This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
File:                     5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json)
Hash identifier:          5m1V3NQPyrAqfkN65W6RaKQ64+KELEZ+yA1TyCqXvpc=
Subject key identifier:   47:1D:6F:6F:50:3A:D8:38:1E:BA:A3:FB:64:9E:31:D2:56:55:74:BC
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
Manifest number:          5D
Signing time:             Sat 17 Jan 2026 06:14:52 +0000
Manifest this update:     Sat 17 Jan 2026 06:14:51 +0000
Manifest next update:     Sat 24 Jan 2026 06:14:51 +0000
Files and hashes:         1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: v7BIOGhkPZcOvZwU0Dh1BhZhpY5KMmDdtk78IYG+1DE=)
                          2: 5D97D2A6F28911F0A11FA9356B6F56BC.roa (hash: sm5LVbNNMPoJ3CLByp+3cI73yjy5m2krniJeDKBuBRc=)
                          3: 5E7453DEF28911F0A11FA9356B6F56BC.roa (hash: SGyy+1mEbxhBdZrMVV5VqsFQN2HjXklNy817WOgyHHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Jan 17 06:14:51 2026 GMT
            Not After : Jan 24 06:14:51 2026 GMT
        Subject: CN=696b28dc-3e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:15:58:b0:b3:9f:3e:b3:a0:3b:cf:a2:b1:
                    74:ca:6f:ad:88:4f:5e:44:66:07:d0:41:d7:fa:96:
                    1a:48:b8:50:d1:db:9a:60:66:5f:98:e2:c4:65:99:
                    77:7e:c3:d0:91:1c:1d:72:f8:b2:b8:82:83:cb:4e:
                    7f:c3:70:f8:91:ef:a7:b8:b7:0d:3d:96:e6:35:b8:
                    22:51:64:ce:ec:a3:fb:8c:f6:c5:9e:bc:cb:22:7e:
                    5d:d1:a2:89:04:65:1e:a3:9a:6e:ba:2b:43:be:21:
                    5d:41:56:82:80:44:26:50:cd:98:6b:84:9f:98:e0:
                    44:ad:47:8c:52:82:68:71:bc:11:e1:4b:e2:45:35:
                    12:e0:ee:40:e7:95:7d:11:f1:f9:4d:f4:28:d5:5a:
                    c5:ae:cd:ef:a4:5b:c7:06:f9:e7:b0:3b:44:7f:24:
                    26:fa:41:06:b9:78:73:52:1d:e1:25:dc:93:7a:cb:
                    02:12:da:a2:67:6e:92:97:ab:2d:dc:f1:96:6a:0f:
                    10:e1:da:bd:39:ad:eb:89:17:dc:61:b2:01:85:5a:
                    35:a0:79:38:44:73:5f:c1:88:75:58:62:ff:22:ad:
                    16:7f:c0:b1:ae:cc:30:71:e2:e0:05:c8:f6:d8:57:
                    74:d5:9e:36:c3:b5:87:14:5f:dc:bd:25:f4:99:76:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:6F:6F:50:3A:D8:38:1E:BA:A3:FB:64:9E:31:D2:56:55:74:BC
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:eb:9e:19:42:1b:92:13:36:ad:92:9f:94:ec:e4:6e:78:2d:
         de:17:01:c7:cb:47:ac:17:1f:71:1e:9b:53:02:f6:d0:b0:29:
         c5:c0:c4:36:ad:c7:b3:6c:cb:79:c9:21:fe:33:0f:e6:68:19:
         e4:a7:a5:f3:b9:31:f3:73:f0:2e:48:0f:b7:38:a8:ec:f8:ca:
         aa:b1:54:1c:ac:ec:80:13:75:38:b8:1b:29:54:45:95:47:fa:
         b3:26:de:0d:0b:47:f1:b3:f9:da:38:2b:66:38:aa:89:92:dd:
         2f:86:c8:be:61:df:6d:4b:54:ce:e2:5c:bc:dc:56:58:b1:ce:
         46:93:f3:53:ab:fb:40:c4:40:67:da:c1:7a:64:b7:95:2d:04:
         e8:76:d1:0c:36:00:dd:45:d8:9b:3f:96:77:69:88:c4:13:4c:
         2b:08:7c:8f:76:ae:5c:1f:a6:2d:38:df:3e:3b:6b:c7:54:47:
         40:f0:d1:5c:0d:f7:08:e7:3b:73:8c:34:1b:d3:3a:32:3b:32:
         37:a6:00:7d:ef:d3:ef:59:45:c8:3d:ac:89:46:83:13:e2:b3:
         03:c7:cd:9b:f0:9b:92:b4:21:1c:30:32:bf:cf:52:fc:8b:20:
         ef:2c:0e:71:1a:b2:e6:51:65:b2:93:14:16:f8:4f:2c:3c:ba:
         03:e3:ed:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3
MzE2QUExRDAeFw0yNjAxMTcwNjE0NTFaFw0yNjAxMjQwNjE0NTFaMBgxFjAUBgNV
BAMMDTY5NmIyOGRjLTNlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2ahVYsLOfPrOgO8+isXTKb62IT15EZgfQQdf6lhpIuFDR25pgZl+Y4sRlmXd+
w9CRHB1y+LK4goPLTn/DcPiR76e4tw09luY1uCJRZM7so/uM9sWevMsifl3RookE
ZR6jmm66K0O+IV1BVoKARCZQzZhrhJ+Y4EStR4xSgmhxvBHhS+JFNRLg7kDnlX0R
8flN9CjVWsWuze+kW8cG+eewO0R/JCb6QQa5eHNSHeEl3JN6ywIS2qJnbpKXqy3c
8ZZqDxDh2r05reuJF9xhsgGFWjWgeThEc1/BiHVYYv8irRZ/wLGuzDBx4uAFyPbY
V3TVnjbDtYcUX9y9JfSZdiqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURx1vb1A6
2DgeuqP7ZJ4x0lZVdLwwHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz
MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtV
LXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAOrrnhlCG5ITNq2Sn5Ts5G54Ld4XAcfLR6wXH3Eem1MC9tCwKcXAxDat
x7Nsy3nJIf4zD+ZoGeSnpfO5MfNz8C5ID7c4qOz4yqqxVBys7IATdTi4GylURZVH
+rMm3g0LR/Gz+do4K2Y4qomS3S+GyL5h321LVM7iXLzcVlixzkaT81Or+0DEQGfa
wXpkt5UtBOh20Qw2AN1F2Js/lndpiMQTTCsIfI92rlwfpi043z47a8dUR0Dw0VwN
9wjnO3OMNBvTOjI7MjemAH3v0+9ZRcg9rIlGgxPiswPHzZvwm5K0IRwwMr/PUvyL
IO8sDnEasuZRZbKTFBb4Tyw8ugPj7cc=
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:10:29 2026 by rpki-client