This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
File:                     hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json)
Hash identifier:          P54+dElVwyoLvIW86+loVDvuYI7Z4wb8l8HTIRs4Jao=
Subject key identifier:   27:29:0C:59:C0:FB:DF:CE:15:4E:2E:02:69:AF:A9:60:D5:7E:C5:A6
Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07
Certificate issuer:       /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
Manifest number:          C5
Signing time:             Sun 25 Jan 2026 05:03:29 +0000
Manifest this update:     Sun 25 Jan 2026 05:03:28 +0000
Manifest next update:     Sun 01 Feb 2026 05:03:28 +0000
Files and hashes:         1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: 1dApGGwT3a4e6Urak1fuAaUgSTj6n+Cs7mc130o1YGg=)
                          2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: XrOCHNJawPFMGa3f1zkrlG9WSpcIP1i394cI87CahME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07
        Validity
            Not Before: Jan 25 05:03:28 2026 GMT
            Not After : Feb  1 05:03:28 2026 GMT
        Subject: CN=6975a421-bdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:4d:31:38:06:38:b4:a1:a0:6e:8c:28:2e:
                    f1:ec:99:35:56:9f:33:55:20:fc:a7:66:6c:81:08:
                    c0:da:e8:36:2e:e3:48:e2:01:d4:10:7d:84:9d:cc:
                    b8:fd:16:9a:41:d6:12:0d:be:7d:1d:9d:fd:63:5e:
                    d0:0a:10:5a:45:77:4c:8f:f1:86:44:9d:29:02:3c:
                    b3:96:91:72:f8:11:65:03:13:c4:c3:66:73:c3:0e:
                    fe:fa:5e:fe:f7:0f:96:2e:ec:c8:af:9e:15:bc:6a:
                    c3:90:e9:8b:36:4c:a0:33:f1:77:cf:9e:02:de:8a:
                    91:aa:32:df:93:1f:1b:bc:b1:06:d5:a9:63:11:7a:
                    6c:56:d8:63:fa:7c:a8:c4:d0:8c:0d:81:13:c4:c6:
                    0c:7d:5b:52:35:6d:7e:3f:65:5d:1f:c8:ac:cc:4e:
                    10:b5:67:39:20:f9:fe:e7:c9:e0:91:72:30:0f:5b:
                    98:94:68:a6:10:6e:46:7c:21:9f:a2:7d:9b:dc:85:
                    6e:a8:1c:4a:45:a8:f4:27:d0:34:8b:63:ec:4e:a8:
                    e6:e0:f4:00:39:96:28:31:2a:52:2b:5f:db:33:bd:
                    bf:c0:1a:d1:b6:73:92:4f:80:b0:f2:6b:7b:11:49:
                    d3:44:04:aa:dc:2e:a5:8d:56:9d:44:13:64:c3:e1:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:0C:59:C0:FB:DF:CE:15:4E:2E:02:69:AF:A9:60:D5:7E:C5:A6
            X509v3 Authority Key Identifier:
                keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:72:e9:cf:25:53:e4:d5:5f:c2:c0:2a:a8:63:76:03:cd:9d:
         4b:ec:17:bf:46:18:03:f8:be:c8:e2:5b:60:50:73:e3:79:fb:
         72:85:a7:b0:00:d4:17:c3:f2:6c:99:72:df:27:d6:f3:bc:aa:
         66:fe:ec:2f:15:e2:fd:43:f8:0a:40:68:12:33:10:0f:e5:75:
         66:bf:ca:73:cc:bc:69:72:0b:25:5d:8d:92:19:31:15:51:b7:
         9d:fb:4a:ad:c2:c6:ac:e3:70:e7:1a:0e:04:48:40:d2:db:28:
         68:5b:8e:51:fa:4f:fb:ce:b9:ce:e7:b7:51:f3:e0:9d:b0:c9:
         a3:2a:ec:f3:36:a0:0b:09:bc:51:9f:23:ae:68:29:bf:11:46:
         8d:ee:0c:d4:ec:a2:18:ec:30:b6:eb:4b:75:5d:69:ba:f3:bb:
         b3:79:1f:10:44:c9:be:bb:56:dd:1f:c5:d5:5f:a2:0f:21:04:
         e8:5e:2a:c5:ae:df:ec:43:4e:59:69:0c:5e:0a:a4:fe:8c:af:
         00:e8:97:3e:f4:f2:89:9c:5f:a8:d7:4b:9d:bd:9b:c6:e1:7c:
         5b:ab:4e:0f:05:96:e4:33:ca:a7:da:74:6d:29:20:f8:6d:af:
         80:11:96:17:f8:44:d4:e6:bc:f4:65:5e:b7:e9:80:3c:d0:b0:
         2b:c2:6e:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QUFDNEIxMTAvBgNVBAUTKDg1MjA0NjkxNTE4NUY4NTVFMDlFQjM0NDc4ODEzOTQz
MEU3NDBGMDcwHhcNMjYwMTI1MDUwMzI4WhcNMjYwMjAxMDUwMzI4WjAYMRYwFAYD
VQQDDA02OTc1YTQyMS1iZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz55NMTgGOLShoG6MKC7x7Jk1Vp8zVSD8p2ZsgQjA2ug2LuNI4gHUEH2Ency4
/RaaQdYSDb59HZ39Y17QChBaRXdMj/GGRJ0pAjyzlpFy+BFlAxPEw2Zzww7++l7+
9w+WLuzIr54VvGrDkOmLNkygM/F3z54C3oqRqjLfkx8bvLEG1aljEXpsVthj+nyo
xNCMDYETxMYMfVtSNW1+P2VdH8iszE4QtWc5IPn+58ngkXIwD1uYlGimEG5GfCGf
on2b3IVuqBxKRaj0J9A0i2PsTqjm4PQAOZYoMSpSK1/bM72/wBrRtnOST4Cw8mt7
EUnTRASq3C6ljVadRBNkw+HsoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcpDFnA
+9/OFU4uAmmvqWDVfsWmMB8GA1UdIwQYMBaAFIUgRpFRhfhV4J6zRHiBOUMOdA8H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9FNjM1Rjc5NkNE
N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1GWGduck5FZUlFNVF3NTBE
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUM0Qi9FNjM1Rjc5NkNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi9oU0JHa1ZHRi1G
WGduck5FZUlFNVF3NTBEd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAcunPJVPk1V/CwCqoY3YDzZ1L7Be/RhgD+L7I4ltgUHPjeftyhaew
ANQXw/JsmXLfJ9bzvKpm/uwvFeL9Q/gKQGgSMxAP5XVmv8pzzLxpcgslXY2SGTEV
Ubed+0qtwsas43DnGg4ESEDS2yhoW45R+k/7zrnO57dR8+CdsMmjKuzzNqALCbxR
nyOuaCm/EUaN7gzU7KIY7DC260t1XWm687uzeR8QRMm+u1bdH8XVX6IPIQToXirF
rt/sQ05ZaQxeCqT+jK8A6Jc+9PKJnF+o10udvZvG4Xxbq04PBZbkM8qn2nRtKSD4
ba+AEZYX+ETU5rz0ZV636YA80LArwm51
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:18 2026 by rpki-client