This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File:                     v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier:          C2BZLzVBb5tiK4TyohvIX/P3NM+mS+2yvY2K58F2zc0=
Subject key identifier:   B4:A2:53:D9:B4:73:CD:E7:58:7B:94:59:B5:4B:37:D2:E3:00:8A:25
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer:       /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number:          CB
Signing time:             Sun 25 Jan 2026 05:16:00 +0000
Manifest this update:     Sun 25 Jan 2026 05:16:00 +0000
Manifest next update:     Sun 01 Feb 2026 05:16:00 +0000
Files and hashes:         1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: IvePfpX9WNCrJNcr5fjQHx278ImeAQtigaBCQSa5sWE=)
                          2: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=)
                          3: 339F0FFA9D9D11F0981B7A12C4F9AE02.roa (hash: YDUGJInCxGYNvztq3dbMwJMAM402KtbRyKKGjQJtcPg=)
                          4: 2A7B4C14C51511F0B6CAF70BC4F9AE02.roa (hash: q8d/T1oeGTAAj8I/vFpzngulLnjhXuMa8KZmfC7sm8w=)
                          5: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
        Validity
            Not Before: Jan 25 05:16:00 2026 GMT
            Not After : Feb  1 05:16:00 2026 GMT
        Subject: CN=6975a710-b6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:33:d5:6c:cf:f1:25:2e:5c:a6:4e:4d:ef:
                    4b:96:79:89:c9:54:42:4a:e9:20:da:d8:a1:40:68:
                    42:63:bf:03:a0:76:40:4b:2a:95:3e:36:ff:db:42:
                    83:35:4d:ed:e3:41:eb:ab:c7:85:c9:92:26:75:6d:
                    32:51:f7:00:ad:76:57:d4:8a:78:f5:66:23:8b:84:
                    bb:80:9f:ba:1a:7b:7c:0f:71:f7:80:69:1b:13:16:
                    a7:3f:2f:f8:21:a5:d5:7b:76:7e:05:82:64:40:28:
                    9d:eb:1e:f3:cd:07:33:e8:4c:7d:7a:50:4b:d5:e5:
                    14:05:0c:a2:6c:9b:e7:5c:97:77:bd:18:ad:78:de:
                    e8:37:ac:ac:0c:28:28:49:0b:58:dc:eb:b6:eb:07:
                    26:40:97:12:25:52:0b:08:96:6e:bc:f3:97:a6:85:
                    44:08:fa:8f:e4:c2:21:b9:e9:39:2f:88:4c:99:62:
                    cd:0d:01:5f:9f:7b:cb:0f:26:81:c9:49:02:08:72:
                    54:3f:3d:5e:71:62:63:2e:4a:d5:81:5a:47:74:73:
                    72:04:0e:75:16:87:76:b8:7b:ec:ea:b9:64:37:42:
                    9c:24:8b:b5:f9:28:01:77:ec:2f:20:26:b3:78:e4:
                    63:c6:4c:06:3b:5f:81:92:a0:81:43:6c:c6:ea:e8:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:53:D9:B4:73:CD:E7:58:7B:94:59:B5:4B:37:D2:E3:00:8A:25
            X509v3 Authority Key Identifier:
                keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:12:a4:7b:38:8d:13:a6:69:df:93:cd:30:8c:b2:7c:53:6c:
         ac:f5:09:eb:74:61:0e:98:ad:ed:45:29:12:9f:3b:dd:32:c0:
         ee:e2:42:e6:c2:44:03:fd:88:62:4f:91:da:bb:14:72:9d:26:
         0b:20:21:6f:af:14:92:ed:41:87:43:a4:36:4f:76:c9:a6:a7:
         e9:bd:f2:43:8d:f9:4e:86:1d:93:a9:a3:f3:cf:fc:7b:6c:29:
         59:ed:3c:4a:d8:d4:cf:a5:25:08:da:25:ab:71:11:97:c1:05:
         1d:02:e1:9c:56:a4:10:2e:25:e0:da:0d:00:f3:1c:e4:68:c7:
         a4:95:4b:5e:92:f5:99:50:ca:b1:7b:61:1e:f7:cd:f5:5e:51:
         b2:27:18:d8:52:5b:7b:88:c7:a8:3c:bb:0e:22:df:52:b5:40:
         7b:7e:2b:56:28:f0:8e:9e:9a:0d:1c:76:4f:5e:1f:01:0f:d2:
         76:e8:27:72:65:fc:1d:27:77:19:f4:b2:f4:e7:11:bc:73:c2:
         9b:e5:f8:9a:07:02:f7:c6:6e:ea:3c:f4:87:61:cf:01:d6:0f:
         63:05:c0:4f:55:ef:b5:17:b5:0f:05:01:27:ad:5e:09:25:2d:
         cc:3b:a2:70:66:f2:a6:3e:bf:c9:08:30:dc:dd:da:56:40:4a:
         fc:b6:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:56 2026 by rpki-client