This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File:                     raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier:          snZduGnoK3UdXE6H8l6W047pX1GQ+1uOoT/IW0XEKFY=
Subject key identifier:   F9:67:C2:A4:5C:29:1C:F9:2D:B7:EF:F0:C2:D6:10:E0:84:E6:C8:65
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer:       /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number:          01C6
Signing time:             Sun 25 Jan 2026 02:15:06 +0000
Manifest this update:     Sun 25 Jan 2026 02:15:06 +0000
Manifest next update:     Sun 01 Feb 2026 02:15:06 +0000
Files and hashes:         1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: WlIPtmYHS/JGdZRulo3kRx48nZTXYDUDI96Cdo0P+/Q=)
                          2: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=)
                          3: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
                          rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
        Validity
            Not Before: Jan 25 02:15:06 2026 GMT
            Not After : Feb  1 02:15:06 2026 GMT
        Subject: CN=69757caa-27f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:53:e4:c3:84:f5:0d:d0:51:04:82:d5:96:
                    00:ae:f4:7e:94:b9:af:b5:f4:6d:60:6c:71:7d:be:
                    2e:78:3f:77:41:71:2c:fc:0c:ac:52:ae:3f:9c:8d:
                    ff:3d:52:e2:05:5a:0c:82:43:66:83:61:e8:97:ef:
                    20:5f:95:64:49:cf:5d:93:97:b0:8d:a1:e6:96:fd:
                    ec:0c:66:e0:eb:99:dc:37:0f:90:83:63:70:b2:3d:
                    06:86:51:22:e5:f8:c4:48:48:9a:09:aa:90:98:22:
                    2b:34:28:be:a8:24:bc:f5:54:f0:83:e2:e0:f0:4f:
                    4b:a5:21:85:1c:7f:fc:e3:0a:b0:76:8d:ef:21:3b:
                    a3:e8:05:40:e7:e3:ec:3c:7d:78:f0:73:93:ef:ae:
                    38:2e:f7:ba:5f:8c:75:13:61:d7:5f:78:a0:88:d8:
                    9b:28:83:11:32:fe:ff:da:41:5d:d1:cc:d7:6e:d0:
                    22:bb:de:81:b3:4b:ea:cb:ab:d3:db:2e:4c:1d:4e:
                    45:5f:c8:81:5a:b0:be:2b:08:f2:07:0f:ec:47:c0:
                    9e:a1:ff:33:93:eb:21:a5:97:9e:be:a5:aa:03:81:
                    f3:f1:7b:7d:f5:87:c8:e5:5e:a7:1d:d6:77:3d:a3:
                    07:90:4b:f4:9b:e3:eb:dd:79:46:07:8e:7d:a4:bd:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:C2:A4:5C:29:1C:F9:2D:B7:EF:F0:C2:D6:10:E0:84:E6:C8:65
            X509v3 Authority Key Identifier:
                keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:63:f4:36:ea:d1:c4:ff:9f:bc:c6:59:9a:34:89:58:1c:fe:
         71:84:73:8d:af:33:6e:b5:c0:7f:be:9e:49:d9:70:72:6a:80:
         f9:03:e7:16:71:12:19:b9:5e:9c:64:94:88:5a:b7:2a:53:f6:
         ab:fd:cc:f7:58:cc:25:c5:a7:d4:e2:fc:e9:66:0a:f3:7b:04:
         e0:37:e3:fa:a0:cd:2a:27:b0:5e:1d:c6:12:e9:04:21:52:d3:
         2f:ea:c4:13:7c:48:34:1c:d6:af:18:19:7f:e0:b2:d3:32:23:
         c3:e0:24:19:26:68:08:f8:62:da:9b:14:91:4c:c8:16:dc:92:
         47:3c:d5:54:3e:1f:c3:65:d3:f1:6f:92:cc:87:95:4d:b5:81:
         69:eb:26:c1:17:9d:d3:3a:5b:ce:df:3a:c8:1e:b9:58:26:8b:
         29:d4:09:34:ea:1d:7f:db:a7:0d:35:ac:fa:1b:bc:1e:66:ce:
         c6:a9:8e:ad:7d:e8:77:e0:6a:c4:bd:0d:51:f5:fb:4d:ad:66:
         74:23:b6:74:ba:bb:c5:40:20:b2:aa:1e:b3:83:89:24:ff:25:
         67:89:52:0b:3f:a7:19:68:3f:f4:90:4b:68:a0:dd:dc:fa:12:
         89:c0:81:27:17:a4:c0:cc:f5:0f:f0:f8:12:23:6c:c4:ad:3a:
         0d:03:53:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz
MjFGODgxMUUwHhcNMjYwMTI1MDIxNTA2WhcNMjYwMjAxMDIxNTA2WjAYMRYwFAYD
VQQDDA02OTc1N2NhYS0yN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyslT5MOE9Q3QUQSC1ZYArvR+lLmvtfRtYGxxfb4ueD93QXEs/AysUq4/nI3/
PVLiBVoMgkNmg2Hol+8gX5VkSc9dk5ewjaHmlv3sDGbg65ncNw+Qg2Nwsj0GhlEi
5fjESEiaCaqQmCIrNCi+qCS89VTwg+Lg8E9LpSGFHH/84wqwdo3vITuj6AVA5+Ps
PH148HOT7644Lve6X4x1E2HXX3igiNibKIMRMv7/2kFd0czXbtAiu96Bs0vqy6vT
2y5MHU5FX8iBWrC+KwjyBw/sR8Ceof8zk+shpZeevqWqA4Hz8Xt99YfI5V6nHdZ3
PaMHkEv0m+Pr3XlGB459pL0mywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlnwqRc
KRz5Lbfv8MLWEOCE5shlMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy
RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP
VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDqY/Q26tHE/5+8xlmaNIlYHP5xhHONrzNutcB/vp5J2XByaoD5A+cW
cRIZuV6cZJSIWrcqU/ar/cz3WMwlxafU4vzpZgrzewTgN+P6oM0qJ7BeHcYS6QQh
UtMv6sQTfEg0HNavGBl/4LLTMiPD4CQZJmgI+GLamxSRTMgW3JJHPNVUPh/DZdPx
b5LMh5VNtYFp6ybBF53TOlvO3zrIHrlYJosp1Ak06h1/26cNNaz6G7weZs7GqY6t
feh34GrEvQ1R9ftNrWZ0I7Z0urvFQCCyqh6zg4kk/yVniVILP6cZaD/0kEtooN3c
+hKJwIEnF6TAzPUP8PgSI2zErToNA1Pp
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:43 2026 by rpki-client