This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
File:                     5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json)
Hash identifier:          4VR4TGfXUYgAgbaydI/FY5ekIqykch2iP3c7CRNw764=
Subject key identifier:   03:9B:DE:83:86:39:19:C7:87:4F:AD:3F:DB:9E:6F:E4:FC:41:33:04
Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
Certificate issuer:       /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Certificate serial:       10D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
Manifest number:          10C8
Signing time:             Sat 24 Jan 2026 17:01:53 +0000
Manifest this update:     Sat 24 Jan 2026 17:01:53 +0000
Manifest next update:     Sat 31 Jan 2026 17:01:53 +0000
Files and hashes:         1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: NM0igmND8yBJOELg23zn0y7+Hh7lzE4TrF/KMyWh9ZU=)
                          2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: GBYQ/lKi3z5roPUPwktfDVMLitw965pomXZAG5jfako=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
                          rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4308 (0x10d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
        Validity
            Not Before: Jan 24 17:01:53 2026 GMT
            Not After : Jan 31 17:01:53 2026 GMT
        Subject: CN=6974fb01-8a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:61:22:c0:7d:1c:a4:41:1a:22:17:5f:c3:
                    c1:3c:f9:7a:52:6e:ab:5e:2b:8b:a1:c4:8d:15:90:
                    c5:cb:0e:63:df:42:54:68:32:40:19:d3:b5:d3:45:
                    e6:02:db:0e:c9:aa:c2:87:d4:8b:78:df:29:e4:ab:
                    cc:bf:39:08:88:8e:0d:99:be:f0:dc:5b:31:20:c2:
                    ee:f9:39:3f:21:f1:97:26:f2:77:62:8d:13:9d:1c:
                    42:9a:26:c0:a9:50:ad:df:02:74:69:cd:39:55:7c:
                    cf:78:43:f6:cf:29:d2:05:bf:30:98:e4:65:95:4b:
                    50:97:bd:89:60:b0:cf:2e:b1:84:a9:36:c3:28:12:
                    c1:c6:32:8b:f3:f6:31:22:a5:ee:02:5a:8a:31:85:
                    13:cb:4a:57:04:c5:19:df:48:18:c9:6a:48:80:d1:
                    dd:70:ed:1a:cd:a9:eb:41:13:7a:ab:4f:73:72:f8:
                    47:21:5d:36:f0:f3:f2:b1:c6:a2:66:5d:3d:5c:3d:
                    77:2d:30:83:16:ff:4b:43:54:c1:b7:f1:4b:e6:46:
                    11:f0:f7:d4:53:eb:ef:f9:b6:05:26:39:1c:25:13:
                    3b:25:e2:82:04:94:88:99:60:34:47:76:b9:02:c9:
                    25:8d:1b:19:88:f3:86:26:38:89:fc:86:16:fa:bf:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:DE:83:86:39:19:C7:87:4F:AD:3F:DB:9E:6F:E4:FC:41:33:04
            X509v3 Authority Key Identifier:
                keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:77:8c:3c:61:6f:ff:e5:57:07:4f:dd:46:ca:52:c2:5d:e7:
         1a:2e:0d:5a:94:7e:d9:ba:62:f5:95:e7:ef:af:7e:c8:bf:a3:
         ae:13:17:0f:55:90:26:1b:6c:9e:83:24:47:df:c9:84:a5:b4:
         06:26:db:bb:05:6f:90:66:b3:8b:f0:e0:f2:bc:e6:30:4e:01:
         20:5a:ac:cb:8b:a3:0f:85:06:18:86:93:31:14:64:ac:40:aa:
         13:d7:f2:cf:fd:14:9e:aa:39:d2:41:12:19:49:dd:f9:5d:c6:
         ed:ad:15:ee:94:1c:d0:03:d6:9c:cf:6d:30:a8:a3:81:02:ec:
         a6:75:8e:51:dd:76:75:52:cf:c1:b9:37:34:6f:f4:73:87:e5:
         b8:1c:b0:67:82:67:ca:81:11:e7:cb:b4:1f:a9:7d:10:ae:ff:
         ea:dd:03:33:e3:86:77:b0:0a:af:0d:76:3f:c9:99:7d:7c:4d:
         67:ac:61:d6:a2:99:1a:37:b7:83:1f:e1:80:48:ef:9d:7a:f1:
         5f:2c:9f:42:05:55:06:38:7d:71:d7:82:92:cc:0a:de:54:79:
         28:c6:25:89:e7:b8:41:c9:14:e3:5e:34:1b:8e:41:00:23:a7:
         a2:57:71:4b:71:3e:54:0f:0a:bc:d5:e1:47:b8:0d:f9:bc:3d:
         91:f9:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:10 2026 by rpki-client