This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File:                     p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier:          TcQGRpzi/OYKw6pv+ZN+nSKH2vvpE/ccaWI+Fd9Drgg=
Subject key identifier:   71:71:9C:C5:53:6D:C2:D7:D8:BE:B3:10:B0:AC:34:E7:28:E1:8A:FB
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       0A4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number:          0A3E
Signing time:             Sat 24 Jan 2026 19:10:21 +0000
Manifest this update:     Sat 24 Jan 2026 19:10:21 +0000
Manifest next update:     Sat 31 Jan 2026 19:10:21 +0000
Files and hashes:         1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: JYOpmIJsLg9Bo4YK71dkW5iH3M/MuOMZLaY0qeI4rpo=)
                          2: 305312F67CA011F098F1673CC4F9AE02.roa (hash: wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=)
                          3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=)
                          4: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636 (0xa4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jan 24 19:10:21 2026 GMT
            Not After : Jan 31 19:10:21 2026 GMT
        Subject: CN=6975191d-4a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:60:ef:ad:b4:7a:67:e7:c1:23:e7:fc:7b:
                    7c:b0:b3:82:02:26:b1:47:03:d2:dc:28:e1:d8:2f:
                    a1:aa:28:c5:96:a5:69:53:d6:6f:df:45:ae:24:04:
                    0b:56:f0:1b:1e:fb:59:78:a7:ef:b3:bf:41:e2:02:
                    06:29:0c:48:e8:26:b0:73:90:ec:e0:b0:fc:2b:d1:
                    48:b8:6a:c6:e1:74:c7:ab:33:09:3f:db:e9:cd:d8:
                    0c:2c:dd:ee:95:c9:f8:51:ec:e7:6d:9e:c2:77:6c:
                    84:d9:dd:7d:f1:a6:c1:0e:ec:0f:3b:0e:a0:f3:9a:
                    57:68:63:68:c5:c8:78:de:26:72:37:9c:14:2b:58:
                    31:cd:b9:35:d9:63:31:82:66:53:fd:ca:03:5f:9d:
                    0d:68:0f:62:47:36:a1:b7:3e:55:8d:7a:13:6a:37:
                    b4:ef:54:eb:e5:bf:a1:89:fd:46:0e:e7:23:7a:14:
                    7e:f7:d9:34:e9:e3:2c:c9:b3:ad:05:6b:88:20:58:
                    d1:6f:66:f9:18:ad:4a:7a:ff:f5:a4:5e:9c:03:35:
                    76:b9:dc:07:1b:23:53:85:59:a9:4f:9d:4d:91:39:
                    8e:65:4f:3f:a7:5b:9c:26:4c:8d:aa:88:90:5d:6f:
                    e1:04:f2:b7:ef:06:0c:93:d1:39:0b:78:a4:c7:cd:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:71:9C:C5:53:6D:C2:D7:D8:BE:B3:10:B0:AC:34:E7:28:E1:8A:FB
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:43:27:49:de:be:50:26:67:08:53:dc:2a:29:fd:90:02:
         0f:78:a8:41:21:e4:93:fe:e6:c9:76:c0:87:a8:a2:2a:21:e4:
         e1:4c:6f:38:ef:2d:67:92:91:22:1c:74:f3:44:36:7e:01:c2:
         a5:d2:ff:20:5f:72:6d:51:c3:6f:4e:dc:01:4a:8f:66:b8:fa:
         3a:b9:d8:67:79:db:1f:60:ce:ad:f5:37:6b:5e:89:07:4a:f7:
         d9:6d:d4:87:9e:31:89:ee:6b:f2:ef:52:cb:53:3a:7b:7a:f4:
         21:e7:56:4e:85:e4:a3:1b:c1:87:b2:09:cf:82:3e:7b:6c:b8:
         04:0f:2c:5f:8c:f1:a3:0d:5a:10:7c:8b:a3:32:20:3b:cf:2f:
         fe:0f:a2:dd:39:2d:02:c8:fa:e8:cc:95:8c:b7:41:e5:6f:db:
         07:73:60:f8:e5:f2:0f:cb:ed:bc:57:78:a5:3c:bc:16:d8:e7:
         69:30:d0:d0:45:10:c3:8e:39:61:54:26:4b:74:d5:e1:4d:eb:
         f1:5b:55:30:a3:8a:d0:67:8e:92:e0:e7:77:c3:99:2c:80:62:
         54:54:01:58:8f:f7:f7:f9:e5:1b:3b:33:04:bd:69:eb:81:db:
         f5:e4:b8:ea:7e:86:ca:87:aa:b7:b7:21:15:55:5f:ea:1c:ea:
         c5:25:f2:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC
MERGMTE2NEUwHhcNMjYwMTI0MTkxMDIxWhcNMjYwMTMxMTkxMDIxWjAYMRYwFAYD
VQQDDA02OTc1MTkxZC00YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZRg7620emfnwSPn/Ht8sLOCAiaxRwPS3Cjh2C+hqijFlqVpU9Zv30WuJAQL
VvAbHvtZeKfvs79B4gIGKQxI6Cawc5Ds4LD8K9FIuGrG4XTHqzMJP9vpzdgMLN3u
lcn4UeznbZ7Cd2yE2d198abBDuwPOw6g85pXaGNoxch43iZyN5wUK1gxzbk12WMx
gmZT/coDX50NaA9iRzahtz5VjXoTaje071Tr5b+hif1GDucjehR+99k06eMsybOt
BWuIIFjRb2b5GK1Kev/1pF6cAzV2udwHGyNThVmpT51NkTmOZU8/p1ucJkyNqoiQ
XW/hBPK37wYMk9E5C3ikx81HKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFxnMVT
bcLX2L6zELCsNOco4Yr7MB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy
QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz
YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAb20MnSd6+UCZnCFPcKin9kAIPeKhBIeST/ubJdsCHqKIqIeThTG84
7y1nkpEiHHTzRDZ+AcKl0v8gX3JtUcNvTtwBSo9muPo6udhnedsfYM6t9TdrXokH
SvfZbdSHnjGJ7mvy71LLUzp7evQh51ZOheSjG8GHsgnPgj57bLgEDyxfjPGjDVoQ
fIujMiA7zy/+D6LdOS0CyProzJWMt0Hlb9sHc2D45fIPy+28V3ilPLwW2OdpMNDQ
RRDDjjlhVCZLdNXhTevxW1Uwo4rQZ46S4Od3w5ksgGJUVAFYj/f3+eUbOzMEvWnr
gdv15LjqfobKh6q3tyEVVV/qHOrFJfIR
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:25 2026 by rpki-client