This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
File:                     vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json)
Hash identifier:          nLvEm4+Vw4DgjLXOQdp4B8Nfxu1P9X53BoPmc8ZtB3s=
Subject key identifier:   01:2F:6A:27:EB:AA:C4:73:04:E0:59:CB:E5:0A:FE:0C:A4:3D:F8:28
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Certificate issuer:       /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial:       0903
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
Manifest number:          08F5
Signing time:             Sat 24 Jan 2026 19:46:23 +0000
Manifest this update:     Sat 24 Jan 2026 19:46:23 +0000
Manifest next update:     Sat 31 Jan 2026 19:46:23 +0000
Files and hashes:         1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: yn0La338zp0rl4346pjYjqum2Lr3UN/x/ZolU20ZSmA=)
                          2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=)
                          3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
                          rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307 (0x903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
        Validity
            Not Before: Jan 24 19:46:23 2026 GMT
            Not After : Jan 31 19:46:23 2026 GMT
        Subject: CN=6975218f-e5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:26:b7:ad:e3:ca:64:3b:f3:ca:f4:2c:38:
                    40:8c:4a:28:c6:34:f5:a8:b0:ea:64:76:4e:ba:48:
                    9e:7b:7d:e6:23:f8:50:8f:76:64:52:2c:90:fe:8e:
                    79:a8:61:a8:e4:cf:40:88:92:f9:b3:02:70:ff:fe:
                    6b:76:7e:98:19:4c:4e:d2:ae:cc:47:cd:66:82:b6:
                    84:5c:8f:ae:e2:6e:9a:65:7a:8b:fe:4a:bb:27:0e:
                    b5:06:03:0a:b6:34:44:c1:c1:7e:72:fb:57:08:c8:
                    6e:2b:75:f3:e0:f0:07:1a:86:ac:7d:3b:8a:5a:95:
                    d1:79:58:01:52:2c:ac:2b:9b:d3:8a:e0:69:92:03:
                    51:2c:c6:32:71:ce:71:30:d4:4b:ed:bf:dc:5c:fa:
                    21:4f:76:43:d5:af:48:45:3a:42:ce:ab:0d:76:1e:
                    cb:4a:2f:5d:c6:bb:94:11:2a:34:6b:dd:74:24:50:
                    53:53:8e:1a:29:d8:6d:a5:d9:cf:95:35:e7:0d:26:
                    4a:77:7c:9f:9f:b3:cc:0b:79:9f:66:af:2a:19:8b:
                    f0:de:f0:4b:2c:01:f5:8a:15:4c:b6:33:6a:8d:7f:
                    a7:c0:46:b7:6e:d5:9e:2d:1d:fc:ac:2f:d2:83:2c:
                    97:09:9b:ac:c8:2d:45:c7:af:e2:cc:4b:d3:f2:3d:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2F:6A:27:EB:AA:C4:73:04:E0:59:CB:E5:0A:FE:0C:A4:3D:F8:28
            X509v3 Authority Key Identifier:
                keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:58:60:be:8d:94:bd:18:e0:7b:5e:59:08:6f:b8:a1:f2:4c:
         9b:44:fa:76:95:96:32:85:a0:39:28:e0:f7:5a:25:9e:8c:8a:
         24:4c:82:a7:4f:ab:bf:1d:d0:82:e0:d5:f6:c4:97:10:ba:36:
         79:71:22:d1:3f:24:79:bb:0b:17:8b:44:29:c2:a7:ff:57:ad:
         f5:24:3c:d0:87:b5:67:13:f7:8a:40:c8:ae:e0:9b:8e:b5:43:
         5b:3f:36:80:06:4e:a8:33:c2:49:94:0e:a8:65:87:48:f8:89:
         42:e0:d0:6a:3c:94:91:28:41:f8:64:88:74:30:ee:3d:3d:37:
         68:ed:71:21:fe:ba:61:b6:be:39:f1:a1:22:24:a3:b8:54:a0:
         a8:40:82:a2:5b:ea:11:38:f2:ec:ed:99:4b:00:62:e2:36:5b:
         7d:e5:f2:60:01:fe:7f:1d:d0:70:b3:cb:3b:e9:83:53:61:43:
         73:9e:10:86:93:d7:da:b0:46:ee:92:e4:64:3b:30:8a:c2:1b:
         1d:a9:73:ab:46:ab:ad:d2:81:af:3b:a1:7a:e0:12:a5:28:9a:
         67:51:da:bb:bf:ae:85:68:47:01:97:c1:9f:1f:1c:53:f9:27:
         91:ed:37:1b:b9:0e:43:42:86:8d:34:8b:a4:da:18:b7:3c:a3:
         49:2d:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:47 2026 by rpki-client