This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft (raw, json)
Hash identifier:          79CNH8oBD/YUeItObU/PDAaycpl2pOWk8/DTK5Zbht8=
Subject key identifier:   5A:5C:7C:D4:B7:E1:3F:6E:11:D5:FC:FC:63:8F:84:1C:C1:6B:B2:4B
Authority key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Certificate issuer:       /CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Certificate serial:       14DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
Manifest number:          14D3
Signing time:             Sat 24 Jan 2026 16:35:51 +0000
Manifest this update:     Sat 24 Jan 2026 16:35:51 +0000
Manifest next update:     Sat 31 Jan 2026 16:35:51 +0000
Files and hashes:         1: V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl (hash: RY9aAdVUyqGJ6XfN/YBqJx1OJ0z/xCERHR32POnkF/w=)
                          2: 36295E5A6E2611E8A01E307EC4F9AE02.roa (hash: UYOoBDCPRKkOMUWYfvirGRrlHupG7Y8jaEMlsixRpVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl
                          rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5339 (0x14db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536D, serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Validity
            Not Before: Jan 24 16:35:51 2026 GMT
            Not After : Jan 31 16:35:51 2026 GMT
        Subject: CN=6974f4e7-4e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:30:20:cb:4b:4f:9e:96:5a:b4:c0:e5:62:
                    6e:96:f2:72:36:1b:de:d7:87:77:de:92:66:d7:8b:
                    17:cf:a4:f5:3d:45:a2:96:f0:17:b7:2a:33:38:19:
                    7b:cf:56:38:ff:b2:ea:b8:c4:51:e0:bf:68:97:cf:
                    49:8a:af:cd:ab:bf:e3:23:98:d3:68:47:54:02:1d:
                    f6:03:c2:24:69:dd:15:c0:90:07:99:41:19:5c:77:
                    0c:87:1f:a8:8f:57:21:4a:c0:82:a3:7c:2e:ba:e2:
                    e8:9a:87:f2:21:ed:18:c0:15:1b:23:2f:06:df:d3:
                    6c:fa:50:af:d5:8b:68:d3:bf:cc:44:b5:7a:12:fa:
                    1d:2a:90:7b:b1:24:dc:9a:62:8c:9d:4e:00:5b:97:
                    6f:ce:2d:7c:72:f9:67:c8:33:a6:fc:1a:cc:9c:21:
                    ef:96:4d:96:d8:b2:54:94:08:05:b0:50:92:6f:e7:
                    07:dc:d1:81:fd:83:fa:d0:29:03:58:92:9b:65:0d:
                    59:39:be:68:16:cb:b1:e8:00:b9:8e:68:55:67:1f:
                    0c:7d:93:a3:5d:95:3a:e6:67:1b:cd:57:4f:b5:bc:
                    9d:76:a2:01:82:fe:41:5c:a3:03:3f:aa:19:28:f5:
                    c7:bc:e3:be:ed:aa:2c:4b:ab:3f:9a:e6:5c:89:99:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:7C:D4:B7:E1:3F:6E:11:D5:FC:FC:63:8F:84:1C:C1:6B:B2:4B
            X509v3 Authority Key Identifier:
                keyid:57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:44:78:1b:1c:af:06:4b:0d:4a:45:0f:66:42:ad:38:92:e2:
         23:01:bc:80:21:69:b5:08:58:67:bf:73:b2:b2:ee:cd:e3:6a:
         ed:4a:c8:41:92:35:b7:77:e5:a3:a8:7e:ad:fb:03:67:8f:7f:
         a2:e5:6f:b1:7e:d0:c1:84:e3:8e:95:a3:49:ee:1d:27:1f:70:
         7c:ef:c7:72:d6:5b:9c:16:f7:ca:80:dd:ba:25:f0:e7:88:08:
         c4:e8:64:85:c1:99:fd:da:ca:e5:3e:f5:37:ba:35:b7:a5:34:
         ab:40:ec:58:ad:82:95:37:ef:4d:6a:a9:c1:e3:b5:11:7a:cf:
         ba:47:ae:b3:51:7a:67:dc:a1:7e:d6:44:51:82:6f:fa:6f:65:
         90:1a:7e:1f:95:70:fe:b2:d3:77:29:99:30:11:57:af:4e:6a:
         dc:d2:36:6f:95:32:da:56:99:54:9e:39:16:c8:4f:bc:3e:4f:
         78:bf:b0:07:3a:f6:79:f8:c6:0d:f2:91:f2:1e:95:e8:b0:37:
         3f:9b:5c:49:49:c1:a7:1e:f6:f1:50:7d:97:13:47:47:86:21:
         b6:31:33:26:5f:d4:02:07:cf:29:0e:e6:6c:93:02:16:3e:f6:
         dd:45:1f:58:26:fc:aa:35:24:cd:a2:38:69:90:67:e2:07:c4:
         e2:84:e4:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkQxMTAvBgNVBAUTKDU3NThEMzgzMUU5MkZBRTgyNDc1RjZCMzMyMTI3OTRB
MUZGMDdFNUYwHhcNMjYwMTI0MTYzNTUxWhcNMjYwMTMxMTYzNTUxWjAYMRYwFAYD
VQQDDA02OTc0ZjRlNy00ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7kwIMtLT56WWrTA5WJulvJyNhve14d33pJm14sXz6T1PUWilvAXtyozOBl7
z1Y4/7LquMRR4L9ol89Jiq/Nq7/jI5jTaEdUAh32A8Ikad0VwJAHmUEZXHcMhx+o
j1chSsCCo3wuuuLomofyIe0YwBUbIy8G39Ns+lCv1Yto07/MRLV6EvodKpB7sSTc
mmKMnU4AW5dvzi18cvlnyDOm/BrMnCHvlk2W2LJUlAgFsFCSb+cH3NGB/YP60CkD
WJKbZQ1ZOb5oFsux6AC5jmhVZx8MfZOjXZU65mcbzVdPtbyddqIBgv5BXKMDP6oZ
KPXHvOO+7aosS6s/muZciZn/bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpcfNS3
4T9uEdX8/GOPhBzBa7JLMB8GA1UdIwQYMBaAFFdY04MekvroJHX2szISeUof8H5f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2RC9DMTg1MUZCRTZF
MjMxMUU4ODE3RENCNzVDNEY5QUUwMi9WMWpUZ3g2Uy11Z2tkZmF6TWhKNVNoX3dm
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YxalRneDZTLXVna2RmYXpNaEo1U2hfd2ZsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTM2RC9DMTg1MUZCRTZFMjMxMUU4ODE3RENCNzVDNEY5QUUwMi9WMWpUZ3g2Uy11
Z2tkZmF6TWhKNVNoX3dmbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiRHgbHK8GSw1KRQ9mQq04kuIjAbyAIWm1CFhnv3Oysu7N42rtSshB
kjW3d+WjqH6t+wNnj3+i5W+xftDBhOOOlaNJ7h0nH3B878dy1lucFvfKgN26JfDn
iAjE6GSFwZn92srlPvU3ujW3pTSrQOxYrYKVN+9NaqnB47URes+6R66zUXpn3KF+
1kRRgm/6b2WQGn4flXD+stN3KZkwEVevTmrc0jZvlTLaVplUnjkWyE+8Pk94v7AH
OvZ5+MYN8pHyHpXosDc/m1xJScGnHvbxUH2XE0dHhiG2MTMmX9QCB88pDuZskwIW
PvbdRR9YJvyqNSTNojhpkGfiB8TihOQi
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:59 2026 by rpki-client