This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          CcLm7qNoVMfEmFzd2dgbkEtYMRwqBI0jG9cbw8In1eA=
Subject key identifier:   1C:DE:01:98:65:C9:FB:76:CA:E5:CC:26:6B:D9:5E:83:FF:10:B6:FA
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       6967711EDFB502E0B29FF562B5F9EF5CCA64EB1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          03AB
Signing time:             Sun 25 Jan 2026 05:48:56 +0000
Manifest this update:     Sun 25 Jan 2026 05:43:56 +0000
Manifest next update:     Mon 26 Jan 2026 07:43:56 +0000
Files and hashes:         1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
                          3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
                          4: 4B1987D5160068092602529871C93EA320045A75.crl (hash: haQ8KbE7wBE/cLYu53zwptEn/K/qL65Ox70L9/xnfBw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:67:71:1e:df:b5:02:e0:b2:9f:f5:62:b5:f9:ef:5c:ca:64:eb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Jan 25 05:43:56 2026 GMT
            Not After : Jan 26 07:43:56 2026 GMT
        Subject: CN=1CDE019865C9FB76CAE5CC266BD95E83FF10B6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:51:ac:17:48:a5:7a:e2:d5:61:33:72:2a:
                    73:a5:b5:90:29:40:c9:c3:76:e7:f4:79:e9:f8:0e:
                    87:bb:55:68:77:ab:fa:33:01:74:d7:8a:a6:06:0d:
                    a6:ac:11:66:14:df:13:7c:d6:88:a6:5f:ae:94:21:
                    9e:8e:70:bf:6e:f3:2c:36:3b:03:15:a1:97:52:c5:
                    bc:47:74:32:ae:45:b3:e6:94:91:26:56:89:79:dc:
                    a4:6f:b8:e8:aa:4e:35:85:54:4b:58:d0:e6:e5:38:
                    c4:de:cd:ec:21:4b:b3:88:d0:bf:fc:62:a3:5a:24:
                    95:c1:98:2c:1e:03:d9:ac:d3:ae:02:06:80:de:4a:
                    4a:94:75:9d:2c:ac:bd:17:50:88:de:7c:18:52:74:
                    09:a1:1b:8e:d6:a6:56:15:f4:ba:9a:6a:7b:ee:b1:
                    23:87:80:c2:ed:ea:2c:c9:f6:36:ba:a3:c3:b5:3a:
                    eb:95:ba:30:99:0a:dc:69:38:45:85:07:89:48:d4:
                    99:24:33:82:b3:77:48:91:18:93:7b:02:10:5b:38:
                    1f:11:e6:74:97:4b:e6:ef:94:d3:42:68:02:c2:6f:
                    51:40:97:05:09:3f:0a:bc:41:34:d7:c4:0e:19:25:
                    9a:f4:ee:29:2c:3a:d3:d4:7b:08:12:a3:e3:d8:85:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:01:98:65:C9:FB:76:CA:E5:CC:26:6B:D9:5E:83:FF:10:B6:FA
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:20:06:46:f7:de:d0:70:b3:56:89:53:b2:22:5a:ac:43:
         a1:0b:df:ac:0c:71:20:d9:7a:ba:b4:fa:5e:e4:6d:a8:14:bb:
         a0:1a:50:45:c8:eb:5f:2a:c9:ac:e8:d4:ad:2f:c6:4b:76:d2:
         3d:3a:6c:94:fb:23:9c:d7:44:05:e5:aa:8a:52:c5:fc:7a:a9:
         96:b7:6b:99:b1:43:af:d0:70:15:39:25:76:cc:88:20:55:0f:
         8f:a6:f2:34:92:8a:7b:2c:c9:8a:10:a1:0b:2d:7a:27:f8:d9:
         dd:7e:7b:a5:e4:e5:35:cd:d2:88:5e:bd:a6:a6:8b:18:b5:a2:
         d9:73:37:f8:76:1f:5e:c3:3b:91:84:b2:8d:a6:00:62:04:98:
         f1:3e:fe:ba:16:7a:79:6c:88:76:23:0d:85:04:11:b6:d8:2f:
         85:62:4a:55:55:a4:0c:8d:34:81:a2:47:c2:71:74:fc:87:04:
         3c:c9:ba:65:ad:58:bd:35:c3:bc:b5:a5:91:d6:a9:ac:3e:d3:
         11:3e:c1:ae:1d:03:d4:55:ac:b9:4b:2b:14:f1:8d:3d:5b:10:
         5b:a4:19:2e:7b:da:c0:89:a2:26:fe:0a:6d:47:ec:7b:94:3b:
         9f:01:db:19:81:3a:dd:f4:cc:d9:83:02:d2:62:48:27:51:8c:
         36:0a:57:f0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaWdxHt+1AuCyn/VitfnvXMpk6xwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDEyNTA1NDM1NloX
DTI2MDEyNjA3NDM1NlowMzExMC8GA1UEAxMoMUNERTAxOTg2NUM5RkI3NkNBRTVD
QzI2NkJEOTVFODNGRjEwQjZGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIVnUawXSKV64tVhM3Iqc6W1kClAycN25/R56fgOh7tVaHer+jMBdNeKpgYN
pqwRZhTfE3zWiKZfrpQhno5wv27zLDY7AxWhl1LFvEd0Mq5Fs+aUkSZWiXncpG+4
6KpONYVUS1jQ5uU4xN7N7CFLs4jQv/xio1oklcGYLB4D2azTrgIGgN5KSpR1nSys
vRdQiN58GFJ0CaEbjtamVhX0uppqe+6xI4eAwu3qLMn2Nrqjw7U665W6MJkK3Gk4
RYUHiUjUmSQzgrN3SJEYk3sCEFs4HxHmdJdL5u+U00JoAsJvUUCXBQk/CrxBNNfE
DhklmvTuKSw609R7CBKj49iF8scCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQc3gGY
Zcn7dsrlzCZr2V6D/xC2+jAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAbicgBkb33tBws1aJU7IiWqxDoQvfrAxxINl6urT6XuRtqBS7
oBpQRcjrXyrJrOjUrS/GS3bSPTpslPsjnNdEBeWqilLF/HqplrdrmbFDr9BwFTkl
dsyIIFUPj6byNJKKeyzJihChCy16J/jZ3X57peTlNc3SiF69pqaLGLWi2XM3+HYf
XsM7kYSyjaYAYgSY8T7+uhZ6eWyIdiMNhQQRttgvhWJKVVWkDI00gaJHwnF0/IcE
PMm6Za1YvTXDvLWlkdaprD7TET7Brh0D1FWsuUsrFPGNPVsQW6QZLnvawImiJv4K
bUfse5Q7nwHbGYE63fTM2YMC0mJIJ1GMNgpX8A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:06 2026 by rpki-client