This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File:                     5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier:          JJ/sU0TeW9o60QUSIVBAXoNoQP8Bg/STsy5xBoovcjU=
Subject key identifier:   2D:34:04:5B:96:15:41:22:F0:2E:A3:3A:FC:B1:E5:3E:87:05:FD:B9
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer:       /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number:          0118
Signing time:             Tue 03 Feb 2026 04:35:19 +0000
Manifest this update:     Tue 03 Feb 2026 04:35:18 +0000
Manifest next update:     Tue 10 Feb 2026 04:35:18 +0000
Files and hashes:         1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: K1GAlB+Hz+CPleQOtAAMQKMAz/TTWtd1P+mbqgsOlT4=)
                          2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 2Wbjmbr/71aOBBlMkPfPkpOAq3lB1Uo+dxGr4/ylof4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 04:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
        Validity
            Not Before: Feb  3 04:35:18 2026 GMT
            Not After : Feb 10 04:35:18 2026 GMT
        Subject: CN=69817b07-5599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:40:a3:d7:58:2f:d0:85:8a:0c:77:e8:e6:
                    91:90:78:3e:a8:ab:fe:5e:95:67:98:d2:ff:b3:5d:
                    63:1e:e4:50:7e:bb:11:a7:24:a2:68:bd:d4:af:0b:
                    72:28:25:22:65:91:84:62:72:2a:50:77:eb:73:d0:
                    d6:8a:0c:0b:40:6d:56:8c:6e:6a:c1:05:ae:45:22:
                    e2:8b:4d:84:eb:0f:95:83:27:d9:d1:7c:f3:f8:d0:
                    b8:ee:b1:1c:9a:c9:e4:76:76:06:e7:de:c2:08:74:
                    60:88:7a:b5:7a:08:27:c2:6e:c8:00:d2:5f:fa:8f:
                    ad:7b:ec:4c:03:4b:41:35:a5:93:75:8b:6e:4e:c6:
                    e5:45:29:4b:32:7b:be:29:7f:4c:72:86:af:e6:02:
                    37:b8:87:95:8e:db:64:30:27:95:da:ed:d8:ab:1d:
                    6b:44:a7:8a:e2:98:f0:c0:1f:8b:bc:7c:83:fa:42:
                    d5:ce:22:d2:9b:5c:e6:e5:3b:d5:8d:8d:e8:60:8d:
                    f5:63:13:2e:e4:36:80:b8:00:bd:10:49:3d:2a:43:
                    4e:00:a8:f2:67:dc:94:e5:26:68:dc:05:75:cd:ca:
                    11:8c:a2:f9:f2:5f:18:da:af:dd:5a:24:c5:19:7b:
                    42:97:11:bc:b9:7f:a4:b6:b0:94:ac:01:4e:1c:62:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:04:5B:96:15:41:22:F0:2E:A3:3A:FC:B1:E5:3E:87:05:FD:B9
            X509v3 Authority Key Identifier:
                keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d7:79:a3:d6:9c:3a:b3:d9:34:7b:42:af:6e:b7:be:81:fb:
         ce:05:d4:f2:7c:40:b8:98:17:f0:ad:78:10:bf:a7:23:24:35:
         90:75:4a:79:07:3e:ad:da:7f:79:cf:7f:8f:34:f1:e4:4f:26:
         08:c8:41:5e:b2:22:ec:49:2d:c5:26:36:0e:03:ae:7d:ab:c0:
         88:01:98:74:f8:39:9a:7f:f3:ca:3a:c8:a1:1f:f4:e9:72:b3:
         5f:4a:0f:65:9c:d3:02:f0:62:2e:e0:5d:e9:3f:84:4e:1e:c3:
         55:36:91:a2:72:15:c3:f4:8e:36:51:65:2a:31:92:ba:e6:67:
         11:c5:93:db:ea:84:9f:8f:53:ac:ec:12:a2:3c:b1:87:f1:d8:
         29:50:b2:4c:1f:72:a7:cb:53:2d:90:f3:81:32:b8:4d:01:08:
         2d:c2:ae:f0:c4:79:0a:eb:d7:9c:bd:90:46:99:12:3f:d8:58:
         8e:8f:a8:a8:e2:95:4e:50:17:6e:ca:98:87:98:74:9f:20:07:
         17:7f:b4:30:78:dc:a3:ad:30:09:2c:50:da:e3:2e:93:27:21:
         81:8a:a0:ba:c5:fc:48:8b:49:5a:fc:c9:75:85:e0:38:8f:ef:
         cf:6e:64:0e:0d:1d:e2:a3:9e:2d:3d:12:0b:10:d0:90:86:c8:
         48:bf:1f:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB
MjQxRTI3MjAwHhcNMjYwMjAzMDQzNTE4WhcNMjYwMjEwMDQzNTE4WjAYMRYwFAYD
VQQDDA02OTgxN2IwNy01NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmG5Ao9dYL9CFigx36OaRkHg+qKv+XpVnmNL/s11jHuRQfrsRpySiaL3Urwty
KCUiZZGEYnIqUHfrc9DWigwLQG1WjG5qwQWuRSLii02E6w+VgyfZ0Xzz+NC47rEc
msnkdnYG597CCHRgiHq1eggnwm7IANJf+o+te+xMA0tBNaWTdYtuTsblRSlLMnu+
KX9Mcoav5gI3uIeVjttkMCeV2u3Yqx1rRKeK4pjwwB+LvHyD+kLVziLSm1zm5TvV
jY3oYI31YxMu5DaAuAC9EEk9KkNOAKjyZ9yU5SZo3AV1zcoRjKL58l8Y2q/dWiTF
GXtClxG8uX+ktrCUrAFOHGImVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC00BFuW
FUEi8C6jOvyx5T6HBf25MB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB
RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy
dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAE13mj1pw6s9k0e0Kvbre+gfvOBdTyfEC4mBfwrXgQv6cjJDWQdUp5
Bz6t2n95z3+PNPHkTyYIyEFesiLsSS3FJjYOA659q8CIAZh0+Dmaf/PKOsihH/Tp
crNfSg9lnNMC8GIu4F3pP4ROHsNVNpGichXD9I42UWUqMZK65mcRxZPb6oSfj1Os
7BKiPLGH8dgpULJMH3Kny1MtkPOBMrhNAQgtwq7wxHkK69ecvZBGmRI/2FiOj6io
4pVOUBduypiHmHSfIAcXf7QweNyjrTAJLFDa4y6TJyGBiqC6xfxIi0la/Ml1heA4
j+/PbmQODR3io54tPRILENCQhshIvx/t
-----END CERTIFICATE-----
Generated at Wed Feb 4 16:51:47 2026 by rpki-client