This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File:                     5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier:          ucDffyoVJ6TrijUq5b1QpwY7iDVC0WugxsxCV0e7qww=
Subject key identifier:   1F:A3:8C:B3:C4:00:2B:34:B2:CD:BE:01:C3:D3:22:B3:85:5E:2F:47
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer:       /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number:          0214
Signing time:             Tue 27 Jan 2026 01:32:04 +0000
Manifest this update:     Tue 27 Jan 2026 01:32:04 +0000
Manifest next update:     Tue 03 Feb 2026 01:32:04 +0000
Files and hashes:         1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: pC4OaU5cixgMWjVLKGX2JyUu8iAc0LfKsITjMAydiY0=)
                          2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
                          rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 01:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
        Validity
            Not Before: Jan 27 01:32:04 2026 GMT
            Not After : Feb  3 01:32:04 2026 GMT
        Subject: CN=69781594-b409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:86:ba:ed:7a:5e:41:24:e0:64:a9:3f:d9:
                    bf:fa:c6:03:74:0b:b8:e7:dc:e5:de:8b:9b:c3:52:
                    ea:10:9a:7e:1c:06:b6:54:13:86:94:4b:8a:57:7f:
                    5f:28:18:0b:97:6f:83:d4:4c:27:e9:14:d3:f3:07:
                    29:b9:6c:93:a5:d1:e0:f2:46:b8:ee:b1:89:d2:f6:
                    d3:94:2e:df:4c:78:b2:17:ce:cc:c5:2f:57:a7:cc:
                    35:3e:5f:27:09:15:2e:ed:d6:c3:bc:93:2d:e9:29:
                    e2:cb:2c:37:7c:05:a3:c4:01:e5:ec:7e:d8:91:10:
                    bc:2a:cd:16:70:11:52:87:3b:49:c1:28:7a:d7:1c:
                    52:bf:8a:26:24:62:2e:ff:79:40:bf:42:97:ad:06:
                    01:3c:89:14:47:65:c8:d3:7b:e7:4a:72:99:c7:30:
                    6c:d8:22:d9:15:80:6d:2e:2c:ae:77:03:fd:16:28:
                    2e:a4:0e:8e:00:cb:c1:8e:bb:a4:75:28:f8:7e:b6:
                    1c:9f:c2:59:03:7c:15:08:7f:f9:1a:d5:33:0c:21:
                    20:df:0b:23:ee:84:27:42:f8:d8:7a:79:6c:0f:cf:
                    e2:9d:ad:f5:ce:90:76:2a:06:3e:03:06:9f:c4:5c:
                    d6:1a:85:99:39:4c:12:51:62:07:d0:b0:f3:76:66:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:8C:B3:C4:00:2B:34:B2:CD:BE:01:C3:D3:22:B3:85:5E:2F:47
            X509v3 Authority Key Identifier:
                keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:cd:5c:65:a9:c4:af:e1:7d:50:47:b8:2f:da:4e:a4:e1:
         39:f7:c3:58:22:31:c7:30:68:5f:bf:e4:e9:32:f9:3c:16:ed:
         18:80:21:fb:be:f9:db:b7:9e:6d:75:87:c3:7b:28:6c:a7:3e:
         ed:44:67:af:6c:b7:1d:6e:55:07:2c:1d:05:66:32:76:3d:6f:
         52:68:3b:71:13:8d:b7:7a:02:95:d3:72:33:1a:42:9b:07:2e:
         20:f1:f8:38:13:5e:42:c3:e9:d5:ed:6e:0f:df:54:30:24:ec:
         70:d6:a1:44:11:7b:d9:59:f6:6e:cc:f1:3f:6c:91:7d:8e:94:
         7b:3e:99:05:9e:d6:17:b1:d2:d8:c7:6c:21:62:85:d3:d8:4f:
         05:3f:a0:84:e2:7e:a8:50:c3:0c:ea:13:59:ef:12:0f:4b:76:
         31:ef:61:63:63:f1:f7:ed:0d:bd:1b:eb:33:82:e4:8d:e2:1b:
         30:51:71:67:fc:af:5b:ab:3b:f4:50:23:61:5e:94:d3:ce:f0:
         7d:7a:38:c4:18:fe:3e:ca:ad:ab:4b:b2:ef:8f:d0:61:05:0f:
         86:29:35:99:82:95:b8:49:60:09:f4:9c:45:1e:db:48:29:2f:
         ed:b5:cb:23:53:a6:8d:c0:13:c3:f3:72:42:ad:e5:54:f8:c3:
         af:49:91:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:23:54 2026 by rpki-client