This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File:                     5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier:          zACnnaXnRkwNFlj44quGtHHjmP2XdfzPd7mgILHfvMc=
Subject key identifier:   C6:21:5F:3B:18:48:D4:A5:3B:D6:A2:2C:34:F1:93:64:0D:93:F1:7C
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer:       /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial:       0377
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number:          0373
Signing time:             Sun 25 Jan 2026 00:02:51 +0000
Manifest this update:     Sun 25 Jan 2026 00:02:50 +0000
Manifest next update:     Sun 01 Feb 2026 00:02:50 +0000
Files and hashes:         1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: adW8RbarlwQAMt4shDraL2esEXMGGi6Cpabk2lv1yyM=)
                          2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
        Validity
            Not Before: Jan 25 00:02:50 2026 GMT
            Not After : Feb  1 00:02:50 2026 GMT
        Subject: CN=69755daa-6768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:13:6b:b0:2c:57:b0:39:7e:69:e1:6b:81:
                    e8:dc:96:6c:fb:cd:73:f5:bc:8e:d0:68:be:65:3a:
                    d6:1a:0e:c8:50:50:4a:d5:1d:82:01:84:ae:be:30:
                    84:fa:02:53:55:9e:e9:95:59:83:4c:95:08:16:1f:
                    53:e0:f3:d8:fd:07:5a:4e:8d:87:42:fd:57:2c:fc:
                    47:02:97:6d:44:d2:d4:7d:d4:76:fd:58:96:3f:46:
                    12:62:24:64:1e:30:ae:22:b0:c1:19:ed:d9:8b:a2:
                    9b:5f:b9:2c:c0:4b:86:a5:58:8d:46:57:69:2e:6a:
                    8e:03:79:14:1d:cc:b4:65:c6:79:c2:1b:bf:29:4e:
                    f0:0d:27:35:3c:b8:a8:63:ff:9a:36:57:8f:70:ca:
                    2d:35:0f:c1:d1:50:ba:ea:ce:97:bd:41:4a:b3:f8:
                    10:26:3f:9c:c6:8d:67:09:15:fa:fc:f7:ad:be:bf:
                    8b:33:79:66:96:b3:3e:13:6e:88:0b:a7:89:dc:8a:
                    b0:38:ba:f5:f4:d0:90:6a:49:79:24:5d:2d:ca:2b:
                    2c:c9:fa:e5:13:c7:25:96:1b:02:33:8a:ec:be:f5:
                    0b:e7:56:4a:35:ec:b8:64:8d:05:42:3e:b8:f8:2b:
                    0f:bf:ec:cd:3e:2c:22:c3:c7:b3:b2:51:95:92:55:
                    a5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:5F:3B:18:48:D4:A5:3B:D6:A2:2C:34:F1:93:64:0D:93:F1:7C
            X509v3 Authority Key Identifier:
                keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:da:46:16:2c:9e:2f:f9:85:4d:cb:a1:e4:25:12:64:76:
         7e:7a:3f:71:cb:a7:45:26:be:ca:2b:38:8b:13:1b:e9:ed:a2:
         02:25:fa:a3:b7:34:d2:a1:c1:87:40:b8:2f:88:f1:85:d6:8b:
         b6:61:10:a2:d7:f9:3a:ec:5f:65:e4:15:53:55:c8:2e:1d:01:
         d1:d3:aa:12:8b:77:59:2f:a6:00:b1:a4:d9:0f:cc:e1:6c:3a:
         81:a0:93:86:41:2e:ca:8a:ea:ac:12:bd:24:54:24:44:53:97:
         f5:6e:71:02:c6:bb:e1:76:bd:10:3a:43:20:29:27:c4:93:cf:
         3b:ad:45:bc:ec:6d:de:8e:1b:58:39:4d:d4:95:40:b3:4c:c3:
         03:4a:87:cf:a4:cc:ad:93:a6:b0:59:2f:92:0b:a8:fe:8d:d6:
         69:bb:31:4b:ad:17:45:a6:82:b1:12:94:6f:36:a4:75:fb:8d:
         de:90:18:a8:3b:7c:eb:f9:23:8d:e4:80:dd:70:53:f8:b7:e6:
         cd:2a:40:11:b4:4f:1c:34:c1:8e:51:7e:6a:f3:2f:e1:22:67:
         83:c4:31:74:66:c9:01:f0:51:c1:22:ad:0a:bf:fa:8f:1d:f5:
         44:17:2c:83:30:17:ed:d4:5f:16:6a:7a:ce:f1:20:10:96:2a:
         1f:f2:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:36 2026 by rpki-client