This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
File:                     53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json)
Hash identifier:          nnMmlZ63BdMOV+Rs97pzJRwVHHvO6rXgjWP2ldWi+RU=
Subject key identifier:   1C:F8:47:48:DA:83:AD:A7:5E:AA:AF:D1:06:9C:16:31:27:25:96:68
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Certificate issuer:       /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
Manifest number:          CA
Signing time:             Wed 07 Jan 2026 04:59:23 +0000
Manifest this update:     Wed 07 Jan 2026 04:59:22 +0000
Manifest next update:     Wed 14 Jan 2026 04:59:22 +0000
Files and hashes:         1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: zlEU8y0+ljnPbPBvG8cnYtdfrX12aP53nMggYNFO9uw=)
                          2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: PmWdGEFbgxUM5JARv+3955i+yLCgnSi8KLnrb7A4Hd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 04:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
        Validity
            Not Before: Jan  7 04:59:22 2026 GMT
            Not After : Jan 14 04:59:22 2026 GMT
        Subject: CN=695de82b-3318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:79:2b:c9:2f:2c:a1:4c:da:11:5f:8d:03:
                    8b:6d:fc:0e:b7:44:f2:da:6b:91:9b:77:9f:2d:06:
                    f5:4c:37:e4:08:d6:62:6e:67:68:f0:0a:ac:bd:4d:
                    4b:c8:08:80:3b:e1:62:37:e1:fb:a0:f7:75:bb:15:
                    2a:6a:a3:9a:47:a9:76:66:a9:05:8c:d0:fe:32:20:
                    f3:a1:01:0e:ff:2e:31:c5:43:ef:90:0e:88:5d:69:
                    ea:67:38:22:8a:fb:57:2e:6a:e0:4b:8b:93:58:ca:
                    28:72:bf:48:af:95:34:d4:ca:e9:40:ac:44:6f:93:
                    b9:bb:11:2f:f6:e9:31:af:16:70:e5:93:a2:69:6c:
                    ec:01:bf:9e:5a:b6:b4:83:57:fa:b2:6a:69:cc:fb:
                    15:d9:ab:20:fc:ba:d8:49:01:17:90:7d:c8:6a:c0:
                    20:ff:46:0a:e2:8a:ac:71:4f:4c:c2:8d:22:cd:dd:
                    03:32:43:d3:03:53:0d:ea:8d:f9:05:c5:85:a2:d8:
                    19:ed:bd:56:40:62:2e:74:d8:c2:7a:9a:df:f2:35:
                    c7:12:cd:f1:d9:6c:7b:7c:55:73:68:57:98:41:a9:
                    9d:74:6c:5c:23:ea:b6:96:f3:5c:32:e1:83:49:6a:
                    fb:84:e4:f4:f1:2b:63:2f:b6:06:e8:d7:01:07:83:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F8:47:48:DA:83:AD:A7:5E:AA:AF:D1:06:9C:16:31:27:25:96:68
            X509v3 Authority Key Identifier:
                keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:22:46:e0:25:af:19:14:ee:82:fb:29:b3:a1:a7:20:d3:d2:
         60:91:b9:38:cc:b8:08:41:c1:a3:50:4e:ae:b1:8c:80:79:09:
         d0:af:16:bb:29:c1:72:21:44:c4:21:1d:40:2e:5a:bf:a5:d6:
         fc:a8:83:2f:cc:69:91:42:e1:08:77:ec:63:cd:b0:fc:8b:18:
         46:5f:80:d2:91:e8:74:c5:eb:a3:c1:fd:8d:19:b4:1e:4f:4d:
         df:be:90:08:af:be:a5:ab:25:f3:f3:85:0d:54:90:8e:ec:b1:
         91:59:b2:7a:e2:4a:65:d9:8e:11:e1:82:7b:b3:2f:48:e4:d3:
         6d:33:8f:d2:6a:61:02:18:9e:39:cb:02:25:06:5a:48:da:d3:
         81:6e:61:5b:55:35:ce:b9:e7:01:36:d3:2b:26:12:28:ca:28:
         0b:74:ba:19:6b:e3:ad:73:c5:14:8d:ea:37:cf:7a:b1:d5:00:
         d8:f6:a5:b8:f9:b5:4f:85:cc:a1:d2:a4:ee:03:1c:05:42:4e:
         41:81:49:ea:65:55:d0:04:36:b6:1a:f6:d5:04:d1:b0:4c:22:
         42:5e:f3:66:2a:c5:e3:02:c3:7c:0d:da:5e:ef:b8:e9:3d:e9:
         99:95:bb:51:3e:c7:cb:b8:07:b5:80:20:73:f9:dc:f7:a8:d7:
         12:8c:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:12:00 2026 by rpki-client