This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File:                     S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier:          n8PwdffZEVzcyCxsNeLoWT8cFUfd/bhBu0hJJtBArow=
Subject key identifier:   F2:18:A7:4B:B9:4D:A4:3F:65:9E:C2:E9:44:76:10:B3:34:CA:AC:E2
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer:       /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial:       067B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number:          066A
Signing time:             Sat 24 Jan 2026 21:53:04 +0000
Manifest this update:     Sat 24 Jan 2026 21:53:03 +0000
Manifest next update:     Sat 31 Jan 2026 21:53:03 +0000
Files and hashes:         1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: MOr7DTX5HzOcbl6qH1A3yjcxLeJnQ92JsorHhXbu7vo=)
                          2: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: P1Y3UDzTMsjrjoQQMcdAwFGNNs3NtMnguGvvy/Z5Kwk=)
                          3: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: 0TiadiWRlgCP0angfZDHQ4cjVb2nVgJxQkU2aDBqTz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
        Validity
            Not Before: Jan 24 21:53:03 2026 GMT
            Not After : Jan 31 21:53:03 2026 GMT
        Subject: CN=69753f40-29f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:40:78:88:95:6a:cc:13:6f:2e:7e:ff:61:
                    bd:ee:61:0f:6c:b0:77:2d:45:6e:1c:4a:76:e6:9a:
                    0e:53:08:84:50:72:6c:bb:7a:8b:7d:0e:fe:27:d9:
                    7b:f4:16:21:ca:a6:34:3f:ea:79:83:a3:68:36:f8:
                    e6:02:5a:fe:2c:9f:68:51:d0:45:d7:d3:e8:a9:7f:
                    0f:30:7a:f4:63:45:d2:af:b8:92:e4:cc:21:d9:a9:
                    93:50:45:4f:ed:5c:ee:50:de:f0:24:65:27:7e:a1:
                    53:e3:e6:fe:a7:fa:e3:8e:4f:a4:41:9c:86:70:c5:
                    a1:b9:95:5c:e5:d9:ee:ab:6b:0a:bb:4b:07:54:d8:
                    cc:a4:45:05:9b:24:a2:21:b5:df:86:03:c6:93:df:
                    7e:42:8d:6b:fd:40:f0:15:9e:c2:60:06:67:06:85:
                    be:66:31:9b:12:d8:b2:4f:53:c0:07:bf:da:4d:7d:
                    b5:13:d4:e6:65:6b:ed:89:68:61:8b:81:ee:61:15:
                    c1:ad:6f:1b:4b:71:54:11:82:51:04:85:43:a5:62:
                    0a:7a:94:c1:65:22:82:d9:3b:c4:c0:9e:83:45:55:
                    03:a0:fe:d2:2a:2a:94:55:2f:dd:b6:1b:a5:53:bb:
                    6f:3d:83:35:fa:fb:cc:6b:0c:a1:ac:87:f7:d9:1c:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:18:A7:4B:B9:4D:A4:3F:65:9E:C2:E9:44:76:10:B3:34:CA:AC:E2
            X509v3 Authority Key Identifier:
                keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:96:ce:23:e8:69:37:55:4e:f2:92:e3:ec:1b:55:e3:b3:06:
         f7:8f:b5:19:f9:ca:80:e6:01:ba:0d:28:af:17:d5:68:e1:04:
         14:8c:0d:d1:94:ac:00:cf:15:6b:37:0f:45:ae:b4:84:8e:81:
         13:7b:96:d6:42:be:c8:01:13:a9:56:98:23:ae:3c:f6:33:66:
         69:39:6f:6c:22:49:85:bf:e9:9d:4e:bd:92:47:12:c1:44:e0:
         3b:16:77:2e:fb:92:25:0b:71:5e:ed:ac:c9:76:da:73:27:9e:
         a8:ab:25:31:25:54:63:43:cd:75:c5:22:7d:42:f4:be:1d:cb:
         a1:76:8b:0c:fb:ee:84:3c:ac:9f:67:e9:14:83:46:6f:c4:30:
         41:92:8b:f0:1b:30:be:33:3b:af:67:30:98:be:61:2d:5c:a1:
         59:c7:a7:30:ad:d5:63:02:0d:6a:d6:b8:56:8f:59:fe:74:47:
         91:05:9a:b0:44:a9:c6:e3:34:1a:22:b9:de:69:9c:b2:68:73:
         3a:bc:5e:ec:cc:00:b6:e8:ad:c2:26:c3:d8:4e:b8:0d:a4:ac:
         39:64:e1:71:d1:0d:61:66:3e:5a:b4:23:00:aa:78:a1:ce:be:
         3d:f0:b4:d3:95:05:94:b0:be:46:0b:01:9c:b5:63:b4:5e:f0:
         e8:2d:f0:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF
QzdCN0RERjIwHhcNMjYwMTI0MjE1MzAzWhcNMjYwMTMxMjE1MzAzWjAYMRYwFAYD
VQQDDA02OTc1M2Y0MC0yOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfJAeIiVaswTby5+/2G97mEPbLB3LUVuHEp25poOUwiEUHJsu3qLfQ7+J9l7
9BYhyqY0P+p5g6NoNvjmAlr+LJ9oUdBF19PoqX8PMHr0Y0XSr7iS5Mwh2amTUEVP
7VzuUN7wJGUnfqFT4+b+p/rjjk+kQZyGcMWhuZVc5dnuq2sKu0sHVNjMpEUFmySi
IbXfhgPGk99+Qo1r/UDwFZ7CYAZnBoW+ZjGbEtiyT1PAB7/aTX21E9TmZWvtiWhh
i4HuYRXBrW8bS3FUEYJRBIVDpWIKepTBZSKC2TvEwJ6DRVUDoP7SKiqUVS/dthul
U7tvPYM1+vvMawyhrIf32RwLnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIYp0u5
TaQ/ZZ7C6UR2ELM0yqziMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1
QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn
SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDfls4j6Gk3VU7ykuPsG1Xjswb3j7UZ+cqA5gG6DSivF9Vo4QQUjA3R
lKwAzxVrNw9FrrSEjoETe5bWQr7IAROpVpgjrjz2M2ZpOW9sIkmFv+mdTr2SRxLB
ROA7Fncu+5IlC3Fe7azJdtpzJ56oqyUxJVRjQ811xSJ9QvS+HcuhdosM++6EPKyf
Z+kUg0ZvxDBBkovwGzC+MzuvZzCYvmEtXKFZx6cwrdVjAg1q1rhWj1n+dEeRBZqw
RKnG4zQaIrneaZyyaHM6vF7szAC26K3CJsPYTrgNpKw5ZOFx0Q1hZj5atCMAqnih
zr498LTTlQWUsL5GCwGctWO0XvDoLfBI
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:06 2026 by rpki-client