This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
File:                     15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json)
Hash identifier:          qDr18lZ6r78sULm4k/R0XSjDEdCDQpqsLVd7YOoWOvg=
Subject key identifier:   F1:67:4C:76:BF:31:88:B7:3B:7C:3C:CA:1F:98:AE:7E:CD:56:15:6B
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Certificate issuer:       /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
Manifest number:          0512
Signing time:             Sat 24 Jan 2026 22:51:37 +0000
Manifest this update:     Sat 24 Jan 2026 22:51:36 +0000
Manifest next update:     Sat 31 Jan 2026 22:51:36 +0000
Files and hashes:         1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: +AoGMka1ClvKDVftYeq4+AW4z3aQdQRgvmfI3V/MYTw=)
                          2: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: fn18Z/WO3LMBPpMiEymfF/J9ml4DPzxPa9csD1f45R4=)
                          3: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: zGe92eYB2T/6F6go2IsVT92hr41aOIJDE55tjsezOT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
                          rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
        Validity
            Not Before: Jan 24 22:51:36 2026 GMT
            Not After : Jan 31 22:51:36 2026 GMT
        Subject: CN=69754cf8-eb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:c1:eb:31:19:93:e0:28:65:9c:36:13:f3:
                    ee:94:30:d0:88:1f:c4:1e:48:80:4d:b4:db:03:64:
                    c3:bd:a8:8c:19:dc:c2:2d:0b:c8:db:f0:cf:b2:74:
                    3a:74:f2:3e:da:af:7f:8b:60:2f:34:a0:b8:fc:a6:
                    cd:b9:af:d4:bd:32:67:83:a9:01:cb:f6:5c:f2:d5:
                    64:86:0a:bf:03:c6:91:41:71:c7:2e:dd:60:e4:25:
                    fb:10:39:53:d6:ae:41:62:0d:06:b1:3a:c4:cc:69:
                    07:e6:69:81:2b:2f:83:8e:58:3a:8a:e0:b9:14:61:
                    b4:08:17:a0:b5:ad:bf:b0:87:c7:10:f0:9b:b8:ef:
                    8f:63:91:be:59:fc:df:58:b2:16:54:98:8c:e3:e7:
                    10:00:3b:59:45:21:a3:ec:ed:55:a2:5d:8b:cc:a2:
                    92:8d:9e:45:bf:02:8c:79:05:73:ce:8a:9e:1e:6a:
                    9e:6b:c4:f8:91:ab:75:05:b8:34:62:8d:ec:0c:6a:
                    77:13:44:dc:4f:05:98:f9:f5:7a:bf:9b:f2:72:dd:
                    70:71:7c:f1:52:f8:6b:1d:b5:12:62:c7:89:6f:91:
                    7d:29:42:72:86:d0:31:a4:f7:00:2b:dd:13:be:61:
                    a4:1a:a6:c5:50:2f:15:57:4f:cb:a6:80:b8:82:7f:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:4C:76:BF:31:88:B7:3B:7C:3C:CA:1F:98:AE:7E:CD:56:15:6B
            X509v3 Authority Key Identifier:
                keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:c4:90:56:fa:8c:f3:1e:d8:1d:8a:90:fe:2b:87:a2:d3:
         d6:8f:67:49:f9:36:bf:a6:f9:12:6a:7e:7d:47:5b:88:24:1d:
         ea:a8:a4:9b:ce:4a:6a:e9:91:c1:e9:a2:42:c0:49:af:87:25:
         59:9c:10:4c:c2:6a:7f:41:95:71:d1:a0:8d:34:f9:a7:42:6b:
         d6:6f:1c:ac:78:59:82:a6:f5:f5:6e:f0:d6:39:f0:04:5a:84:
         b6:bb:bf:ad:2e:1a:1a:bf:63:d7:9e:bf:40:60:7a:bb:18:eb:
         de:d2:74:a4:e7:94:4b:cc:21:93:ea:32:85:b0:28:4b:b1:76:
         3d:d3:66:0a:d6:b0:a5:7a:3a:ca:59:23:75:70:c3:49:48:f4:
         7b:cb:72:4a:e9:7e:f2:dc:d3:7c:ee:e1:d4:d2:bc:ce:e7:b2:
         8b:d5:8d:c8:b1:ac:10:7d:89:54:43:27:63:37:e5:65:5d:f2:
         15:9c:a0:1b:cf:a5:1b:b5:ef:08:91:14:c8:ad:49:ba:2f:b4:
         dd:0a:10:1d:8a:9d:84:90:fe:59:ac:d8:31:9b:cf:97:d3:48:
         59:10:8e:1f:57:c7:4a:bf:58:b6:a6:ab:e2:a0:a5:07:8d:e3:
         1b:c1:e3:fb:dd:bc:95:22:58:d5:7f:51:8b:40:85:11:16:ce:
         a1:8b:fe:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy
MDZCQUM2MjYwHhcNMjYwMTI0MjI1MTM2WhcNMjYwMTMxMjI1MTM2WjAYMRYwFAYD
VQQDDA02OTc1NGNmOC1lYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJLB6zEZk+AoZZw2E/PulDDQiB/EHkiATbTbA2TDvaiMGdzCLQvI2/DPsnQ6
dPI+2q9/i2AvNKC4/KbNua/UvTJng6kBy/Zc8tVkhgq/A8aRQXHHLt1g5CX7EDlT
1q5BYg0GsTrEzGkH5mmBKy+Djlg6iuC5FGG0CBegta2/sIfHEPCbuO+PY5G+Wfzf
WLIWVJiM4+cQADtZRSGj7O1Vol2LzKKSjZ5FvwKMeQVzzoqeHmqea8T4kat1Bbg0
Yo3sDGp3E0TcTwWY+fV6v5vyct1wcXzxUvhrHbUSYseJb5F9KUJyhtAxpPcAK90T
vmGkGqbFUC8VV0/LpoC4gn+FlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFnTHa/
MYi3O3w8yh+Yrn7NVhVrMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB
RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4
aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa
NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuxcSQVvqM8x7YHYqQ/iuHotPWj2dJ+Ta/pvkSan59R1uIJB3qqKSb
zkpq6ZHB6aJCwEmvhyVZnBBMwmp/QZVx0aCNNPmnQmvWbxyseFmCpvX1bvDWOfAE
WoS2u7+tLhoav2PXnr9AYHq7GOve0nSk55RLzCGT6jKFsChLsXY902YK1rClejrK
WSN1cMNJSPR7y3JK6X7y3NN87uHU0rzO57KL1Y3IsawQfYlUQydjN+VlXfIVnKAb
z6Ubte8IkRTIrUm6L7TdChAdip2EkP5ZrNgxm8+X00hZEI4fV8dKv1i2pqvioKUH
jeMbweP73byVIljVf1GLQIURFs6hi/5o
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:29 2026 by rpki-client