This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File:                     2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier:          o6LRkqWUlI0n6mjxnABK8Fhh1AHNBMoaDSvpRWCgrdM=
Subject key identifier:   5A:83:59:7E:17:E9:6D:3F:7A:72:22:78:E5:B9:22:F3:02:B5:AD:59
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer:       /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number:          15
Signing time:             Sat 17 Jan 2026 07:01:19 +0000
Manifest this update:     Sat 17 Jan 2026 07:01:19 +0000
Manifest next update:     Sat 24 Jan 2026 07:01:19 +0000
Files and hashes:         1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: XMspPmei1tUM9mHUvlK9mRD1wTlT2Najctq8+cSEWoQ=)
                          2: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: IplB0gM9Uuw4HNboDvbREthelLfiR2zwPB1/OskSGfA=)
                          3: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: JsUVmDenlNRs0tfS9whRc7Jzv4Yo+z4hCHKowYgJ6Tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
                          rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
        Validity
            Not Before: Jan 17 07:01:19 2026 GMT
            Not After : Jan 24 07:01:19 2026 GMT
        Subject: CN=696b33bf-b462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:1e:e9:29:a4:7f:39:97:e8:65:00:7c:66:
                    ae:ca:6c:c3:16:0c:65:4c:7c:d6:36:9c:38:1d:9a:
                    2e:95:d7:dc:2e:7b:40:98:d1:08:1c:f9:91:36:15:
                    93:5a:bd:3a:40:89:36:ed:e7:43:fc:cf:fa:6f:43:
                    2e:61:cc:5d:c1:03:a4:38:a0:8f:b4:26:01:26:9e:
                    d2:eb:70:9e:f3:94:20:e0:ec:fb:37:fb:c6:93:5e:
                    a3:c7:f9:2d:9c:3d:b0:82:09:3b:08:60:54:a4:4d:
                    55:b3:d0:84:63:3d:0b:2e:e3:21:43:57:97:2c:87:
                    8b:14:7c:ea:a4:ea:3e:7a:b4:cd:4a:33:f8:8d:3a:
                    ba:4d:b3:02:b9:d9:85:47:11:2a:41:58:f6:eb:e3:
                    ae:2c:a0:43:68:78:25:d7:8f:b6:49:ff:36:8c:bc:
                    1e:12:b6:4f:75:24:84:43:37:60:a7:56:7a:3d:ac:
                    3b:ca:b1:f5:d3:46:e9:1c:79:13:e7:67:4e:1d:14:
                    19:26:7a:50:8b:94:3f:86:85:0d:78:9b:59:e7:17:
                    51:11:1e:ba:fe:64:cc:0d:13:e7:cb:b6:f1:df:f1:
                    9f:f9:e6:c8:44:d3:c1:fd:89:c6:21:ec:fe:24:dd:
                    8c:77:8d:fd:9a:ef:3b:60:ba:d2:3e:e0:42:d3:0d:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:83:59:7E:17:E9:6D:3F:7A:72:22:78:E5:B9:22:F3:02:B5:AD:59
            X509v3 Authority Key Identifier:
                keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ca:f0:0b:25:54:55:18:2a:cb:3b:96:b1:d1:b6:50:1f:16:
         08:7b:db:11:46:41:c2:31:f6:1d:d7:d7:2d:b2:3b:ed:e3:e4:
         f5:60:4d:d1:4b:c4:58:bd:fd:77:5b:d2:57:86:e9:2e:c5:f4:
         a1:04:11:af:3f:cf:34:a0:f7:45:97:ff:08:c8:65:f2:44:da:
         69:44:de:4b:91:e5:71:11:77:36:6c:c6:4b:30:34:2c:a3:9c:
         0b:4f:3a:d9:25:45:cb:fc:f3:c6:2c:87:4f:8e:fe:4c:b2:45:
         dc:44:04:d0:a1:28:77:ff:0d:8c:57:d0:9b:2b:a7:0b:c3:3b:
         c9:bb:d3:93:db:fb:3b:ef:2a:60:3a:78:d2:2a:9e:e8:ab:a3:
         42:e4:5c:db:ef:56:03:8d:a7:96:3f:07:b9:32:3a:df:1c:bc:
         42:a2:e7:b9:3a:ec:d4:67:71:f3:e6:09:00:61:07:b2:b4:52:
         e0:ee:f1:fe:e1:3e:02:26:8f:45:a3:76:c6:f8:c5:a5:3b:a8:
         da:1f:a0:d4:b4:d1:1f:55:ab:d0:f4:18:95:43:5a:3b:96:e3:
         18:04:a7:32:07:e6:f7:17:5d:da:c9:39:5e:10:31:29:53:a5:
         a1:b9:3d:ca:0f:c8:76:c6:c6:10:e7:72:07:37:d1:81:29:56:
         d6:dc:df:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0
QkU4RTExMC8GA1UEBRMoREIwODg3RTI1Q0MwRDBDRjc2ODhEQjVERERGNDE5NjUz
MkNENDdBNjAeFw0yNjAxMTcwNzAxMTlaFw0yNjAxMjQwNzAxMTlaMBgxFjAUBgNV
BAMMDTY5NmIzM2JmLWI0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTNR7pKaR/OZfoZQB8Zq7KbMMWDGVMfNY2nDgdmi6V19wue0CY0Qgc+ZE2FZNa
vTpAiTbt50P8z/pvQy5hzF3BA6Q4oI+0JgEmntLrcJ7zlCDg7Ps3+8aTXqPH+S2c
PbCCCTsIYFSkTVWz0IRjPQsu4yFDV5csh4sUfOqk6j56tM1KM/iNOrpNswK52YVH
ESpBWPbr464soENoeCXXj7ZJ/zaMvB4Stk91JIRDN2CnVno9rDvKsfXTRukceRPn
Z04dFBkmelCLlD+GhQ14m1nnF1ERHrr+ZMwNE+fLtvHf8Z/55shE08H9icYh7P4k
3Yx3jf2a7ztgutI+4ELTDYh1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWoNZfhfp
bT96ciJ45bki8wK1rVkwHwYDVR0jBBgwFoAU2wiH4lzA0M92iNtd3fQZZTLNR6Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzQ5Qzc3NDg4RTE0
NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMndpSDRsekEwTTkyaU50ZDNmUVpaVExOUjZZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
RThFLzQ5Qzc3NDg4RTE0NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05
MmlOdGQzZlFaWlRMTlI2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADbK8AslVFUYKss7lrHRtlAfFgh72xFGQcIx9h3X1y2yO+3j5PVgTdFL
xFi9/Xdb0leG6S7F9KEEEa8/zzSg90WX/wjIZfJE2mlE3kuR5XERdzZsxkswNCyj
nAtPOtklRcv888Ysh0+O/kyyRdxEBNChKHf/DYxX0JsrpwvDO8m705Pb+zvvKmA6
eNIqnuiro0LkXNvvVgONp5Y/B7kyOt8cvEKi57k67NRncfPmCQBhB7K0UuDu8f7h
PgImj0Wjdsb4xaU7qNofoNS00R9Vq9D0GJVDWjuW4xgEpzIH5vcXXdrJOV4QMSlT
paG5PcoPyHbGxhDncgc30YEpVtbc3zg=
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:56:47 2026 by rpki-client