This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File:                     5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier:          YNkS5u+VUVAI8Z42rkd1iOQKSAe4Ps0o9HdL3b2j9PA=
Subject key identifier:   09:8F:0A:A0:24:F8:23:EE:66:D4:39:CE:40:87:3A:79:26:A7:FD:D9
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer:       /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial:       077D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number:          226B
Signing time:             Sat 24 Jan 2026 15:46:07 +0000
Manifest this update:     Sat 24 Jan 2026 15:46:07 +0000
Manifest next update:     Sat 31 Jan 2026 15:46:07 +0000
Files and hashes:         1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: V4EO4Kv2Bvb0uL9HHzOCHKHONU6VMcoTCk3T1k1WmcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
        Validity
            Not Before: Jan 24 15:46:07 2026 GMT
            Not After : Jan 31 15:46:07 2026 GMT
        Subject: CN=6974e93f-836a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:4f:70:66:d8:d3:3a:b1:9d:86:7d:37:ce:
                    f7:ad:64:5d:57:fe:41:8d:5b:f4:9a:e5:67:c4:c8:
                    50:09:6b:84:1b:a3:93:5d:6d:e4:31:a7:8f:57:a2:
                    75:4e:e7:23:f0:14:98:36:f4:82:97:a5:b8:82:8b:
                    52:1b:66:fe:e2:3e:95:49:b7:8b:a5:4b:c2:34:05:
                    19:4d:45:40:2c:1c:7e:b9:09:c5:9d:e3:4c:b4:47:
                    86:eb:d5:28:d7:d5:aa:c8:22:3a:0b:ab:4d:19:09:
                    6e:f3:9f:d9:fc:f1:68:b2:a6:af:ee:53:bb:18:5e:
                    a8:55:6b:a8:9e:04:3d:b6:f5:e0:15:00:9a:c8:fc:
                    50:ea:43:71:18:13:90:6e:1d:ec:e5:3c:7b:0e:db:
                    cc:4f:6c:a1:48:de:ba:67:09:58:fc:bf:87:3c:fa:
                    5c:d6:1b:3c:f2:b6:d5:15:ed:af:74:19:16:11:85:
                    ed:f1:81:4e:24:56:69:8d:b6:cf:62:9c:27:ab:7b:
                    11:5c:f9:5e:0b:6d:70:e8:37:b4:78:cd:82:fe:a9:
                    9f:cb:51:19:16:d9:73:d8:89:cf:5c:a6:33:67:e3:
                    62:12:b8:20:9e:5d:49:22:57:45:23:28:1b:97:7b:
                    c3:fa:cc:b0:e4:11:b0:1f:e1:24:49:d4:7b:0e:cf:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8F:0A:A0:24:F8:23:EE:66:D4:39:CE:40:87:3A:79:26:A7:FD:D9
            X509v3 Authority Key Identifier:
                keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:4f:28:94:99:b4:a1:b1:23:32:7d:76:62:ae:a8:51:3b:af:
         d3:b9:92:15:d5:0f:eb:7e:c7:89:4b:c0:e5:1d:2e:d2:3f:c6:
         9f:52:56:99:2b:b2:79:05:97:80:1a:79:75:78:c4:1e:61:19:
         cb:c5:7b:88:79:86:f5:4c:ea:29:a7:90:83:5c:35:92:fb:88:
         a9:85:f4:73:15:36:ec:62:7d:5a:18:80:db:3e:7e:2b:e9:7a:
         4e:50:5e:f5:e0:c4:5e:c5:3b:3c:00:d1:1b:a7:24:a8:ad:bc:
         cd:3d:e0:f0:7b:92:cf:1c:83:26:35:62:53:65:72:43:76:80:
         d9:f1:65:d1:1c:e6:2a:ed:6e:5a:08:98:ac:13:50:88:cc:08:
         be:28:8a:b7:32:f6:26:35:59:b4:6f:cb:2f:79:4a:f3:f9:39:
         31:de:dd:2f:3e:68:59:46:62:46:81:9c:62:48:97:54:e2:84:
         7e:5c:00:84:e5:1d:3b:67:d6:7d:74:8e:01:df:2c:fa:d0:b5:
         bc:ed:09:75:00:c2:a8:52:33:fc:17:77:68:4a:dc:5e:ad:f7:
         ba:83:16:92:51:c2:68:6c:63:bd:ee:82:75:91:0e:68:e9:66:
         54:1a:c6:d1:e3:12:b3:2e:98:0e:e3:9b:de:24:74:c9:05:5a:
         7a:99:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:42 2026 by rpki-client