This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File:                     5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier:          zrNJ1bULKmcd3NCBRnZjanND9FNIbYWoWdtDe3/mGd4=
Subject key identifier:   0E:33:A1:0B:B9:22:8F:3D:E0:70:8E:B2:D1:20:50:AB:71:19:26:0C
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer:       /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number:          EF
Signing time:             Sun 25 Jan 2026 04:37:20 +0000
Manifest this update:     Sun 25 Jan 2026 04:37:20 +0000
Manifest next update:     Sun 01 Feb 2026 04:37:20 +0000
Files and hashes:         1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: 7REGx8pBO1hJv3ygI6T4WWTdeBzlqg+b8cc6opE34ys=)
                          2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: 3MkuT1/23NVs421qauJYsqrzBUKeSt8MV3gjlXwFUu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
                          rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
        Validity
            Not Before: Jan 25 04:37:20 2026 GMT
            Not After : Feb  1 04:37:20 2026 GMT
        Subject: CN=69759e00-5076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e1:48:e8:1d:83:3b:89:77:1d:a7:d3:3a:ba:
                    2d:15:70:eb:7d:fd:a7:e1:c7:af:23:42:c7:b9:81:
                    94:08:2c:e4:07:a7:db:5f:3e:a1:fa:9a:0a:ed:de:
                    7e:f0:67:5f:81:4d:5e:86:f1:a4:01:4c:d8:6f:a6:
                    70:ca:0b:ad:52:97:e7:07:64:de:a0:f6:33:04:25:
                    7e:bf:c6:e7:15:7d:b9:21:f4:59:b7:69:1c:ef:99:
                    de:39:52:4e:5c:66:51:47:c7:c4:c0:52:cc:6b:bc:
                    71:c1:ce:33:eb:31:ec:46:f2:e0:19:d7:e2:a9:fc:
                    1b:df:64:74:36:d7:3f:3e:2d:f5:e5:47:00:d8:d8:
                    a9:bd:77:89:93:36:f4:18:fb:db:3e:f5:ad:25:17:
                    d4:ba:e8:0a:f0:73:0b:1b:68:b0:8a:77:14:83:34:
                    7d:8e:79:d3:cd:a1:ae:dd:cb:0b:9a:e2:a1:57:b5:
                    4b:d9:f7:a3:92:02:f0:3f:87:ca:c5:aa:48:df:1d:
                    dc:63:52:a0:c7:8e:6c:40:43:74:59:3b:76:65:fe:
                    49:60:1f:54:d4:79:df:19:ae:18:c6:80:43:b3:0b:
                    18:c3:10:3a:1e:d8:bd:98:c2:06:e0:05:f9:2d:5c:
                    5a:84:e8:55:88:c7:56:8b:21:28:11:82:f8:ba:b2:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:A1:0B:B9:22:8F:3D:E0:70:8E:B2:D1:20:50:AB:71:19:26:0C
            X509v3 Authority Key Identifier:
                keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:da:e0:dc:aa:d3:9b:11:0d:36:37:e8:b2:83:2a:bf:be:2b:
         80:b7:b4:de:da:6d:38:10:fb:97:48:02:c1:69:7c:8d:0e:b0:
         fb:59:57:a3:6b:c0:b8:3d:39:0c:8c:ad:fc:f5:72:d7:3f:0e:
         b9:d2:2f:99:96:1a:03:23:05:a7:98:49:5a:b7:da:f1:f3:6e:
         e4:56:01:07:14:7c:12:d5:31:55:91:4a:31:dc:64:10:12:0d:
         a9:7f:d8:4e:81:fa:5a:71:b0:1a:cd:49:fb:bd:aa:fd:50:1c:
         04:33:fc:81:78:0c:78:e5:d5:1d:35:32:e9:1a:96:8d:66:db:
         27:de:9b:1a:32:99:1e:c2:3b:2e:bd:0b:ab:a3:e5:e5:df:54:
         00:ba:0a:ba:78:74:10:90:f0:60:64:f6:86:44:ee:bd:20:25:
         2b:a1:f8:90:14:c2:7b:f8:ce:e2:19:33:2d:35:58:f0:15:3b:
         91:af:95:5b:19:9d:4b:df:03:ab:22:65:27:72:2d:0e:42:4f:
         41:0b:65:04:b8:c6:32:70:72:9f:90:97:02:c9:fa:2d:6e:b1:
         97:7c:aa:28:7c:30:37:03:1a:9b:83:ab:cc:61:ec:0d:8d:15:
         82:b8:a9:c1:58:ba:21:47:af:1c:95:19:b2:de:0b:01:41:f4:
         98:4d:74:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:52 2026 by rpki-client