This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File:                     5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier:          +t0KjghLywn4t+ZCc3c5jc0U3AdRaBJstdFINteQyvA=
Subject key identifier:   57:AB:33:84:75:A8:DA:DC:7D:9F:44:CA:60:6E:53:A0:40:51:19:E6
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer:       /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number:          DC
Signing time:             Sun 25 Jan 2026 04:52:48 +0000
Manifest this update:     Sun 25 Jan 2026 04:52:48 +0000
Manifest next update:     Sun 01 Feb 2026 04:52:48 +0000
Files and hashes:         1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: LCPICNX62fCoVm1sgP/MmjVt7GtxbteGj5W6I7cwbqw=)
                          2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: mPI5ywgBpJVHp6qMyDhLPQTq5BHSRgSzfIFhq7PDKqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
        Validity
            Not Before: Jan 25 04:52:48 2026 GMT
            Not After : Feb  1 04:52:48 2026 GMT
        Subject: CN=6975a1a0-da62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:34:f2:12:78:ba:9f:f4:21:39:5d:c7:f7:
                    93:ff:52:d9:97:11:b1:8d:93:23:b2:44:0f:c1:26:
                    f9:36:75:28:8e:af:f4:03:cd:02:99:9c:b0:ab:91:
                    c2:ee:f5:0e:cf:48:69:a6:e8:8e:46:ab:54:21:81:
                    5b:ba:7c:e0:e1:1d:89:dd:eb:34:18:88:ff:43:ca:
                    f3:4a:f5:79:3c:2a:88:66:b7:02:77:91:1b:d9:e5:
                    a3:7f:3a:98:9e:6e:1a:45:21:4c:53:d7:ac:2f:52:
                    53:eb:d7:4e:60:6b:17:50:7f:6a:51:e2:88:7f:a6:
                    04:d6:e0:95:09:57:36:d8:f3:ce:66:39:56:26:a4:
                    f3:1c:03:df:90:ba:4b:f1:57:ea:13:f1:36:ea:f1:
                    c1:d7:19:0f:5a:34:13:ba:07:76:4f:fc:fe:d1:6b:
                    22:34:87:1a:4d:ad:f1:58:30:f5:f3:bf:a9:ec:00:
                    b8:97:f0:13:db:5b:8d:b1:63:98:b9:86:7d:8d:f1:
                    ac:d5:79:ad:b9:0c:3f:2b:a7:1a:40:c3:86:e4:2a:
                    c0:3e:00:46:1d:b0:66:92:6b:b3:1c:54:5b:e4:6b:
                    94:6f:06:e8:2c:f4:2c:9d:ef:d0:5a:0c:ed:9e:4c:
                    e7:4d:16:7d:b7:5b:65:e1:0b:2d:80:41:56:4f:70:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:33:84:75:A8:DA:DC:7D:9F:44:CA:60:6E:53:A0:40:51:19:E6
            X509v3 Authority Key Identifier:
                keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:fe:6a:29:b8:21:4d:50:c3:85:30:fe:ff:0e:db:53:f3:
         46:df:9f:b9:cc:4e:62:bd:71:50:d7:86:fa:10:06:38:64:a5:
         9f:75:58:fb:7d:15:87:28:b1:b7:05:d0:6a:60:89:48:98:60:
         4f:9c:f8:16:5b:f1:60:37:9a:66:76:97:2d:d2:a4:56:59:21:
         c4:8c:67:db:8a:e6:54:3c:ab:38:a6:a4:51:6b:2a:c2:3d:b9:
         8d:d6:3f:30:f9:9d:f7:75:99:7b:eb:ee:ee:b1:a6:f4:14:8d:
         a4:76:b2:e0:95:58:e6:23:d4:38:09:f6:17:ca:de:8c:71:d1:
         53:f7:ca:6d:e5:64:fb:0e:dd:df:f1:2f:6a:74:92:d2:55:04:
         d9:ef:41:2d:2a:44:a4:89:43:0a:90:ac:ae:95:bc:e1:6d:9a:
         5d:8a:3c:52:4c:38:11:ce:bd:e2:ee:e1:0a:d0:5c:4c:48:5b:
         1a:d9:79:d9:55:b0:8c:c5:ed:ce:3c:80:64:c8:c6:4a:9b:fc:
         30:f9:cf:90:83:74:37:38:50:8e:3d:40:40:63:23:88:ee:23:
         30:3c:c6:77:8b:45:9d:6f:32:a0:b1:dd:b1:39:ce:ba:98:0b:
         17:ac:bf:9c:ca:28:8d:e1:8d:63:66:8c:79:51:4d:e4:d8:8d:
         12:01:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:59 2026 by rpki-client