This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File:                     0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier:          vI69wNCtk0QGlP4V7xtVRdX5721a7AmT3pzgDcu79us=
Subject key identifier:   CB:1F:C0:41:98:B4:CE:A1:96:E8:8A:4B:68:80:E1:96:7A:57:69:12
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer:       /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number:          5F
Signing time:             Sun 25 Jan 2026 06:12:50 +0000
Manifest this update:     Sun 25 Jan 2026 06:12:50 +0000
Manifest next update:     Sun 01 Feb 2026 06:12:50 +0000
Files and hashes:         1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: kTTP0URGw5pwrlT0r02Cue+dV9l/lNV7+IWyvEkIR2E=)
                          2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: hVcLQOQnj8t+4j/b6kUDlk5JAqcOolfdhy262nXQ91E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
                          rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
        Validity
            Not Before: Jan 25 06:12:50 2026 GMT
            Not After : Feb  1 06:12:50 2026 GMT
        Subject: CN=6975b462-dee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:80:49:f6:d0:d1:3e:d3:72:6f:69:e0:8e:
                    c0:79:b7:04:68:6d:b8:16:64:22:13:8e:a1:22:16:
                    2b:52:36:1d:1f:5c:88:b9:0c:61:27:67:f3:ee:c2:
                    69:36:f1:91:29:86:7f:6f:46:12:f7:ed:bf:31:12:
                    58:ea:b6:63:f5:d7:ae:e3:63:4b:f9:f6:5b:a4:04:
                    ca:b7:10:cb:db:9a:05:24:d1:37:5b:b6:3b:25:d1:
                    d2:0c:86:6c:93:8d:14:3d:1a:bf:44:7f:9b:bc:39:
                    78:52:de:45:ad:e5:86:67:ba:10:c2:77:79:f0:82:
                    df:20:ca:8e:68:50:f9:04:e6:4b:7e:a0:af:e5:6b:
                    b1:f2:ef:8c:4d:8a:b4:23:6c:e1:2f:1c:66:73:f7:
                    75:2d:cf:9f:9d:cc:54:c8:e8:75:95:2c:76:b1:ff:
                    15:96:ca:b3:2a:47:d4:28:98:90:4f:eb:a9:e6:40:
                    46:bd:eb:93:56:72:1a:b2:f8:00:e1:95:5b:6e:7c:
                    2e:e0:8d:83:b7:b6:5e:b7:e2:0d:2d:10:eb:35:1e:
                    05:f3:62:95:44:b5:03:19:5f:44:f5:4d:45:78:d2:
                    00:e0:f4:f8:c5:f1:1d:1b:4b:31:4b:57:6b:69:3b:
                    a5:13:7f:b6:11:d2:86:c8:e2:08:ea:46:5e:2d:3e:
                    5c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:C0:41:98:B4:CE:A1:96:E8:8A:4B:68:80:E1:96:7A:57:69:12
            X509v3 Authority Key Identifier:
                keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:e9:2f:d6:98:f0:b9:62:17:1e:c3:99:76:4a:5a:fa:c9:
         40:32:f3:c8:04:97:94:43:08:81:6e:0a:ef:f0:52:07:ed:bd:
         d3:04:a9:fc:bc:d1:2b:36:3a:1b:7e:83:90:2b:ae:02:d4:5a:
         6c:57:18:ae:61:a3:d5:29:82:61:17:ff:35:10:49:86:99:7a:
         ad:bc:10:73:ee:fe:a5:89:3d:07:5e:7f:1b:7f:6f:c0:30:93:
         70:a4:92:5a:24:54:49:01:21:0b:fa:4c:c7:ef:a6:34:bc:6a:
         a8:8a:cc:2c:4a:ae:d5:bf:04:85:8d:e5:20:db:e1:51:46:f0:
         01:52:e2:61:4c:5f:24:31:76:26:23:45:d0:5b:32:5f:57:f8:
         88:eb:47:67:28:86:af:bc:25:d0:e9:12:13:61:77:05:e5:dd:
         ab:de:7b:b7:37:00:da:f8:d0:25:33:08:0d:2d:0f:75:fd:3e:
         49:59:fd:65:d6:3c:4a:f5:b0:95:7e:f5:62:ba:d5:d4:30:3a:
         b7:46:98:a5:fe:6f:a1:74:4c:4d:db:0f:64:50:fa:fa:61:6c:
         1a:4b:07:70:77:22:f5:fe:80:fb:c6:8b:c8:f1:15:5b:ad:99:
         9a:d8:c3:40:9b:f7:9b:e6:53:94:72:51:f6:45:d1:1f:4c:0c:
         b2:4b:a8:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RkRDMDExMC8GA1UEBRMoRDFFQzE5N0JEQjBEOTUxOTM4RDFFRUY1NDk2QTExQUND
QTAyODhFRjAeFw0yNjAxMjUwNjEyNTBaFw0yNjAyMDEwNjEyNTBaMBgxFjAUBgNV
BAMMDTY5NzViNDYyLWRlZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/64BJ9tDRPtNyb2ngjsB5twRobbgWZCITjqEiFitSNh0fXIi5DGEnZ/Puwmk2
8ZEphn9vRhL37b8xEljqtmP1167jY0v59lukBMq3EMvbmgUk0Tdbtjsl0dIMhmyT
jRQ9Gr9Ef5u8OXhS3kWt5YZnuhDCd3nwgt8gyo5oUPkE5kt+oK/la7Hy74xNirQj
bOEvHGZz93Utz5+dzFTI6HWVLHax/xWWyrMqR9QomJBP66nmQEa965NWchqy+ADh
lVtufC7gjYO3tl634g0tEOs1HgXzYpVEtQMZX0T1TUV40gDg9PjF8R0bSzFLV2tp
O6UTf7YR0obI4gjqRl4tPlwDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyx/AQZi0
zqGW6IpLaIDhlnpXaRIwHwYDVR0jBBgwFoAU0ewZe9sNlRk40e71SWoRrMoCiO8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzI5NTRENjJBNjlF
OTExRjA4MUI2NUI2N0M0RjlBRTAyLzBld1plOXNObFJrNDBlNzFTV29Sck1vQ2lP
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMGV3WmU5c05sUms0MGU3MVNXb1JyTW9DaU84LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG
REMwLzI5NTRENjJBNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyLzBld1plOXNObFJr
NDBlNzFTV29Sck1vQ2lPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAC5D6S/WmPC5Yhcew5l2Slr6yUAy88gEl5RDCIFuCu/wUgftvdMEqfy8
0Ss2Oht+g5ArrgLUWmxXGK5ho9UpgmEX/zUQSYaZeq28EHPu/qWJPQdefxt/b8Aw
k3CkklokVEkBIQv6TMfvpjS8aqiKzCxKrtW/BIWN5SDb4VFG8AFS4mFMXyQxdiYj
RdBbMl9X+IjrR2cohq+8JdDpEhNhdwXl3avee7c3ANr40CUzCA0tD3X9PklZ/WXW
PEr1sJV+9WK61dQwOrdGmKX+b6F0TE3bD2RQ+vphbBpLB3B3IvX+gPvGi8jxFVut
mZrYw0Cb95vmU5RyUfZF0R9MDLJLqHA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:48 2026 by rpki-client