This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
File:                     556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json)
Hash identifier:          OCOikK1V8MBy3jLPyUc4FAR5mNZlA2HYzPHas/mhL8I=
Subject key identifier:   68:AF:1A:69:11:B1:EE:7B:62:67:DC:EC:0A:60:16:BB:A3:9F:7C:00
Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Certificate issuer:       /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Certificate serial:       04D3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
Manifest number:          04CC
Signing time:             Sat 24 Jan 2026 16:43:03 +0000
Manifest this update:     Sat 24 Jan 2026 16:43:02 +0000
Manifest next update:     Sat 31 Jan 2026 16:43:02 +0000
Files and hashes:         1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: kP03SbSTB+CZI/uzvGKjaTBlEWL1ga2ZwoMmcNbAK0k=)
                          2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: Lnyzv8UILVvSxBwFCz0H7Yvcdy+f/I6Ub3qLIXVIRQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
        Validity
            Not Before: Jan 24 16:43:02 2026 GMT
            Not After : Jan 31 16:43:02 2026 GMT
        Subject: CN=6974f697-9185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:5a:6c:af:f0:ed:e3:91:c1:cd:de:a7:79:
                    71:d8:50:96:e0:d0:5f:bb:87:0b:f8:44:94:8e:cc:
                    8b:2a:df:9d:61:8a:ae:07:aa:d4:f4:84:10:a0:85:
                    e2:45:93:ce:3d:07:b0:c4:32:44:d4:d1:e9:f6:13:
                    07:89:52:4f:a0:af:4d:d2:14:a2:c8:fc:53:c3:45:
                    00:92:12:d2:8e:f2:ea:c7:56:f9:68:65:02:e8:49:
                    9a:d4:0c:4c:67:bc:06:2a:06:f2:1c:a4:39:eb:14:
                    d4:30:34:24:5f:1a:bf:3b:cb:5f:1c:58:cb:41:b4:
                    f2:88:56:bb:a6:de:66:17:12:e6:a0:b9:fb:d7:dc:
                    42:87:9b:d6:21:0e:87:77:7d:44:3a:11:5e:fa:91:
                    88:da:1b:f2:d4:6e:e8:14:df:52:67:b0:e7:fa:a3:
                    d0:df:36:40:45:97:38:89:b3:ca:6d:a6:2d:1b:e2:
                    2b:23:8a:1a:b6:80:c6:a2:17:56:5c:df:b7:97:a4:
                    69:45:fe:59:93:89:ca:a5:28:c3:c1:9d:34:07:0e:
                    8e:45:47:f1:2d:87:5a:46:cd:36:02:b9:f3:37:e9:
                    4e:26:9f:78:bf:32:4d:ac:ad:74:aa:ea:9d:27:9f:
                    55:ba:75:68:f6:a2:8a:e4:d5:b1:02:8b:1b:88:66:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:1A:69:11:B1:EE:7B:62:67:DC:EC:0A:60:16:BB:A3:9F:7C:00
            X509v3 Authority Key Identifier:
                keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:f9:57:7f:d1:43:b1:f5:cf:bc:3e:37:e7:7e:67:1a:e6:
         c8:95:19:7a:b6:fc:52:a0:06:cb:4a:84:b9:3a:e5:99:a3:6d:
         3d:97:9a:f3:ed:df:04:0b:f4:0b:c6:5a:a4:20:44:3c:0f:41:
         e1:df:c1:1b:3f:18:80:60:9c:79:fb:7d:c4:1c:c1:16:be:d9:
         c7:00:dc:bd:40:d3:43:31:a5:e9:45:34:70:24:03:7c:d5:64:
         65:f8:cb:a0:6e:53:29:c2:f2:f8:be:01:40:fe:db:79:ee:b4:
         33:fe:5b:8d:3e:75:c0:d2:ed:3d:84:43:09:f6:5c:1c:e0:8e:
         8b:05:26:6c:5a:df:ce:10:20:6a:b1:0a:79:79:f5:c0:f9:ef:
         86:7e:90:1c:a3:cf:8c:d8:9c:aa:3c:0d:c1:01:08:63:a5:2f:
         75:c9:63:fd:a2:fc:60:fc:60:66:ef:3a:b5:3a:db:4f:dd:a0:
         54:16:ea:3f:35:4d:dc:9d:6d:58:4b:5c:cc:84:c5:2c:c1:63:
         a0:66:82:ba:24:22:a0:2b:7c:73:6e:ae:fc:11:67:18:3d:9e:
         37:bc:b3:b5:4e:cf:bc:32:89:02:96:10:08:66:8f:bc:db:44:
         34:d4:5b:5e:56:74:c7:23:81:e2:ef:bd:7c:99:71:eb:d9:d5:
         3e:67:a1:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux
OTYyMUJBNjQwHhcNMjYwMTI0MTY0MzAyWhcNMjYwMTMxMTY0MzAyWjAYMRYwFAYD
VQQDDA02OTc0ZjY5Ny05MTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp11abK/w7eORwc3ep3lx2FCW4NBfu4cL+ESUjsyLKt+dYYquB6rU9IQQoIXi
RZPOPQewxDJE1NHp9hMHiVJPoK9N0hSiyPxTw0UAkhLSjvLqx1b5aGUC6Ema1AxM
Z7wGKgbyHKQ56xTUMDQkXxq/O8tfHFjLQbTyiFa7pt5mFxLmoLn719xCh5vWIQ6H
d31EOhFe+pGI2hvy1G7oFN9SZ7Dn+qPQ3zZARZc4ibPKbaYtG+IrI4oatoDGohdW
XN+3l6RpRf5Zk4nKpSjDwZ00Bw6ORUfxLYdaRs02ArnzN+lOJp94vzJNrK10quqd
J59VunVo9qKK5NWxAosbiGb6lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGivGmkR
se57Ymfc7ApgFrujn3wAMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5
NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq
UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGpflXf9FDsfXPvD43535nGubIlRl6tvxSoAbLSoS5OuWZo209l5rz
7d8EC/QLxlqkIEQ8D0Hh38EbPxiAYJx5+33EHMEWvtnHANy9QNNDMaXpRTRwJAN8
1WRl+MugblMpwvL4vgFA/tt57rQz/luNPnXA0u09hEMJ9lwc4I6LBSZsWt/OECBq
sQp5efXA+e+GfpAco8+M2JyqPA3BAQhjpS91yWP9ovxg/GBm7zq1OttP3aBUFuo/
NU3cnW1YS1zMhMUswWOgZoK6JCKgK3xzbq78EWcYPZ43vLO1Ts+8MokClhAIZo+8
20Q01FteVnTHI4Hi7718mXHr2dU+Z6GX
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:51:49 2026 by rpki-client