This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
File:                     a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json)
Hash identifier:          YW1wlydfKBE9MG39LSbV3pfjVILru+Az87Uhyy0tMeo=
Subject key identifier:   F5:B0:0F:79:75:06:C3:79:15:FF:D0:B3:39:A2:91:69:45:DE:A1:AA
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Certificate issuer:       /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
Manifest number:          C5
Signing time:             Sun 25 Jan 2026 05:14:54 +0000
Manifest this update:     Sun 25 Jan 2026 05:14:53 +0000
Manifest next update:     Sun 01 Feb 2026 05:14:53 +0000
Files and hashes:         1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: yCVf2a+D/ooWBCUqyuHIFRj+CQ4/HV0ugf3a3g3kPHQ=)
                          2: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=)
                          3: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
        Validity
            Not Before: Jan 25 05:14:53 2026 GMT
            Not After : Feb  1 05:14:53 2026 GMT
        Subject: CN=6975a6ce-3243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:9d:be:03:60:5c:db:eb:1f:35:9a:6e:18:
                    10:b9:f4:55:52:d7:0b:08:e3:93:14:37:db:31:eb:
                    e5:2a:3a:94:91:16:91:2d:4d:40:79:b4:f3:18:28:
                    21:8b:7f:df:15:56:25:8d:20:da:85:90:be:2d:55:
                    35:e3:e1:3f:3d:6f:bf:ce:39:95:2e:5c:5b:1d:5c:
                    de:19:8e:2e:78:ef:82:fd:d0:19:eb:f3:2d:48:b7:
                    1d:10:db:3c:f8:80:b5:c8:c9:fc:58:44:df:ca:f9:
                    21:7c:95:7c:4e:cd:4b:ad:9f:67:79:a3:e1:f5:6b:
                    f7:84:d6:09:ff:b7:76:73:ec:38:70:0d:4d:ba:6e:
                    96:28:36:42:d6:a4:80:ea:f8:8a:4e:cb:e2:16:e5:
                    fa:20:6b:c6:1f:df:ee:e0:e0:2c:aa:55:c3:00:a9:
                    af:f0:d4:34:ce:db:3b:bd:08:0b:18:ea:9b:42:8c:
                    70:67:18:b0:57:53:be:89:2b:d9:30:e8:9d:69:58:
                    6b:dd:51:8c:e3:23:d3:a3:95:39:55:63:b9:e1:51:
                    97:84:1f:be:58:3c:3c:b1:5a:09:b8:f3:a1:96:5c:
                    ba:40:56:16:2b:d4:2a:40:e9:26:f6:96:98:ef:de:
                    bc:a8:b7:72:48:ed:a7:a5:f3:58:5a:ed:ad:54:db:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B0:0F:79:75:06:C3:79:15:FF:D0:B3:39:A2:91:69:45:DE:A1:AA
            X509v3 Authority Key Identifier:
                keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:67:0f:7b:db:ac:5a:fc:1b:8b:c0:05:8f:cd:15:37:bd:
         74:05:50:fc:6c:77:d0:bc:ac:8b:a1:08:74:31:4a:33:61:77:
         c2:c7:27:5c:09:3d:0e:9f:30:78:ad:62:19:40:73:9c:05:6a:
         5b:e5:0d:8c:7f:fa:77:32:9b:05:c0:21:7f:b8:cb:d4:f2:20:
         79:46:97:12:41:56:8a:58:e6:2e:cc:6b:33:c6:fc:e4:a2:90:
         77:63:ac:70:30:70:01:c1:53:8e:12:52:78:04:ce:67:a0:0a:
         76:13:73:22:a5:e6:b2:45:ad:8b:26:19:fa:38:dc:67:ea:4a:
         0e:81:a3:82:7d:8e:09:b0:0e:a4:1c:5c:17:46:ec:48:93:22:
         e9:75:c0:6a:39:d5:73:2c:a7:d9:e5:e1:65:5c:59:06:f4:aa:
         43:2a:70:d2:16:1a:75:79:b8:f5:aa:db:3d:35:12:f1:3f:a4:
         e5:7c:79:6f:c9:60:1a:0e:9a:a7:91:85:f5:a7:7e:d7:c6:67:
         5c:32:e1:c7:49:0b:30:d3:0e:91:33:4d:45:57:91:00:0d:1d:
         70:8e:d8:90:06:ce:d4:f8:7d:a0:f0:e6:c7:bd:29:b3:b0:18:
         af:04:ee:55:a0:c0:36:82:0e:33:87:44:c3:93:44:73:07:25:
         3f:fd:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:36 2026 by rpki-client