This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
File:                     44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json)
Hash identifier:          00hKljdqkaqPWo5utXjSBrRkKh6jN/q3/JnTXglE08g=
Subject key identifier:   F6:BC:13:AE:0F:EA:0B:D6:13:78:13:ED:CD:2A:86:A7:60:7A:B3:39
Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Certificate issuer:       /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
Manifest number:          C5
Signing time:             Sun 25 Jan 2026 05:03:26 +0000
Manifest this update:     Sun 25 Jan 2026 05:03:26 +0000
Manifest next update:     Sun 01 Feb 2026 05:03:26 +0000
Files and hashes:         1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: u2WVJqmhs2/pn42CNonbeDWV3UNKtufFe1lPB5cKAOc=)
                          2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: r7BxgdTGIWfxwDO3b24oDXrzHcLbJY+URU6Et/eEPr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
                          rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
        Validity
            Not Before: Jan 25 05:03:26 2026 GMT
            Not After : Feb  1 05:03:26 2026 GMT
        Subject: CN=6975a41e-9a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:0a:dc:64:97:25:14:20:e5:c8:63:27:7e:
                    ff:42:8d:fa:a2:4c:f2:df:a5:76:1f:e4:fa:1c:10:
                    af:66:53:35:b1:2a:f0:ca:a6:0a:56:1b:b0:2c:2d:
                    1a:c5:3a:31:d4:7e:0d:ca:c9:09:ec:77:a5:31:1f:
                    d7:77:99:b5:fb:85:61:84:81:38:1e:07:f8:f9:a1:
                    95:dd:d1:64:ed:af:ac:c6:7b:46:5c:68:e6:14:a6:
                    2c:d2:c4:1e:bf:6a:4b:58:7b:fd:bd:d4:88:6e:c9:
                    f0:92:15:38:d8:13:c8:2e:35:f1:21:fb:78:70:4a:
                    72:64:ab:da:50:bb:8f:6a:0c:be:91:a7:92:16:a2:
                    4d:09:f2:14:ad:b1:a2:94:5c:3d:6f:33:53:dd:4b:
                    54:18:ad:60:96:52:4a:4a:10:58:09:4b:d8:00:a5:
                    a1:ee:7d:95:40:8a:3d:31:6b:3e:71:9d:9a:e9:ef:
                    84:d8:88:16:44:bb:b4:6d:ab:52:90:0f:53:6d:8e:
                    7f:ee:53:69:3c:cf:62:43:b6:87:aa:fe:9c:4f:bb:
                    61:dc:d3:61:3c:40:ab:96:d7:1f:98:a7:14:50:cc:
                    81:9b:e8:44:47:58:6a:fb:de:9e:c8:e2:8a:85:e9:
                    13:40:88:c2:18:fc:ba:46:f0:aa:7e:39:66:f3:f3:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:13:AE:0F:EA:0B:D6:13:78:13:ED:CD:2A:86:A7:60:7A:B3:39
            X509v3 Authority Key Identifier:
                keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:89:10:3e:a3:fb:e7:b3:7f:0a:39:f2:e8:f0:57:21:ce:
         29:13:1b:81:f4:b8:3e:e7:7a:92:08:eb:d2:d0:08:dd:89:81:
         59:d0:3a:cc:ef:89:1a:72:31:18:d3:b0:eb:c6:b7:cf:a9:ae:
         6c:18:ab:9c:c9:ac:32:09:fa:d4:c0:2b:4f:3f:d6:7a:4c:97:
         c2:60:bd:32:a2:b8:33:8a:b3:d5:58:a3:79:f0:6b:98:30:d8:
         cc:9f:37:a6:59:9d:d9:eb:1e:a7:1b:bc:50:53:66:03:53:82:
         58:e5:eb:f6:f7:ba:ed:58:e2:85:aa:c4:d1:e5:44:f0:f0:4f:
         d9:6f:68:3b:b6:3b:df:95:ef:f2:12:92:ec:0c:44:1a:d5:2c:
         b7:f7:a0:b1:e7:f7:61:6b:c6:2a:2b:9c:16:b8:8f:8a:4e:a7:
         7b:62:7d:ed:fe:bd:11:30:79:62:8e:e1:7c:b0:8d:c2:89:be:
         d4:18:38:ce:6f:55:1f:82:f7:1e:c7:9d:79:8f:b7:77:7c:8c:
         f3:29:29:32:cc:98:da:41:8b:40:89:93:b2:4c:ba:09:5c:d2:
         0e:1b:3f:69:a7:65:0f:21:bc:61:d6:13:73:ce:c3:79:19:17:
         b6:f6:7d:68:f9:77:ec:b2:40:9f:17:3b:3c:57:02:9f:c4:64:
         3c:bd:cd:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QUFDNEIxMTAvBgNVBAUTKEUzOEE1RURFMTk2OEM5Mzc1RTUxNTUxRkFFOTg4ODhB
MEJCNTQ0OTAwHhcNMjYwMTI1MDUwMzI2WhcNMjYwMjAxMDUwMzI2WjAYMRYwFAYD
VQQDDA02OTc1YTQxZS05YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj/YK3GSXJRQg5chjJ37/Qo36okzy36V2H+T6HBCvZlM1sSrwyqYKVhuwLC0a
xTox1H4NyskJ7HelMR/Xd5m1+4VhhIE4Hgf4+aGV3dFk7a+sxntGXGjmFKYs0sQe
v2pLWHv9vdSIbsnwkhU42BPILjXxIft4cEpyZKvaULuPagy+kaeSFqJNCfIUrbGi
lFw9bzNT3UtUGK1gllJKShBYCUvYAKWh7n2VQIo9MWs+cZ2a6e+E2IgWRLu0batS
kA9TbY5/7lNpPM9iQ7aHqv6cT7th3NNhPECrltcfmKcUUMyBm+hER1hq+96eyOKK
hekTQIjCGPy6RvCqfjlm8/PYDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa8E64P
6gvWE3gT7c0qhqdgerM5MB8GA1UdIwQYMBaAFOOKXt4ZaMk3XlFVH66YiIoLtUSQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9ERTNGODg5QUNE
N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lUZGVVVlVmcnBpSWlndTFS
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUM0Qi9ERTNGODg5QUNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lU
ZGVVVlVmcnBpSWlndTFSSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAv14kQPqP757N/Cjny6PBXIc4pExuB9Lg+53qSCOvS0AjdiYFZ0DrM
74kacjEY07DrxrfPqa5sGKucyawyCfrUwCtPP9Z6TJfCYL0yorgzirPVWKN58GuY
MNjMnzemWZ3Z6x6nG7xQU2YDU4JY5ev297rtWOKFqsTR5UTw8E/Zb2g7tjvfle/y
EpLsDEQa1Sy396Cx5/dha8YqK5wWuI+KTqd7Yn3t/r0RMHlijuF8sI3Cib7UGDjO
b1Ufgvcex515j7d3fIzzKSkyzJjaQYtAiZOyTLoJXNIOGz9pp2UPIbxh1hNzzsN5
GRe29n1o+XfsskCfFzs8VwKfxGQ8vc32
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:05 2026 by rpki-client