This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File:                     p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier:          +SNWoNpEVgB0Bh40I7R2rnBqTQvtxqkHr0O651QFqSg=
Subject key identifier:   FC:79:39:D3:C8:2D:EA:0C:F6:0F:A1:80:AB:A3:4E:BA:E8:D9:60:BC
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number:          0239
Signing time:             Sun 25 Jan 2026 01:25:48 +0000
Manifest this update:     Sun 25 Jan 2026 01:25:48 +0000
Manifest next update:     Sun 01 Feb 2026 01:25:48 +0000
Files and hashes:         1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: 7x8EyPVGOjVt0RMo/gVuqPKqlGw6Hwgu+APkNR9eHUU=)
                          2: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=)
                          3: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=)
                          4: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=)
                          5: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=)
                          6: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=)
                          7: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=)
                          8: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=)
                          9: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: QE//TTd8y+NKPY9SFnvheS4pfkoCI9qiU5fU+9iwaFc=)
                          10: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: Jan 25 01:25:48 2026 GMT
            Not After : Feb  1 01:25:48 2026 GMT
        Subject: CN=6975711c-e9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:8d:62:1a:57:98:db:c6:a1:03:58:70:4c:
                    e1:c7:50:76:78:00:a0:ff:9c:08:0f:95:9e:e3:3c:
                    82:15:95:32:36:55:a3:fa:f7:37:60:a0:aa:ef:83:
                    f0:2c:29:51:f7:2c:e3:8d:99:4a:e8:d2:06:11:cc:
                    4b:53:76:8b:05:c8:28:73:ee:2b:c8:c0:cc:c2:ad:
                    13:21:b3:5e:ef:b6:a2:41:70:3c:c6:05:d8:3b:af:
                    a5:5a:bf:7e:1e:7f:c9:4c:6d:9f:a5:9f:1d:12:0f:
                    8c:ef:44:31:ec:4d:91:97:61:87:e7:26:f9:58:02:
                    36:2d:f7:7a:8c:29:4a:f2:80:9d:28:44:09:c2:1f:
                    36:94:63:1b:0b:29:a1:6d:02:f1:25:0a:9f:fc:ed:
                    78:cd:54:d3:51:b9:cd:13:40:14:9b:b3:c7:25:e2:
                    f3:17:20:cf:0a:bf:15:81:b0:51:d5:5d:7d:f0:41:
                    14:9e:cb:9b:82:69:8d:25:a7:9b:3b:95:a2:0e:aa:
                    cd:f3:e7:bc:43:ad:7c:60:b3:7f:c1:68:7a:dd:e8:
                    f2:bb:d7:ee:de:38:20:e0:05:48:69:71:0e:3e:43:
                    f7:56:ab:20:4c:3e:59:d0:b6:08:92:a4:a6:95:f2:
                    93:d5:fb:37:64:5e:7a:6f:53:0e:30:67:a9:ae:f0:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:79:39:D3:C8:2D:EA:0C:F6:0F:A1:80:AB:A3:4E:BA:E8:D9:60:BC
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:bf:6d:66:e9:37:15:11:4d:85:fa:80:16:91:cd:70:1e:
         71:86:2b:06:44:49:6b:96:f5:ca:cd:04:61:26:f5:fa:32:80:
         23:2d:94:59:b4:2b:ea:66:e4:29:73:a9:9d:fd:e4:2b:15:68:
         0e:15:5b:e0:3f:06:90:d7:29:53:a5:94:f1:22:fe:1d:89:15:
         77:dd:7e:16:ed:81:15:05:4a:f6:5b:7e:f3:f6:15:9a:c0:dd:
         db:15:73:1f:7e:40:77:ff:92:4b:d6:0d:2e:00:f2:63:30:d8:
         20:cc:09:7d:17:a2:78:83:20:01:71:b5:6f:2d:9b:bc:e5:5b:
         7e:d1:c9:97:3f:c2:79:e8:22:e3:d4:2a:b5:2f:26:ae:13:23:
         01:4a:b0:2e:30:6b:72:26:db:74:38:9b:4c:62:04:de:d4:e5:
         51:d7:4f:ea:8e:94:38:78:75:6c:e6:c9:4b:65:d3:49:bf:c6:
         36:4f:38:09:7e:1b:38:6e:58:3f:4d:7d:94:75:79:4f:56:76:
         5b:81:c7:04:fb:c0:4e:9a:5e:c0:3e:e5:8e:9a:c6:18:a3:03:
         cc:04:f0:01:87:99:15:e7:9f:84:e5:be:4d:cf:3b:92:f4:fa:
         5e:29:8a:0d:66:d9:65:0c:95:58:b9:67:41:73:77:f0:08:3b:
         e3:67:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:20:39 2026 by rpki-client