This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          RY1cONfvt0QeTJxxWZaiqPaTJx5NGSGETPbHtJoVXpg=
Subject key identifier:   85:BB:F8:85:F6:1A:C9:10:EF:5C:1E:D4:5D:0C:8B:C5:FE:0D:D5:0A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0533
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0461
Signing time:             Tue 03 Feb 2026 00:21:06 +0000
Manifest this update:     Tue 03 Feb 2026 00:21:05 +0000
Manifest next update:     Tue 10 Feb 2026 00:21:05 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: nYocbPwgsZgO+K+EIM/AQviYDsv6hJoBajU8OLPM5Fk=)
                          2: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          3: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          9: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          10: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          12: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          13: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 00:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1331 (0x533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Feb  3 00:21:05 2026 GMT
            Not After : Feb 10 00:21:05 2026 GMT
        Subject: CN=69813f71-6a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:b5:e9:8f:81:84:65:40:fc:56:bd:91:29:
                    b4:31:7e:f0:56:56:7c:52:86:fd:59:cf:aa:46:c1:
                    d8:67:45:9e:03:55:3d:e8:63:f7:d2:81:6b:96:e1:
                    70:5d:b2:c1:83:91:67:b8:6a:14:5a:7f:80:80:48:
                    ce:bf:1d:96:f8:e8:3a:44:6a:ae:f2:af:18:57:6e:
                    e4:28:f6:7e:f9:8d:36:c0:7c:09:f6:ab:76:4b:c9:
                    a9:97:b4:f3:55:8b:d5:69:f4:fb:c9:8b:82:ca:e7:
                    f4:3c:e4:5b:78:34:d3:8c:22:17:70:10:ae:f9:c5:
                    d4:98:f5:c0:3d:11:31:22:bd:69:e8:b3:ff:f9:7a:
                    ba:7b:61:da:b7:3e:fa:ca:7b:6d:08:6f:2d:8c:8e:
                    e6:6b:9f:a8:75:32:c3:7a:08:b9:85:77:e2:92:9e:
                    60:ca:ae:12:3e:01:14:27:6b:01:c9:d8:02:92:e5:
                    60:5b:63:67:e3:8a:f9:1a:1e:64:f8:74:56:a4:16:
                    54:22:a6:6d:a8:34:20:f0:bf:aa:1e:73:45:5b:23:
                    32:94:f0:e8:29:7b:a8:be:2a:93:78:bb:eb:9d:37:
                    c3:8e:95:52:c6:08:38:80:b8:8f:a9:4a:dc:9d:73:
                    d9:c0:a3:a2:4d:1a:0e:21:ec:e7:3b:b2:9e:96:f2:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BB:F8:85:F6:1A:C9:10:EF:5C:1E:D4:5D:0C:8B:C5:FE:0D:D5:0A
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:75:29:e4:bb:0c:d4:43:2e:35:ef:83:2c:5d:d8:89:02:
         14:c5:88:f6:b0:fd:df:bb:9e:da:ef:22:7b:fe:1b:66:d9:11:
         63:db:99:78:82:b6:99:61:41:94:0b:56:1a:67:4e:18:10:b2:
         db:d0:e9:11:32:03:aa:cf:63:04:e9:86:4c:8f:65:35:4d:1b:
         c8:dc:10:d3:02:41:73:2c:3f:02:82:52:4b:fc:c4:3a:bb:48:
         33:b6:9e:32:ba:f1:86:4a:40:3a:66:98:62:11:c1:db:1c:73:
         02:df:8d:7e:99:a6:ef:30:ee:fa:33:29:b3:35:23:dd:7d:34:
         77:a6:9a:11:69:7c:3a:c3:8c:e1:89:0a:33:f7:9e:11:f4:44:
         90:4e:10:60:55:70:76:6e:86:63:a5:9f:58:7c:fd:bc:33:48:
         88:86:ed:51:49:db:1a:1a:d8:b2:70:9f:08:90:6d:46:fc:bd:
         86:08:3f:c4:d3:da:ab:9c:77:02:73:44:65:1e:c0:c1:d8:f8:
         35:42:9b:d4:ee:20:46:20:84:93:11:22:e1:8c:0c:53:57:6a:
         c0:36:18:e8:ec:21:50:6b:53:21:d9:ee:97:38:4d:b2:80:e5:
         9b:4e:aa:d7:72:f5:e6:87:ea:b6:de:57:df:d0:3b:c6:0c:f1:
         9e:b2:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 12:16:07 2026 by rpki-client