This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
File:                     -W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft (raw, json)
Hash identifier:          TyeqIYbT6eUdxBkD5ZkQv3dIHjMxKG39UJm1hdirtm4=
Subject key identifier:   5D:77:39:C1:1D:4C:18:B7:7C:CF:E5:22:7F:D7:5B:57:1B:F2:FF:51
Authority key identifier: F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4
Certificate issuer:       /CN=A91E5490/serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
Manifest number:          0572
Signing time:             Sat 24 Jan 2026 22:34:43 +0000
Manifest this update:     Sat 24 Jan 2026 22:34:43 +0000
Manifest next update:     Sat 31 Jan 2026 22:34:43 +0000
Files and hashes:         1: -W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl (hash: aWWT4NjzS37QNKTgh1YKQhDKKkhVCXNCALTUyiv0g/Q=)
                          2: 8608449A356511EC9715F015C4F9AE02.roa (hash: 4gKis+++tXEeHG38EwpejzSM+kE6A6gIMsrjZpkNJeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5490, serialNumber=F96FAE288A6430ADCCF95E0EA89F085BB6E829D4
        Validity
            Not Before: Jan 24 22:34:43 2026 GMT
            Not After : Jan 31 22:34:43 2026 GMT
        Subject: CN=69754903-e6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:cb:b9:34:f8:64:cf:c2:fd:d8:b1:72:27:
                    7b:fb:b3:3d:9a:ee:eb:9a:87:d5:35:c3:3d:27:d7:
                    57:ab:43:33:21:4c:9c:e3:fb:eb:ff:a5:6e:bc:d4:
                    06:8a:a2:81:93:05:ab:e4:0d:59:1a:74:d9:ae:e6:
                    ea:ec:65:85:61:65:f4:39:4c:1b:a7:64:40:0c:a5:
                    c5:c8:2b:a7:f8:07:08:c3:98:f8:c2:cc:2f:48:36:
                    58:6b:ed:52:14:27:93:10:35:c8:aa:60:71:fd:02:
                    9e:3b:97:47:66:63:8d:ee:f9:dd:30:a9:0c:a4:22:
                    fd:fc:a3:fd:68:e8:2f:e8:05:16:ce:f4:9a:df:6a:
                    cf:e8:cc:92:47:6e:47:53:4c:9c:87:3f:59:5a:cd:
                    61:60:47:e6:7d:a6:e3:75:6a:73:55:c0:01:1e:55:
                    76:7d:de:10:11:50:62:c2:a6:b5:7d:5e:46:f5:f1:
                    36:4b:5c:12:e5:ed:8d:d4:2d:f1:37:b3:0e:ac:a1:
                    4d:84:f9:41:2f:31:d6:46:9a:f8:b2:bf:ff:66:9e:
                    04:f5:c5:5a:c4:c4:4a:3a:52:b8:bb:b3:a5:8e:3f:
                    6b:aa:2c:c8:cb:60:bb:d1:56:aa:ad:b0:1d:23:ad:
                    4e:f3:24:62:e0:59:4f:7e:34:19:bc:46:f9:10:76:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:39:C1:1D:4C:18:B7:7C:CF:E5:22:7F:D7:5B:57:1B:F2:FF:51
            X509v3 Authority Key Identifier:
                keyid:F9:6F:AE:28:8A:64:30:AD:CC:F9:5E:0E:A8:9F:08:5B:B6:E8:29:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5490/321F591E146211EC9868C246C4F9AE02/-W-uKIpkMK3M-V4OqJ8IW7boKdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:6d:32:ec:4a:3d:de:d1:e2:80:03:1b:18:3e:db:53:bb:
         90:41:94:ea:c6:b9:03:41:12:66:27:a1:18:8c:2e:5f:fc:28:
         2d:1e:cd:9c:bf:31:d9:d9:4b:8a:ad:22:6a:83:d5:f8:0d:72:
         d3:67:00:c2:bc:d3:3f:da:3b:88:d8:10:12:6e:8b:9f:64:22:
         72:36:43:c8:9d:76:da:3a:5f:9a:70:43:ee:6a:17:20:ce:09:
         55:b8:a7:57:0a:81:76:ba:93:9c:78:17:d4:64:60:96:bc:3f:
         f3:a4:73:c5:1c:e5:1e:6f:d2:19:9f:c4:29:cf:53:b7:dd:82:
         05:69:d7:90:77:60:08:34:5e:13:5b:2d:f8:ea:8a:61:eb:82:
         c6:cf:28:4c:6c:5c:30:36:5b:f6:c1:bc:35:c6:fa:93:5f:17:
         eb:fb:16:c6:56:a4:f4:b9:25:9e:78:5a:fb:11:80:82:f4:99:
         44:bc:3d:66:b0:04:3e:65:0f:b4:5c:e9:43:43:80:31:8d:cd:
         b2:cb:0e:fd:b6:cc:9f:0a:e0:b1:ba:5f:0b:0e:26:d5:ad:27:
         5f:6b:5b:c2:7f:f4:9f:8d:ef:a6:7d:67:b7:d9:ca:bf:70:25:
         d0:90:0e:69:9f:b0:8a:38:b8:98:9d:d6:c7:c9:88:05:3c:2d:
         3c:7a:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:37 2026 by rpki-client