This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
File:                     CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json)
Hash identifier:          MAjtrnCXsyOgaACffFOQBx/f9wWh9llTbL3T+s8AdTc=
Subject key identifier:   71:69:80:19:A5:26:39:9F:0A:57:55:14:42:1D:DF:83:05:07:78:48
Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC
Certificate issuer:       /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
Certificate serial:       1E03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
Manifest number:          1DEA
Signing time:             Sat 24 Jan 2026 15:55:05 +0000
Manifest this update:     Sat 24 Jan 2026 15:55:05 +0000
Manifest next update:     Sat 31 Jan 2026 15:55:05 +0000
Files and hashes:         1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: PGnOJN4r4myN3Dzgf82wFMD/abbXDrR6FLaFy8wieu0=)
                          2: 945DB376E34711EE87868164C4F9AE02.roa (hash: jKYWlk4C7kYul3yO/WtiSzFFPrzY/sFxwRTKtBHcm64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7683 (0x1e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC
        Validity
            Not Before: Jan 24 15:55:05 2026 GMT
            Not After : Jan 31 15:55:05 2026 GMT
        Subject: CN=6974eb59-483f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8c:d4:42:04:53:3f:fe:a6:1b:2a:72:ae:6d:
                    f8:16:71:92:78:f1:0e:19:73:12:b9:97:04:5a:48:
                    cd:c3:a2:7a:2e:69:99:42:a3:42:e0:d9:a1:de:b0:
                    3a:16:b2:d9:79:a0:d9:8d:16:31:69:f0:7b:fc:4d:
                    3e:a6:86:e2:5b:40:41:e9:64:a9:bd:6d:d1:ff:8c:
                    66:94:75:7c:a7:94:a7:8a:61:c1:4f:ff:a6:31:c5:
                    a6:b8:ca:f9:36:0d:d7:4b:00:84:a7:0c:b5:4a:21:
                    35:ff:5a:a3:88:f2:06:36:24:b1:46:76:09:1d:0c:
                    df:8a:4b:71:71:bb:13:ad:cc:f6:06:67:a9:a6:68:
                    cb:e1:8d:06:ad:c9:21:25:17:b5:8e:b2:8a:2e:a2:
                    59:ac:e7:2f:73:e2:7c:cc:44:00:a0:f3:7d:70:97:
                    44:35:55:d4:27:14:40:4a:c0:d8:cb:61:67:c6:7a:
                    f2:0a:3d:7a:a5:21:6e:79:ae:1b:2f:3c:35:7a:75:
                    41:3f:17:65:59:f4:c8:3f:c9:e5:a0:b1:c6:af:b9:
                    2f:b4:35:c5:f5:b3:76:d7:f2:07:36:62:f1:d9:e6:
                    a7:02:ce:51:f7:10:b2:8a:5e:69:c7:bf:38:d6:e2:
                    d7:91:17:5f:7f:9b:df:cf:51:b4:68:4f:13:06:56:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:80:19:A5:26:39:9F:0A:57:55:14:42:1D:DF:83:05:07:78:48
            X509v3 Authority Key Identifier:
                keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:a5:a6:ea:65:3f:25:e6:26:1e:89:0e:fd:f9:b6:b4:e1:
         cd:ef:77:78:1b:4d:75:87:d8:e3:69:cb:1f:52:37:7b:19:13:
         03:4f:26:42:a1:72:29:13:c6:83:93:1f:3f:a2:55:c2:f2:fa:
         ed:2d:8f:54:50:62:49:0a:3c:6b:d7:3b:95:cc:b4:11:10:ca:
         6e:ba:2b:f2:60:1a:d8:2a:58:bf:63:5b:c1:5b:db:b3:71:59:
         49:7a:e6:0c:6d:c2:5d:2a:41:22:a2:00:58:3d:b1:f6:d7:7d:
         9d:0b:a1:36:e2:10:bd:de:52:67:00:5a:70:82:dc:ad:33:71:
         57:7e:4b:14:ca:87:12:ed:a8:07:fd:0b:5b:e3:0b:ed:fe:2e:
         1c:36:6f:7b:62:24:72:ba:93:52:fc:11:2d:4e:b2:0b:e3:02:
         66:1d:25:c6:1b:bd:fd:22:e3:8e:e7:d4:2c:64:14:ae:88:9c:
         2b:6f:52:01:13:9c:59:db:f7:52:c5:0c:48:f5:31:1f:e7:18:
         6e:14:26:e1:1a:2e:22:63:44:40:9d:d4:d8:8a:31:e5:97:c0:
         a8:c9:8c:e7:05:6d:95:da:e1:a3:a0:50:f8:3f:e2:30:3a:38:
         91:9d:35:cc:be:be:b1:93:d7:13:45:87:6a:ac:91:a4:be:d1:
         63:87:a5:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1
OUY5ODAwQ0MwHhcNMjYwMTI0MTU1NTA1WhcNMjYwMTMxMTU1NTA1WjAYMRYwFAYD
VQQDDA02OTc0ZWI1OS00ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ozUQgRTP/6mGypyrm34FnGSePEOGXMSuZcEWkjNw6J6LmmZQqNC4Nmh3rA6
FrLZeaDZjRYxafB7/E0+pobiW0BB6WSpvW3R/4xmlHV8p5SnimHBT/+mMcWmuMr5
Ng3XSwCEpwy1SiE1/1qjiPIGNiSxRnYJHQzfiktxcbsTrcz2BmeppmjL4Y0Grckh
JRe1jrKKLqJZrOcvc+J8zEQAoPN9cJdENVXUJxRASsDYy2FnxnryCj16pSFuea4b
Lzw1enVBPxdlWfTIP8nloLHGr7kvtDXF9bN21/IHNmLx2eanAs5R9xCyil5px784
1uLXkRdff5vfz1G0aE8TBlZ3WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFpgBml
JjmfCldVFEId34MFB3hIMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD
OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC
S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBs4qWm6mU/JeYmHokO/fm2tOHN73d4G011h9jjacsfUjd7GRMDTyZC
oXIpE8aDkx8/olXC8vrtLY9UUGJJCjxr1zuVzLQREMpuuivyYBrYKli/Y1vBW9uz
cVlJeuYMbcJdKkEiogBYPbH2132dC6E24hC93lJnAFpwgtytM3FXfksUyocS7agH
/Qtb4wvt/i4cNm97YiRyupNS/BEtTrIL4wJmHSXGG739IuOO59QsZBSuiJwrb1IB
E5xZ2/dSxQxI9TEf5xhuFCbhGi4iY0RAndTYijHll8CoyYznBW2V2uGjoFD4P+Iw
OjiRnTXMvr6xk9cTRYdqrJGkvtFjh6Uu
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:56 2026 by rpki-client