This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
File:                     5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json)
Hash identifier:          sBY9qZJWOyJk6RZDD3bWt01OYqmUXlhHAQfrl89k08E=
Subject key identifier:   DB:E1:A7:C6:16:6B:77:15:83:BD:AA:33:8B:56:BC:35:70:45:BD:E8
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Certificate issuer:       /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
Manifest number:          01BC
Signing time:             Sun 25 Jan 2026 02:22:12 +0000
Manifest this update:     Sun 25 Jan 2026 02:22:11 +0000
Manifest next update:     Sun 01 Feb 2026 02:22:11 +0000
Files and hashes:         1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: vLNwe1PyQin6uW+M9nwGvWBiSks5pdBSCna0Om1KoVs=)
                          2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: zJ+T1/Hkopnt885YDIhvqhmTsj2QoX1P6tQiloS39aw=)
                          3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: ZpCx0RDhO/3a016yxSmp4qzmXeudCkZizqsM58t9iRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
        Validity
            Not Before: Jan 25 02:22:11 2026 GMT
            Not After : Feb  1 02:22:11 2026 GMT
        Subject: CN=69757e54-d798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:53:b2:0f:5d:d7:af:1d:d2:2a:f3:e1:31:
                    c0:df:73:a4:5e:26:fe:82:2c:96:ea:cf:a7:80:a9:
                    9a:8e:e0:8a:d6:73:68:c7:fa:6b:3f:d5:ee:71:d7:
                    bd:b6:a4:8e:e7:af:a6:b4:f6:34:67:db:d0:bd:54:
                    11:be:d6:45:0f:b0:95:af:b1:b8:97:4e:d9:56:30:
                    35:b0:5c:8d:fe:4a:90:89:74:86:f2:9b:74:de:be:
                    56:fc:a6:87:39:6c:ce:f9:03:93:09:44:0f:d8:4b:
                    4c:40:90:8f:e3:97:55:5c:2f:3e:1d:50:02:e0:be:
                    2c:e2:c2:41:db:4d:6f:51:b6:db:8e:c1:fb:8b:90:
                    04:34:85:f9:cd:14:ec:b0:11:29:13:25:b4:bf:e4:
                    f2:94:ef:7b:b0:44:78:8a:2e:4e:f9:1b:e0:af:72:
                    1d:8a:29:05:f0:03:3e:ea:14:f1:1c:df:14:07:11:
                    46:3f:cb:36:b6:21:64:6c:de:ee:86:22:76:4a:74:
                    c9:15:5f:b1:d5:57:d0:28:48:30:74:1e:ea:65:a3:
                    03:31:52:1b:7e:38:fb:83:cb:e6:93:b0:ac:97:12:
                    68:bb:22:68:b1:53:84:d1:34:ba:c4:08:89:31:6e:
                    ef:b6:a3:74:50:42:03:e1:c1:b4:05:29:5c:73:a8:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:A7:C6:16:6B:77:15:83:BD:AA:33:8B:56:BC:35:70:45:BD:E8
            X509v3 Authority Key Identifier:
                keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:4f:b9:f5:89:13:ac:da:3d:d5:4c:74:5d:73:77:35:3a:
         47:9b:64:73:d2:9b:c9:01:a7:7b:00:fd:2f:09:61:7e:73:6c:
         a9:72:76:30:fb:ec:40:00:d5:26:f7:12:bb:19:22:d5:da:ee:
         cb:08:26:b3:40:89:06:96:b3:d9:0f:68:b1:6c:32:74:ae:3a:
         d4:04:99:b2:a4:40:35:10:6c:ee:71:46:5f:11:63:5a:48:03:
         23:c7:95:5d:1e:4b:48:18:a0:d4:cc:88:8e:6b:5a:36:e4:eb:
         fc:fa:70:da:6e:01:83:64:3d:b9:e2:5d:dd:e1:64:f8:3a:37:
         cf:82:37:34:30:99:6d:31:7e:d2:c5:b6:9a:de:4c:e9:70:56:
         ba:15:75:84:5b:a0:99:46:82:4e:e6:f7:18:e2:b2:77:1c:69:
         82:9d:1b:f8:8c:e1:84:2d:4c:47:99:81:63:d4:30:a4:05:8e:
         b9:76:46:b0:5e:31:34:7e:06:62:ec:92:71:53:15:bb:93:b9:
         91:0c:ae:8b:c9:8a:bd:34:41:e9:f8:9c:62:53:d9:44:e2:de:
         c7:af:90:be:09:ee:9a:5e:24:f9:75:61:af:8b:48:e3:26:f3:
         97:45:cb:13:73:12:c0:b0:c1:49:28:1d:8a:63:1c:13:f2:71:
         47:e5:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:53:06 2026 by rpki-client