This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
File:                     5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json)
Hash identifier:          vIdGRLif22Dq1DoqjN+sRf7zP+O6SrXLwDuiMeMgVqI=
Subject key identifier:   11:6E:C8:7D:49:09:58:0E:8F:39:B9:A2:F1:C3:65:7B:4F:C4:58:76
Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Certificate issuer:       /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
Manifest number:          34
Signing time:             Sun 25 Jan 2026 06:35:39 +0000
Manifest this update:     Sun 25 Jan 2026 06:35:38 +0000
Manifest next update:     Sun 01 Feb 2026 06:35:38 +0000
Files and hashes:         1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: 1H/ZeMEedyQ7f25Du6s1qp0Z8RLG/CxO24/c+k7yPVE=)
                          2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
                          rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
        Validity
            Not Before: Jan 25 06:35:38 2026 GMT
            Not After : Feb  1 06:35:38 2026 GMT
        Subject: CN=6975b9bb-dcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:b6:f0:05:ea:6d:9c:9d:23:fc:45:c4:67:
                    52:96:7f:ec:b3:78:9b:45:e2:5a:9f:b1:57:f7:32:
                    0d:cc:f4:b1:50:2c:86:96:ed:4e:00:a0:f4:a4:25:
                    85:4c:2e:38:46:79:e4:d4:90:06:67:44:39:d2:57:
                    c8:a0:35:e0:b8:d1:c2:37:5f:e5:7d:68:67:f7:f1:
                    a7:4e:8e:db:1a:a6:ff:7d:e2:73:04:6c:98:0c:76:
                    06:91:8c:a9:a1:e0:1d:0b:ae:6a:e8:06:5d:4d:65:
                    30:d3:44:1f:c2:71:6b:11:f2:87:73:34:f3:6b:3d:
                    cf:d3:e0:63:4e:db:2b:00:94:70:e7:23:61:9c:26:
                    8a:08:81:0a:95:10:82:10:61:be:40:e2:ec:23:93:
                    06:37:5a:d9:c9:90:ac:3f:8d:1e:c2:7b:63:34:dc:
                    c3:15:e8:91:e9:50:9c:6a:62:57:0a:78:e0:51:56:
                    19:e2:49:12:29:96:1c:a5:52:18:a5:2a:16:7b:8f:
                    b5:e3:e0:fd:43:3f:fa:d0:5d:de:a4:24:e4:d7:60:
                    55:82:42:ea:4c:c9:4d:ae:40:41:8b:16:07:30:72:
                    ab:58:d5:69:8f:97:1b:13:fe:91:2b:e4:e9:82:5b:
                    c9:de:e2:0b:43:e7:57:1a:8e:a5:8d:c6:e4:c0:d6:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6E:C8:7D:49:09:58:0E:8F:39:B9:A2:F1:C3:65:7B:4F:C4:58:76
            X509v3 Authority Key Identifier:
                keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d2:61:e8:16:11:53:3c:17:c7:02:18:bf:ca:14:27:5b:cc:
         cc:47:ab:e9:45:9c:81:70:db:74:31:bc:4b:dd:22:36:7f:5c:
         fc:8a:d2:38:46:50:92:5d:9a:79:32:3d:8f:d1:cf:98:30:85:
         f8:46:2c:f4:50:02:c0:5d:15:c9:ad:23:1d:b4:3d:3a:be:ed:
         5f:e6:b7:8e:a8:53:f2:09:34:6f:3d:a0:70:26:25:38:32:8d:
         9d:20:6e:00:01:b2:22:90:75:a7:62:85:2c:97:ce:2a:05:e0:
         7b:26:be:47:be:59:ae:ef:5a:8d:b0:14:5a:b4:73:51:48:4a:
         40:70:4a:32:d2:b5:7f:9a:98:d9:63:68:58:c6:27:ea:b3:2a:
         25:af:56:a7:4b:ca:46:1f:9b:eb:74:eb:57:a6:7b:81:06:53:
         ec:e1:27:c4:31:82:e7:96:a1:44:3d:7a:d4:cc:b1:b0:28:f5:
         42:da:8b:57:f3:48:ae:27:31:39:3e:b1:df:9c:10:9a:11:f9:
         6f:c2:06:43:1f:38:5e:42:6a:60:94:b4:65:36:91:c5:7c:ef:
         59:53:1c:c1:96:1b:75:26:05:aa:b7:1f:64:2c:06:bc:be:c2:
         70:5f:6d:2c:e0:29:3d:8e:fb:c9:8c:f7:0b:2e:a5:57:0d:9c:
         69:dd:aa:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE
QzU5NUJCMDAeFw0yNjAxMjUwNjM1MzhaFw0yNjAyMDEwNjM1MzhaMBgxFjAUBgNV
BAMMDTY5NzViOWJiLWRjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC59LbwBeptnJ0j/EXEZ1KWf+yzeJtF4lqfsVf3Mg3M9LFQLIaW7U4AoPSkJYVM
LjhGeeTUkAZnRDnSV8igNeC40cI3X+V9aGf38adOjtsapv994nMEbJgMdgaRjKmh
4B0LrmroBl1NZTDTRB/CcWsR8odzNPNrPc/T4GNO2ysAlHDnI2GcJooIgQqVEIIQ
Yb5A4uwjkwY3WtnJkKw/jR7Ce2M03MMV6JHpUJxqYlcKeOBRVhniSRIplhylUhil
KhZ7j7Xj4P1DP/rQXd6kJOTXYFWCQupMyU2uQEGLFgcwcqtY1WmPlxsT/pEr5OmC
W8ne4gtD51cajqWNxuTA1lnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEW7IfUkJ
WA6PObmi8cNle0/EWHYwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0
NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm
Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI/SYegWEVM8F8cCGL/KFCdbzMxHq+lFnIFw23QxvEvdIjZ/XPyK0jhG
UJJdmnkyPY/Rz5gwhfhGLPRQAsBdFcmtIx20PTq+7V/mt46oU/IJNG89oHAmJTgy
jZ0gbgABsiKQdadihSyXzioF4Hsmvke+Wa7vWo2wFFq0c1FISkBwSjLStX+amNlj
aFjGJ+qzKiWvVqdLykYfm+t061eme4EGU+zhJ8QxgueWoUQ9etTMsbAo9ULai1fz
SK4nMTk+sd+cEJoR+W/CBkMfOF5CamCUtGU2kcV871lTHMGWG3UmBaq3H2QsBry+
wnBfbSzgKT2O+8mM9wsupVcNnGndqts=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:40 2026 by rpki-client