:5e:a0:5a:c3:12:d3:b8:35:9e:e2:ad:13:fb:
                    a3:04:81:94:4c:b8:40:7a:87:8b:d1:07:bb:4a:4e:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2E:B4:AF:98:DE:93:AE:B7:06:1D:E3:67:5E:69:60:62:D9:4B:81
            X509v3 Authority Key Identifier:
                keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:04:02:ac:93:1b:f2:0d:7a:42:58:5f:06:6d:91:37:14:
         b5:6e:71:2f:ca:13:b8:2c:e2:d4:80:e3:ec:96:3e:f6:db:15:
         09:d5:cd:8d:93:17:dd:ff:f1:b0:01:23:e4:1a:0e:50:18:23:
         ca:3c:3e:f7:3a:43:e8:be:d7:8b:4e:cc:6a:16:e0:cf:44:83:
         e4:ed:8a:5a:9c:f5:9a:78:e5:f6:db:6d:0a:9f:b6:0e:04:28:
         6a:99:79:28:da:cb:54:be:8d:2d:f7:c1:38:0a:97:d1:8c:e4:
         b8:74:b5:d6:73:7f:14:c6:f1:78:94:5d:75:e4:3f:59:1e:40:
         49:cd:55:21:f2:fa:b0:ab:b4:88:e5:24:c2:ec:57:83:7b:65:
         fc:7a:fe:62:41:e8:17:b7:93:7e:63:8e:a5:60:09:0b:2a:59:
         e6:75:49:56:e4:7c:66:62:57:76:1a:4d:c6:59:83:57:9b:0f:
         7e:33:f4:44:b7:e2:6f:86:7c:9b:bf:29:f4:26:f7:3a:fc:2b:
         15:e3:be:53:a6:cd:6f:c7:b2:6b:8e:13:0d:a9:77:9e:72:1c:
         5e:dd:f6:f5:e0:ac:3b:ea:83:77:5f:9a:ae:4b:92:15:dd:ca:
         f4:0c:d3:aa:55:c0:99:f8:19:ba:5a:fd:f8:68:3d:70:0e:30:
         ae:3f:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:09 2026 by rpki-client