This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          V+WzHXQTtX4+6EQNPDlW0QWsMOkmkeZ6vL3Bx3oqxRw=
Subject key identifier:   07:70:91:92:41:15:EC:65:62:CC:B2:3B:4B:73:84:F1:A7:59:34:DA
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          015B
Signing time:             Fri 23 Jan 2026 03:39:58 +0000
Manifest this update:     Fri 23 Jan 2026 03:39:57 +0000
Manifest next update:     Fri 30 Jan 2026 03:39:57 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: uS3UtJ+J/iF/pMxuA9Ynk96xHyxeqvXqT8JQ8FjOLQw=)
                          2: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: 73Ygy8fRe0dHQxkQy1hZlh4j1TI6ruDgIOxzmdlFu7c=)
                          3: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: 5h9rfOVaMmYvPj2z2Ai85lMHTizuoozbNVPH10IYIS0=)
                          4: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PPgHi4xJDW0BKQRIHTMdssQv8Q8vcJnoqHRhx2Hamts=)
                          5: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: cnwfSeIwvwV6lWFdzwgrorO9+SXGNy195qZfyMAiJts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Jan 23 03:39:57 2026 GMT
            Not After : Jan 30 03:39:57 2026 GMT
        Subject: CN=6972ed8d-c858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:a8:03:3d:75:31:3f:46:3e:a5:7f:9c:3c:
                    43:e0:b2:24:22:18:5e:a5:6a:01:f2:d2:a7:ec:30:
                    96:cd:ee:22:f9:a6:86:f4:48:4b:8c:91:07:b6:9f:
                    cf:5f:05:d7:6a:c4:71:a7:89:fa:3d:06:3c:ca:bf:
                    aa:ac:3c:01:af:f9:22:8b:12:91:e0:92:be:eb:c9:
                    2d:08:8c:c8:de:06:55:83:b3:f9:a2:ae:8c:49:14:
                    f8:e0:9a:6a:d9:1e:8d:65:fc:96:24:ad:18:79:cd:
                    5f:34:1f:dc:fc:51:21:c3:95:53:c0:4f:4e:02:87:
                    5b:88:99:3d:d4:19:f8:0a:ad:95:a0:ce:88:e9:03:
                    f0:06:c9:32:77:37:98:9e:ee:1d:10:c7:70:23:54:
                    d0:27:ce:b7:95:52:d8:c5:d4:e7:a8:14:38:8a:17:
                    55:dd:ab:c5:6b:58:69:3a:e8:ca:2f:98:af:9a:ce:
                    64:3c:6d:bb:1b:19:8e:ad:7c:8f:c1:0e:ff:80:75:
                    c9:1c:e2:46:4c:51:ce:4f:38:bb:c9:7d:cf:97:da:
                    8f:4e:7d:27:7c:d0:6e:d1:a3:a1:64:2b:ad:13:35:
                    da:62:ca:ff:65:52:be:94:fd:41:e0:5a:36:d3:70:
                    c3:6b:29:6a:64:b2:35:06:b0:c8:27:9d:a0:de:a0:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:91:92:41:15:EC:65:62:CC:B2:3B:4B:73:84:F1:A7:59:34:DA
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:86:57:e4:2e:28:31:ec:4f:ec:c2:4b:0a:63:3f:32:b4:
         10:92:16:82:17:8e:49:86:99:e7:9c:12:16:18:16:fc:d7:d0:
         a6:23:b6:9e:36:b5:dc:a7:96:cc:3c:dd:65:1a:fa:2b:33:4c:
         79:f2:b7:ed:ad:da:46:7e:6c:87:2c:7d:e2:cd:3b:61:01:88:
         fc:91:00:ef:93:a2:a8:e2:5b:2a:8a:31:7e:15:64:14:b6:77:
         4f:69:be:9b:74:a0:dd:5a:f5:f8:e5:69:08:26:99:cf:38:95:
         45:a8:46:cd:91:1c:fc:36:d3:a7:c3:d9:99:bf:c0:41:54:ea:
         86:a7:03:4d:ff:e1:c4:6e:5b:38:23:d6:9d:42:3a:84:24:91:
         0e:c7:05:9e:2d:c5:da:63:1f:a1:f9:e0:66:d0:cd:db:6b:70:
         81:01:24:26:86:8f:30:c5:69:af:7f:a3:f1:43:af:72:d4:03:
         38:7a:e6:09:87:00:92:8a:8b:c2:55:27:4f:cd:b3:d7:0b:0b:
         fb:ab:69:ad:43:83:2b:6f:3b:0d:41:19:ca:c7:39:e2:ff:03:
         b0:3f:ff:6b:70:86:0f:d2:6a:4a:0d:af:21:b1:be:f6:36:9b:
         02:e1:ee:b3:81:72:c8:63:f4:49:e3:37:ae:3c:40:24:9a:2d:
         21:72:c9:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M3MTExMTAvBgNVBAUTKEU0MjlENDI5RTY2Qjc5N0IzRDhBMUNCRTI0OTE1NzdB
REMzOEE0OEUwHhcNMjYwMTIzMDMzOTU3WhcNMjYwMTMwMDMzOTU3WjAYMRYwFAYD
VQQDDA02OTcyZWQ4ZC1jODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApC6oAz11MT9GPqV/nDxD4LIkIhhepWoB8tKn7DCWze4i+aaG9EhLjJEHtp/P
XwXXasRxp4n6PQY8yr+qrDwBr/kiixKR4JK+68ktCIzI3gZVg7P5oq6MSRT44Jpq
2R6NZfyWJK0Yec1fNB/c/FEhw5VTwE9OAodbiJk91Bn4Cq2VoM6I6QPwBskydzeY
nu4dEMdwI1TQJ863lVLYxdTnqBQ4ihdV3avFa1hpOujKL5ivms5kPG27GxmOrXyP
wQ7/gHXJHOJGTFHOTzi7yX3Pl9qPTn0nfNBu0aOhZCutEzXaYsr/ZVK+lP1B4Fo2
03DDaylqZLI1BrDIJ52g3qAcxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdwkZJB
FexlYsyyO0tzhPGnWTTaMB8GA1UdIwQYMBaAFOQp1Cnma3l7PYocviSRV3rcOKSO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzcxMS9DN0QxQjA1NDFF
RTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVYczlpaHktSkpGWGV0dzRw
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDblVLZVpyZVhzOWloeS1KSkZYZXR3NHBJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzcxMS9DN0QxQjA1NDFFRTMxMUVGOTBEMjEyMzRDNEY5QUUwMi81Q25VS2VacmVY
czlpaHktSkpGWGV0dzRwSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZ6IZX5C4oMexP7MJLCmM/MrQQkhaCF45JhpnnnBIWGBb819CmI7ae
NrXcp5bMPN1lGvorM0x58rftrdpGfmyHLH3izTthAYj8kQDvk6Ko4lsqijF+FWQU
tndPab6bdKDdWvX45WkIJpnPOJVFqEbNkRz8NtOnw9mZv8BBVOqGpwNN/+HEbls4
I9adQjqEJJEOxwWeLcXaYx+h+eBm0M3ba3CBASQmho8wxWmvf6PxQ69y1AM4euYJ
hwCSiovCVSdPzbPXCwv7q2mtQ4MrbzsNQRnKxzni/wOwP/9rcIYP0mpKDa8hsb72
NpsC4e6zgXLIY/RJ4zeuPEAkmi0hcslt
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:06 2026 by rpki-client