This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File:                     rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier:          /a9dzMNxwxyIP2KQ+xOOqYLpPNmwVeDziZtDqNgljqc=
Subject key identifier:   F6:9C:10:42:5A:64:3B:7F:37:A8:A9:8E:3B:68:19:7E:64:18:01:49
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer:       /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number:          026A
Signing time:             Sun 25 Jan 2026 00:48:36 +0000
Manifest this update:     Sun 25 Jan 2026 00:48:36 +0000
Manifest next update:     Sun 01 Feb 2026 00:48:36 +0000
Files and hashes:         1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: E6f+KyCJU5tRsGKrV4sX8A7/1K9ikEccwrdW1ZTSX/4=)
                          2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: ct9JRtk3Ka50ZvbEYcBL6mLhkKvm7y5g0JZUChw/aVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
                          rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
        Validity
            Not Before: Jan 25 00:48:36 2026 GMT
            Not After : Feb  1 00:48:36 2026 GMT
        Subject: CN=69756864-1b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:23:d2:02:f0:c5:a2:aa:e1:45:55:d9:27:
                    46:dc:76:fa:fa:10:d3:fc:6b:ee:f9:f1:29:1e:e5:
                    4f:24:ba:38:06:69:e6:c4:db:1d:8d:1e:10:a0:6d:
                    15:01:9b:f9:02:12:a7:b0:41:1e:cc:fd:ae:16:bf:
                    fd:d6:65:74:83:72:e5:10:7f:19:88:60:95:2d:dc:
                    bf:9a:6a:67:91:b7:15:88:46:bd:cf:ec:55:fa:29:
                    30:16:a0:e2:42:78:70:87:51:ab:a6:b1:9e:d6:92:
                    43:ae:c1:03:73:da:9c:73:76:d7:e9:74:57:1f:90:
                    e1:26:33:cd:9e:60:b0:d5:f6:6d:32:ab:8d:d9:07:
                    5e:59:3f:74:21:2f:dc:9f:fd:70:9b:d7:97:b4:06:
                    08:ea:a0:34:09:b2:bd:95:67:0b:38:26:d4:f6:6a:
                    86:7d:4b:e5:1f:9a:2b:23:73:3f:6f:8e:13:f8:80:
                    d0:0d:a5:8d:f5:94:fe:be:b0:f5:2e:31:f1:a2:a1:
                    f2:68:56:9b:05:a8:7d:82:d9:da:56:ca:61:ce:cd:
                    69:59:80:d5:be:77:97:d3:08:17:fc:7c:89:c5:76:
                    7c:bc:8f:db:49:cd:fe:2f:21:21:ca:07:9d:05:50:
                    6c:e4:e5:6c:b1:3b:08:3a:a2:df:da:f4:f6:68:60:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9C:10:42:5A:64:3B:7F:37:A8:A9:8E:3B:68:19:7E:64:18:01:49
            X509v3 Authority Key Identifier:
                keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:19:63:b4:fa:3e:76:00:8f:51:d4:ef:d6:07:7c:0c:68:f0:
         d4:04:07:e2:bc:91:63:71:d6:58:86:d5:9c:e1:9c:8f:b2:85:
         3d:e0:1b:d2:c5:dc:c4:96:26:2d:af:42:3e:25:3d:13:82:1e:
         29:b0:d7:a0:f7:bf:e4:cc:8e:c8:9f:29:74:c6:43:fe:d1:8b:
         75:3f:31:21:cc:b3:97:37:af:73:d1:c7:2d:98:ae:30:c1:e1:
         76:f5:21:a0:da:ac:cf:51:5d:ec:5b:e6:56:7f:7b:31:6b:06:
         54:2e:34:b8:b0:cf:95:0f:10:9d:01:dd:65:3b:45:62:6a:83:
         d2:cc:31:4f:8b:d6:12:ce:47:a4:a8:cd:bd:99:78:7b:7f:24:
         f4:1a:dd:73:20:9d:38:01:80:fc:a3:d3:1d:64:40:3d:c9:8b:
         08:65:c6:39:28:1e:d9:bc:24:b7:31:6f:15:13:ac:c4:d1:2b:
         6a:90:3c:85:f0:2a:f2:9e:1c:67:ad:ef:5f:4e:89:56:d9:9b:
         2d:b0:61:39:3f:a7:05:13:44:09:32:94:93:7f:4a:cc:d2:b1:
         e3:12:61:95:01:be:a1:7b:47:b3:d8:c6:3e:bb:23:64:be:2a:
         85:03:28:3a:e6:c9:8c:f5:ad:ca:44:d6:c4:78:9a:19:36:c3:
         7a:4a:20:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF
RTREMUQ5OUMwHhcNMjYwMTI1MDA0ODM2WhcNMjYwMjAxMDA0ODM2WjAYMRYwFAYD
VQQDDA02OTc1Njg2NC0xYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEAj0gLwxaKq4UVV2SdG3Hb6+hDT/Gvu+fEpHuVPJLo4BmnmxNsdjR4QoG0V
AZv5AhKnsEEezP2uFr/91mV0g3LlEH8ZiGCVLdy/mmpnkbcViEa9z+xV+ikwFqDi
Qnhwh1GrprGe1pJDrsEDc9qcc3bX6XRXH5DhJjPNnmCw1fZtMquN2QdeWT90IS/c
n/1wm9eXtAYI6qA0CbK9lWcLOCbU9mqGfUvlH5orI3M/b44T+IDQDaWN9ZT+vrD1
LjHxoqHyaFabBah9gtnaVsphzs1pWYDVvneX0wgX/HyJxXZ8vI/bSc3+LyEhyged
BVBs5OVssTsIOqLf2vT2aGCCowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPacEEJa
ZDt/N6ipjjtoGX5kGAFJMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB
MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv
NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0GWO0+j52AI9R1O/WB3wMaPDUBAfivJFjcdZYhtWc4ZyPsoU94BvS
xdzEliYtr0I+JT0Tgh4psNeg97/kzI7Inyl0xkP+0Yt1PzEhzLOXN69z0cctmK4w
weF29SGg2qzPUV3sW+ZWf3sxawZULjS4sM+VDxCdAd1lO0ViaoPSzDFPi9YSzkek
qM29mXh7fyT0Gt1zIJ04AYD8o9MdZEA9yYsIZcY5KB7ZvCS3MW8VE6zE0StqkDyF
8Crynhxnre9fTolW2ZstsGE5P6cFE0QJMpSTf0rM0rHjEmGVAb6he0ez2MY+uyNk
viqFAyg65smM9a3KRNbEeJoZNsN6SiDa
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:45:08 2026 by rpki-client