This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          KfoMvcy4yEqxyOLqiZnCV5iFpKrC3FYf339oxAkpUJk=
Subject key identifier:   12:7A:91:04:96:A3:12:D9:59:27:79:66:1A:8F:96:14:76:2C:6E:9A
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       067B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          0674
Signing time:             Sat 24 Jan 2026 21:49:03 +0000
Manifest this update:     Sat 24 Jan 2026 21:49:03 +0000
Manifest next update:     Sat 31 Jan 2026 21:49:03 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: YWIZuxGQhOP5vZcCnVabIhbM2DTVyCr61lBdIn0AyH4=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: Njg0pVJ4I7URnxza7bv42AK9X5Mt3J26B9EOz9eASoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: Jan 24 21:49:03 2026 GMT
            Not After : Jan 31 21:49:03 2026 GMT
        Subject: CN=69753e4f-a439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:53:01:cc:e2:c6:21:86:40:13:ae:f0:c8:
                    41:19:ec:71:50:20:d4:31:ac:99:99:a0:53:d1:09:
                    c1:e1:6a:63:e6:e6:4c:18:70:09:18:9f:a8:17:c4:
                    2b:36:22:cd:a7:3b:e4:90:15:f9:9e:81:40:bc:8a:
                    30:b5:c2:2f:b9:78:08:6f:de:75:dd:e9:d4:ea:9e:
                    c5:a9:9d:31:6a:3e:8a:22:3c:aa:23:b5:3e:6f:91:
                    c6:30:38:88:a1:91:6d:1c:7b:76:24:11:77:1b:ac:
                    0d:5e:75:a5:d1:74:7e:00:e3:51:20:ed:17:19:58:
                    bb:ec:18:45:0b:3f:50:59:a2:93:ee:10:26:e8:45:
                    65:41:34:81:07:b0:64:5a:bf:80:16:cf:3c:3a:02:
                    98:96:de:4c:de:16:65:73:b3:a7:7a:41:27:42:48:
                    b0:cc:17:34:67:6a:3b:ab:51:38:0b:ae:ba:4f:d2:
                    b9:06:c4:f0:c2:5c:73:cb:d7:bc:f1:41:8d:b3:cf:
                    53:f9:7f:50:5a:b8:69:44:fa:2c:8e:9a:15:f0:18:
                    c3:b0:93:76:a6:01:1d:e0:88:7e:73:87:80:a8:6a:
                    2f:4f:f3:35:9c:58:07:49:d6:aa:67:e6:ad:9d:bc:
                    b9:9d:5b:a8:32:fe:12:52:c5:68:4a:d3:3f:f3:b4:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7A:91:04:96:A3:12:D9:59:27:79:66:1A:8F:96:14:76:2C:6E:9A
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:db:5b:01:95:79:c6:2a:8a:32:9b:c7:e2:d5:72:48:9e:46:
         3c:e7:64:c5:fc:b3:14:d9:cb:f3:c4:82:7a:0a:9d:f6:0f:c8:
         f6:9f:0d:fa:e7:5a:08:85:7e:8e:6a:4d:82:7b:23:94:aa:8e:
         57:bc:38:15:80:9e:2d:2f:53:8f:27:b1:dd:84:a0:88:ea:fe:
         95:4b:20:f4:38:6f:5e:cd:76:de:80:81:f7:e1:57:4a:e7:1b:
         33:b8:9f:64:db:e4:89:de:27:87:ef:b8:94:5c:e0:5b:35:8e:
         7d:78:28:28:5a:1e:55:20:80:46:e2:53:b1:39:d8:73:be:b8:
         01:7b:06:22:7c:49:a6:1e:fb:30:ef:e2:21:b8:77:f3:80:91:
         16:97:aa:40:4f:2a:5f:9b:4c:69:11:ae:36:86:0e:8e:e4:52:
         04:9f:70:03:d2:00:1b:6b:ed:1e:8f:ab:a5:fb:5e:8e:d2:f6:
         5e:d1:d8:b6:79:43:b5:8c:fe:8d:30:d6:e2:de:c9:8c:da:b5:
         61:15:01:b9:c5:12:42:21:13:9b:95:03:2e:5f:aa:a8:e3:86:
         d4:53:87:f8:29:9f:4f:22:83:f0:e0:b4:a2:91:5a:f1:ef:3a:
         b4:60:34:92:2f:6f:7a:d9:11:f8:36:e1:31:45:51:1c:89:74:
         77:6f:73:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF
RDM4N0ExNkYwHhcNMjYwMTI0MjE0OTAzWhcNMjYwMTMxMjE0OTAzWjAYMRYwFAYD
VQQDDA02OTc1M2U0Zi1hNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrhTAczixiGGQBOu8MhBGexxUCDUMayZmaBT0QnB4Wpj5uZMGHAJGJ+oF8Qr
NiLNpzvkkBX5noFAvIowtcIvuXgIb9513enU6p7FqZ0xaj6KIjyqI7U+b5HGMDiI
oZFtHHt2JBF3G6wNXnWl0XR+AONRIO0XGVi77BhFCz9QWaKT7hAm6EVlQTSBB7Bk
Wr+AFs88OgKYlt5M3hZlc7OnekEnQkiwzBc0Z2o7q1E4C666T9K5BsTwwlxzy9e8
8UGNs89T+X9QWrhpRPosjpoV8BjDsJN2pgEd4Ih+c4eAqGovT/M1nFgHSdaqZ+at
nby5nVuoMv4SUsVoStM/87QBKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ6kQSW
oxLZWSd5ZhqPlhR2LG6aMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC
RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr
d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn21sBlXnGKooym8fi1XJInkY852TF/LMU2cvzxIJ6Cp32D8j2nw36
51oIhX6Oak2CeyOUqo5XvDgVgJ4tL1OPJ7HdhKCI6v6VSyD0OG9ezXbegIH34VdK
5xszuJ9k2+SJ3ieH77iUXOBbNY59eCgoWh5VIIBG4lOxOdhzvrgBewYifEmmHvsw
7+IhuHfzgJEWl6pATypfm0xpEa42hg6O5FIEn3AD0gAba+0ej6ul+16O0vZe0di2
eUO1jP6NMNbi3smM2rVhFQG5xRJCIROblQMuX6qo44bUU4f4KZ9PIoPw4LSikVrx
7zq0YDSSL2962RH4NuExRVEciXR3b3Px
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:47 2026 by rpki-client