This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
File:                     c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json)
Hash identifier:          AdZpCEHsuLwbgyMvTujbU95qUwY14ggmLTahxtl+7TE=
Subject key identifier:   90:51:86:85:E3:48:93:61:5A:2B:2D:2E:6E:C1:A1:B0:DF:54:38:BB
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Certificate issuer:       /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
Manifest number:          052D
Signing time:             Sat 24 Jan 2026 22:46:43 +0000
Manifest this update:     Sat 24 Jan 2026 22:46:43 +0000
Manifest next update:     Sat 31 Jan 2026 22:46:43 +0000
Files and hashes:         1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: smxQv2qHAk0CBi0kLR7TmXtn32+SvJ1QUgRjeiFdbIs=)
                          2: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: 9tJ/pt8L/gxVmpVNxOtZ9pIC/aw1tdXK8msH8pvZQPI=)
                          3: 7F8113B6D4DC11F091B5A227C4F9AE02.roa (hash: 6u6mSc1zaco1Tc/dQzBw0E4k6CuwW/dWAAEV4YYWdn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
                          rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221
        Validity
            Not Before: Jan 24 22:46:43 2026 GMT
            Not After : Jan 31 22:46:43 2026 GMT
        Subject: CN=69754bd3-42ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:c6:ce:88:f0:c8:52:24:40:f5:fb:62:a2:
                    ee:7f:74:1e:0b:34:b6:40:1c:4b:3b:8e:f7:13:5b:
                    df:57:30:94:04:27:95:e8:58:c1:fb:3a:10:8f:31:
                    66:74:5c:ee:f0:d6:c6:73:23:9c:4b:43:16:43:07:
                    42:ee:d9:be:91:ea:29:9e:5d:f2:0a:96:c3:be:c8:
                    d1:d5:c5:25:00:c3:83:5f:fe:3b:31:37:0e:88:ce:
                    d8:46:13:0c:b3:12:05:cc:74:65:be:65:b3:ee:63:
                    d1:d8:30:cd:47:49:39:8a:f8:3b:24:ec:c9:99:c5:
                    6d:b4:af:2c:19:6a:59:19:1d:3a:9e:97:ec:94:87:
                    f3:3a:5e:bc:0a:76:ad:d5:f5:df:af:54:55:e8:a8:
                    45:60:9d:8e:31:86:6c:fb:54:fd:7f:e8:bc:3b:b2:
                    76:d6:19:1d:5d:1c:34:95:db:59:02:64:85:b5:f8:
                    2c:69:6a:dd:d2:64:c2:ed:61:b0:90:8e:7e:8b:0d:
                    e9:b3:78:18:05:14:f6:27:5b:4e:14:1f:b1:3e:a0:
                    cd:b2:c4:82:ca:0a:72:84:a8:8d:fd:3b:56:2c:cc:
                    07:4d:aa:ec:f5:6f:43:b9:d1:e8:45:d5:25:18:78:
                    04:df:81:b6:fa:79:bb:4e:c6:a1:a5:4f:bc:54:b7:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:51:86:85:E3:48:93:61:5A:2B:2D:2E:6E:C1:A1:B0:DF:54:38:BB
            X509v3 Authority Key Identifier:
                keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:85:89:47:41:b3:8f:32:ac:da:14:63:da:9c:96:15:52:6b:
         f7:39:8e:b2:83:9e:59:5a:1a:c9:bc:41:9d:32:14:72:43:43:
         de:ab:14:83:40:88:2b:93:8c:0b:be:e0:ba:e0:5b:1a:8a:4a:
         b4:f8:e8:3f:97:19:e6:27:97:23:aa:9c:ff:8e:95:c0:0f:41:
         4b:69:f5:9d:c1:38:bf:56:7c:ea:4c:8a:32:83:66:a6:db:4a:
         6b:db:9a:6e:88:cd:ac:24:3a:15:11:1f:f0:5c:a0:19:21:c1:
         3d:1e:80:ab:95:cd:c7:d8:6c:ef:6c:3d:10:03:f9:20:44:a4:
         7c:92:6f:65:3e:71:b5:df:81:37:41:a1:42:01:e2:85:7d:a2:
         c3:fe:68:d3:51:c8:ad:38:68:e3:92:90:61:4f:a5:b1:b3:f8:
         ce:8f:d7:0f:ae:be:23:e2:c8:59:53:c5:bb:1f:26:0a:75:ac:
         08:b4:b2:5b:ad:fa:f4:65:d4:fd:36:ac:95:64:9b:1a:11:54:
         0d:d7:70:ad:a8:44:da:69:e8:2c:dc:26:a0:af:24:ab:e5:78:
         9e:47:2e:14:64:da:d6:f1:21:49:17:4a:77:5f:48:14:6b:ed:
         cb:f5:5d:6a:ed:82:1d:ca:fd:20:cf:bb:79:05:61:9e:ed:ec:
         88:37:0f:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB
MjE0MzcyMjEwHhcNMjYwMTI0MjI0NjQzWhcNMjYwMTMxMjI0NjQzWjAYMRYwFAYD
VQQDDA02OTc1NGJkMy00MmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFfGzojwyFIkQPX7YqLuf3QeCzS2QBxLO473E1vfVzCUBCeV6FjB+zoQjzFm
dFzu8NbGcyOcS0MWQwdC7tm+keopnl3yCpbDvsjR1cUlAMODX/47MTcOiM7YRhMM
sxIFzHRlvmWz7mPR2DDNR0k5ivg7JOzJmcVttK8sGWpZGR06npfslIfzOl68Cnat
1fXfr1RV6KhFYJ2OMYZs+1T9f+i8O7J21hkdXRw0ldtZAmSFtfgsaWrd0mTC7WGw
kI5+iw3ps3gYBRT2J1tOFB+xPqDNssSCygpyhKiN/TtWLMwHTars9W9DudHoRdUl
GHgE34G2+nm7TsahpU+8VLczKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBRhoXj
SJNhWistLm7BobDfVDi7MB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw
QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf
MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmhYlHQbOPMqzaFGPanJYVUmv3OY6yg55ZWhrJvEGdMhRyQ0PeqxSD
QIgrk4wLvuC64Fsaikq0+Og/lxnmJ5cjqpz/jpXAD0FLafWdwTi/VnzqTIoyg2am
20pr25puiM2sJDoVER/wXKAZIcE9HoCrlc3H2GzvbD0QA/kgRKR8km9lPnG134E3
QaFCAeKFfaLD/mjTUcitOGjjkpBhT6Wxs/jOj9cPrr4j4shZU8W7HyYKdawItLJb
rfr0ZdT9NqyVZJsaEVQN13CtqETaaegs3CagrySr5XieRy4UZNrW8SFJF0p3X0gU
a+3L9V1q7YIdyv0gz7t5BWGe7eyINw9F
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:16 2026 by rpki-client