This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          iIW0IjT5dOMDrDQCpWuXct8Do5KA23B/jNXtBcR0hGc=
Subject key identifier:   AF:02:C6:E4:1C:A1:6F:C7:95:1F:E0:96:CF:2C:5D:00:43:95:AE:F8
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0462
Signing time:             Thu 05 Feb 2026 10:33:15 +0000
Manifest this update:     Thu 05 Feb 2026 10:33:14 +0000
Manifest next update:     Thu 12 Feb 2026 10:33:14 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: nVLVc2WrGqhH0VHZ1en+AZSYX6oYF40L/ONskOw5yFw=)
                          2: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          6: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          8: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          10: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          11: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          13: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          14: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 10:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Feb  5 10:33:14 2026 GMT
            Not After : Feb 12 10:33:14 2026 GMT
        Subject: CN=698471eb-c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:9e:2b:c4:0c:95:4e:c5:e4:dc:bd:bf:10:
                    c6:8a:90:96:8d:69:15:a6:f7:d8:e1:be:da:3d:2d:
                    92:6b:a3:05:dc:44:8b:25:04:e1:28:bf:7f:50:57:
                    61:3e:19:61:c5:52:8c:22:50:18:87:b7:c4:9a:70:
                    73:66:b9:21:09:0a:76:ca:c1:f6:88:2c:63:64:34:
                    44:1a:01:d8:a5:4c:a8:09:e3:65:2c:e1:26:8d:34:
                    7f:96:24:d9:08:07:c0:e8:61:b9:81:59:dd:51:a5:
                    55:b9:04:79:cc:a0:2c:8b:7e:37:7f:93:d0:a0:00:
                    cf:3e:19:a8:9d:4a:71:a5:aa:62:96:9e:f8:c5:21:
                    df:d3:2c:51:ac:e5:0e:f0:e6:19:12:c0:13:6a:b4:
                    a2:4b:e6:bb:91:ee:29:7a:a2:25:bb:f5:05:ae:4c:
                    f6:02:d3:62:a8:08:7d:aa:18:31:f2:0a:48:db:81:
                    6c:87:ac:f8:cb:f3:15:4e:0c:44:1f:7a:06:42:fa:
                    11:65:c5:7a:ed:e7:4d:d0:b9:0e:4a:60:0b:ba:3d:
                    92:03:d5:c9:66:e5:9f:60:e2:bc:00:ce:f6:5c:a8:
                    79:2a:43:ac:43:50:65:cf:b8:b8:72:80:8b:8e:cf:
                    10:5f:1c:a6:7c:81:14:ba:16:04:27:04:48:eb:9b:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:02:C6:E4:1C:A1:6F:C7:95:1F:E0:96:CF:2C:5D:00:43:95:AE:F8
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:28:49:6a:08:8b:db:f0:4c:70:3f:fd:df:ca:ba:d3:89:
         2f:09:d5:15:95:12:a6:fe:69:00:64:c5:b6:48:f6:9c:75:6f:
         09:96:16:c0:75:6a:2b:18:6b:05:6d:97:1f:2a:69:13:2d:a5:
         85:03:d3:0a:f4:56:0c:4c:d4:df:2a:ef:1d:a1:ad:d7:49:50:
         84:f6:ff:78:f0:78:4e:b6:ce:2c:b5:b9:a3:62:77:cc:10:ad:
         f2:74:53:31:40:fe:c3:2b:32:80:7b:89:4f:a2:aa:36:fa:97:
         12:c2:c3:26:3a:5b:45:83:d6:13:9f:ea:eb:51:b3:c0:d4:29:
         e0:12:58:e0:0e:2d:a1:5a:9c:2a:69:6b:72:ff:08:ef:f9:2a:
         91:40:41:2c:0f:46:d4:17:79:a4:f6:eb:70:7e:b1:46:70:c3:
         79:bd:20:e8:7e:56:04:4e:ff:33:30:f8:84:27:05:44:90:e1:
         ee:a9:c5:01:91:dc:25:90:c9:a2:11:b2:11:65:fd:74:1a:7b:
         2b:a8:66:7b:c8:73:28:52:41:c3:1a:f4:3e:98:94:ba:51:98:
         9f:60:74:51:3a:e1:cc:af:66:25:ab:f3:8f:c2:8d:69:77:45:
         c6:11:4a:1b:f6:fd:62:a7:d3:6c:85:cb:92:1d:2e:23:87:b0:
         fd:6f:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:39:56 2026 by rpki-client