This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
File:                     M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json)
Hash identifier:          wbB+ESNm+JXPYfbTNLykJLxXvaLk1wqUYPgNAicyjkw=
Subject key identifier:   B3:88:18:8F:4C:0B:A4:B2:48:10:3B:99:3F:07:64:0A:97:93:9B:B5
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Certificate issuer:       /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
Manifest number:          0228
Signing time:             Tue 27 Jan 2026 01:15:49 +0000
Manifest this update:     Tue 27 Jan 2026 01:15:49 +0000
Manifest next update:     Tue 03 Feb 2026 01:15:49 +0000
Files and hashes:         1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: YF4U1D78DgIHNzCyCqyZahiPd2G+UDrDMN2VmaA3ey0=)
                          2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=)
                          3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
                          rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 01:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
        Validity
            Not Before: Jan 27 01:15:49 2026 GMT
            Not After : Feb  3 01:15:49 2026 GMT
        Subject: CN=697811c5-7e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:cc:7c:61:7d:0e:d8:5e:03:ef:bc:83:71:
                    b0:14:00:e8:97:60:ff:63:f7:57:9e:82:43:f5:dc:
                    13:99:f9:c2:36:d9:e8:fd:71:9e:0e:e4:49:5e:d1:
                    74:55:19:a7:d5:14:51:e9:9c:53:3a:80:55:87:f4:
                    47:1c:8e:d7:d3:e8:de:fd:ce:7d:c9:4b:47:82:a8:
                    c8:e2:fd:7a:2e:46:96:a6:8d:47:11:65:31:24:32:
                    97:4d:75:7c:74:af:2d:be:f0:d2:52:85:6c:e0:3b:
                    a7:6a:bb:a8:f9:3c:db:35:bf:6e:70:60:4e:5b:3f:
                    c8:d5:b1:34:cc:4c:c1:08:48:96:e1:2d:51:f6:9c:
                    aa:b8:b6:2a:60:e2:1b:45:06:13:f1:2d:fd:e4:58:
                    9a:ca:a0:89:33:c5:d9:71:44:9d:02:27:bb:1e:c7:
                    12:91:e0:cc:a4:45:31:8a:b4:c0:29:ea:61:f3:61:
                    ac:e8:dd:93:77:97:ab:02:bf:db:09:66:d8:8e:05:
                    0f:ea:be:8e:c8:7b:48:91:46:39:34:09:25:30:1d:
                    af:cd:06:ea:21:d1:da:75:0c:24:8e:52:9c:23:9d:
                    be:21:0c:b1:dd:13:e0:10:27:0f:e6:6e:80:a4:ba:
                    7d:06:35:25:59:17:aa:11:89:2c:7e:82:ba:1d:e2:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:18:8F:4C:0B:A4:B2:48:10:3B:99:3F:07:64:0A:97:93:9B:B5
            X509v3 Authority Key Identifier:
                keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:c6:b0:f2:05:b7:97:1b:d2:12:a2:b9:90:9c:f0:0c:93:
         48:76:e7:5e:7b:99:58:b2:71:d2:57:d2:da:9c:14:fc:e8:21:
         30:32:49:17:62:ff:8b:bd:2f:9b:a6:af:0d:22:ec:1d:67:e2:
         0d:bb:64:85:1d:6b:a9:12:a3:0c:12:c0:a0:2c:41:be:d9:f8:
         67:4b:6c:2b:b1:2d:7a:f7:95:1c:c3:1b:d9:d1:6f:aa:37:8b:
         8f:6d:ea:87:42:e6:6c:f4:8f:ef:52:28:d8:ae:1b:30:3d:94:
         70:68:40:34:07:29:9d:a8:f7:14:be:ed:76:3d:c2:e4:82:1d:
         d0:7c:dd:72:70:dc:f5:98:d9:1f:c1:91:f7:ce:b8:03:bb:db:
         41:86:33:ff:e1:42:5a:b2:f6:a7:b5:ec:b5:d5:02:00:4e:9d:
         54:2f:74:83:39:08:fb:24:25:92:e0:44:f0:11:d5:d6:24:61:
         a6:e1:cf:b1:99:01:03:11:df:e6:11:fa:0e:3d:24:0d:a3:b6:
         2b:a6:f3:53:9c:62:4d:ed:01:5b:7b:15:53:37:2d:d6:39:24:
         66:fe:c5:da:d5:3d:41:c2:a1:46:f5:96:d3:3f:38:d3:ce:e2:
         e8:14:4c:6c:9e:19:be:46:1a:31:04:da:c8:49:3c:35:dd:af:
         b9:c8:db:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQyMEMxMTAvBgNVBAUTKDMzOUQxMkNFMzdFM0EyNjFGNkQwRjQ1M0U1OTk1MEE4
NEJDOEZFQTIwHhcNMjYwMTI3MDExNTQ5WhcNMjYwMjAzMDExNTQ5WjAYMRYwFAYD
VQQDDA02OTc4MTFjNS03ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApo7MfGF9DtheA++8g3GwFADol2D/Y/dXnoJD9dwTmfnCNtno/XGeDuRJXtF0
VRmn1RRR6ZxTOoBVh/RHHI7X0+je/c59yUtHgqjI4v16LkaWpo1HEWUxJDKXTXV8
dK8tvvDSUoVs4Dunaruo+TzbNb9ucGBOWz/I1bE0zEzBCEiW4S1R9pyquLYqYOIb
RQYT8S395FiayqCJM8XZcUSdAie7HscSkeDMpEUxirTAKeph82Gs6N2Td5erAr/b
CWbYjgUP6r6OyHtIkUY5NAklMB2vzQbqIdHadQwkjlKcI52+IQyx3RPgECcP5m6A
pLp9BjUlWReqEYksfoK6HeKbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOIGI9M
C6SySBA7mT8HZAqXk5u1MB8GA1UdIwQYMBaAFDOdEs4346Jh9tD0U+WZUKhLyP6i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDIwQy9ENDBFRkY4RUE4
NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9tSDIwUFJUNVpsUXFFdklf
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL001MFN6amZqb21IMjBQUlQ1WmxRcUV2SV9xSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDIwQy9ENDBFRkY4RUE4NTExMUVEQkIzMkU3NDlDNEY5QUUwMi9NNTBTempmam9t
SDIwUFJUNVpsUXFFdklfcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0A8aw8gW3lxvSEqK5kJzwDJNIdudee5lYsnHSV9LanBT86CEwMkkX
Yv+LvS+bpq8NIuwdZ+INu2SFHWupEqMMEsCgLEG+2fhnS2wrsS1695UcwxvZ0W+q
N4uPbeqHQuZs9I/vUijYrhswPZRwaEA0BymdqPcUvu12PcLkgh3QfN1ycNz1mNkf
wZH3zrgDu9tBhjP/4UJasvantey11QIATp1UL3SDOQj7JCWS4ETwEdXWJGGm4c+x
mQEDEd/mEfoOPSQNo7YrpvNTnGJN7QFbexVTNy3WOSRm/sXa1T1BwqFG9ZbTPzjT
zuLoFExsnhm+RhoxBNrISTw13a+5yNvA
-----END CERTIFICATE-----
Generated at Tue Jan 27 17:52:36 2026 by rpki-client