This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File:                     -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier:          Wu6VfNBwoAEkPJKvVLqBlS2x6Rq285fEEg+P4h++fAM=
Subject key identifier:   D4:2C:89:DB:CD:20:76:BE:11:0F:53:44:1B:18:96:8C:64:F2:B7:D9
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number:          0253
Signing time:             Sun 25 Jan 2026 00:58:49 +0000
Manifest this update:     Sun 25 Jan 2026 00:58:48 +0000
Manifest next update:     Sun 01 Feb 2026 00:58:48 +0000
Files and hashes:         1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: n6B8BdolBVNMV53AgNOvvAMNvqjpdmYdu/7dLT19OBM=)
                          2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: uMgAAlcYJQ+sdnOnE1dyzqDnSreVvRuteObbE8brNz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Jan 25 00:58:48 2026 GMT
            Not After : Feb  1 00:58:48 2026 GMT
        Subject: CN=69756ac9-6f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:a3:15:db:cf:93:cf:37:85:3c:07:d7:95:
                    05:07:96:68:83:88:db:db:55:64:62:ed:1b:28:8f:
                    2f:01:82:fd:cf:93:66:9f:d6:63:18:ba:a9:fb:cf:
                    d5:e3:31:cf:bc:29:3e:c1:59:99:fb:01:5a:ab:c3:
                    bd:34:8e:81:64:a9:0e:45:63:95:11:68:1a:05:49:
                    3c:5f:ff:93:93:13:f8:28:17:db:25:a4:97:ad:11:
                    91:87:02:e5:42:6f:69:ff:c9:3b:2a:e6:b9:ff:8a:
                    96:52:2f:4a:77:cf:2a:43:a0:2f:22:c3:21:35:e2:
                    53:45:b8:ba:41:b9:a7:b4:64:4b:3a:90:85:28:83:
                    37:56:31:d8:ce:82:aa:35:3b:26:f1:1a:db:fa:59:
                    f6:8d:59:d8:1b:eb:6c:95:63:36:55:f5:89:b4:a0:
                    e0:c9:df:51:2a:29:55:db:f3:96:18:e3:1c:da:4e:
                    56:28:c2:57:21:03:f6:86:53:d0:55:f9:b3:6a:28:
                    24:83:5f:20:64:9c:98:63:91:06:d4:4c:76:24:4c:
                    37:a8:31:64:0f:01:58:ea:c3:9d:4f:eb:1b:65:72:
                    9c:29:4d:7e:66:ed:6c:80:b5:d4:82:48:c7:8e:ea:
                    2b:fb:b5:c0:a6:3d:53:92:bc:64:d5:0e:ce:11:55:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:89:DB:CD:20:76:BE:11:0F:53:44:1B:18:96:8C:64:F2:B7:D9
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:bd:43:c6:2a:e0:ba:7a:cc:a6:76:fd:f0:45:d9:6e:bc:
         51:2d:ab:1e:8b:85:23:05:4a:cf:ce:69:93:f8:ea:9a:6a:d1:
         39:17:23:21:77:2c:cd:1b:84:08:b6:5b:78:d0:fb:15:b6:0d:
         2b:a5:f4:86:12:09:ed:94:09:63:8d:bc:97:42:5c:3f:f2:ce:
         63:1c:1f:85:24:77:1f:fe:c8:8c:3c:ed:ac:61:c8:d9:b1:79:
         9f:30:06:5b:fc:f1:66:97:5f:9a:05:f7:08:85:89:b6:f2:72:
         67:05:0d:3e:f3:53:f5:81:e9:77:55:8d:ee:98:44:45:2a:65:
         d6:63:bf:86:e3:97:1b:37:b0:2c:81:49:67:b8:3a:a2:92:e7:
         d1:37:87:74:41:50:59:3f:dd:9f:b9:c3:1d:b1:f0:9f:d3:2f:
         a9:8a:ae:79:a2:ac:0c:44:8b:3c:ae:f1:46:b3:8d:d5:ba:0e:
         8f:57:ef:e0:2b:87:f6:1b:97:b6:a6:07:50:dc:23:26:5c:ea:
         ab:d4:d3:c6:a9:82:b0:6c:19:b6:e1:6c:c9:7b:a5:f4:cd:46:
         9d:b4:11:5a:3d:80:78:1b:61:8e:81:32:54:dc:79:54:df:62:
         50:9c:e2:47:28:06:7d:45:78:74:7a:58:0a:63:57:2a:7c:1f:
         4e:8a:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:15 2026 by rpki-client