This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          spyASr5mJtfmK8iKtPophjIjvHlpVp6uQzoi+mGJtW4=
Subject key identifier:   B6:50:52:76:F3:91:5A:BD:3A:A1:58:42:F8:60:23:D6:1F:B0:5D:0B
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       052E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          045C
Signing time:             Sun 25 Jan 2026 00:04:44 +0000
Manifest this update:     Sun 25 Jan 2026 00:04:43 +0000
Manifest next update:     Sun 01 Feb 2026 00:04:43 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 4LqNl++eE3LOvN332r/vJplno4oaoYiTvRGHDpXZ9MM=)
                          2: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          3: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          4: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          5: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          6: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          7: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          8: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          10: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          11: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          12: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          13: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          14: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jan 25 00:04:43 2026 GMT
            Not After : Feb  1 00:04:43 2026 GMT
        Subject: CN=69755e1c-826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:6f:3e:8b:ea:a4:b0:58:97:cc:4d:ad:82:
                    44:ba:4f:e5:f4:67:00:08:a1:54:2a:15:33:e1:dd:
                    1e:87:1c:92:0f:55:24:3e:16:d8:eb:64:fd:cf:78:
                    7f:37:53:41:13:a2:2e:c5:9e:a1:81:f8:26:9d:ce:
                    5a:76:ca:38:1f:11:bd:db:41:ff:a4:8e:cb:b9:96:
                    0c:1a:8c:69:d6:ee:3f:0f:bf:5b:79:bc:81:02:13:
                    48:c5:c9:86:2b:dd:66:1d:01:bb:d5:89:ce:3f:9d:
                    02:dd:34:35:4d:c3:64:dd:40:ac:59:e5:02:cb:66:
                    57:76:e6:1a:bc:2e:e1:c1:de:b4:be:19:94:2a:c6:
                    e8:23:5f:90:0b:01:9e:6b:76:8e:be:c7:76:0f:ad:
                    10:30:d8:33:b8:0d:bd:46:d3:3c:5a:7c:0f:2c:1d:
                    b1:6a:d2:1d:6e:0f:08:99:dd:a2:a9:e2:19:ca:5a:
                    a5:1f:09:92:01:fd:42:15:92:e2:00:df:a2:2e:6f:
                    8a:8b:c3:20:47:7f:52:97:7b:d7:99:c7:50:29:01:
                    35:e5:84:df:43:20:ec:22:52:f1:48:89:a6:8e:6b:
                    05:58:e3:f7:60:f5:86:f4:64:5a:15:a5:f9:25:e5:
                    9a:d2:37:d6:08:2e:cc:2b:7f:e9:c3:46:30:61:87:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:50:52:76:F3:91:5A:BD:3A:A1:58:42:F8:60:23:D6:1F:B0:5D:0B
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:af:4e:85:51:67:c4:60:8c:dd:85:03:ae:04:67:6b:32:
         cd:cd:c3:79:ec:b4:ea:11:a3:49:29:6b:13:05:0b:bd:97:29:
         64:7c:f5:33:32:4e:39:c7:93:e2:61:71:26:bf:d6:c1:a5:b8:
         38:f4:83:ae:7d:80:10:c4:ac:32:a0:ad:5e:c4:a4:2c:76:00:
         f8:fb:f4:59:c6:8d:2c:26:68:18:91:a1:96:e1:4f:32:80:ea:
         b6:24:a8:45:ed:0e:08:1d:11:9d:e2:c7:07:09:b1:f7:55:b0:
         3e:76:12:23:03:f1:f7:ed:8d:98:7c:45:46:55:11:0c:b1:70:
         d7:60:1f:f7:f8:c4:af:f1:c1:6c:d6:e9:1c:a0:bf:53:cf:55:
         8a:12:da:38:68:4b:86:ef:84:75:b3:9f:3e:87:fe:83:f0:6d:
         c3:c9:79:6e:26:88:ca:74:95:87:c1:24:7b:61:58:62:07:a8:
         00:83:fb:54:3c:cd:96:cf:dc:fe:fd:77:40:d9:2d:05:58:f8:
         42:ea:21:f5:44:04:ac:cb:c2:cc:ae:e0:fa:68:39:30:8e:aa:
         2d:31:45:d3:ec:8e:76:9f:fa:93:c3:84:ab:84:36:29:f1:fe:
         56:4c:db:aa:4f:20:5c:a1:37:f6:93:ed:c2:18:b9:bd:1a:31:
         c3:13:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:35 2026 by rpki-client