This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          dEhaMvRGGRdiypNdwaK8jfcSOh6PKImpiP9Xeg18gow=
Subject key identifier:   B2:7B:DB:21:23:76:FA:67:20:81:94:4C:23:BF:13:17:1F:1A:47:E5
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       052C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          045A
Signing time:             Wed 21 Jan 2026 00:02:32 +0000
Manifest this update:     Wed 21 Jan 2026 00:02:31 +0000
Manifest next update:     Wed 28 Jan 2026 00:02:31 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: QbRaRrQTozu1K9QdfUpuTr+5ySuE0SnEsOXiTBJsXe0=)
                          2: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          3: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          4: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          5: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          6: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          7: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          8: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          9: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          10: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          11: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          12: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jan 21 00:02:31 2026 GMT
            Not After : Jan 28 00:02:31 2026 GMT
        Subject: CN=69701798-49bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:38:6f:8a:76:dc:0c:ee:05:bf:1e:cc:89:
                    d1:82:17:ce:42:03:54:09:c5:a4:fe:31:16:fc:16:
                    38:41:0e:a5:a4:d5:b1:ed:d2:56:65:9f:f8:33:93:
                    8a:61:a0:0c:e5:ab:5a:74:11:8f:18:59:14:2a:9a:
                    1e:fb:58:ed:fd:70:39:d4:21:e6:05:89:e2:40:10:
                    64:22:56:75:c2:56:61:a7:10:94:80:d7:c9:4e:11:
                    2a:2e:d0:e5:66:4c:84:12:e7:a4:94:52:d2:51:c9:
                    44:ef:03:98:31:2e:4e:49:1f:72:19:ae:71:84:6a:
                    2c:89:df:ae:df:3e:57:ba:ac:ac:d9:69:35:cf:4a:
                    68:c6:fc:cf:69:47:d8:7c:e3:d6:31:74:c7:dc:82:
                    71:3a:53:2d:a9:b8:ed:5e:8a:02:3b:dd:39:32:a0:
                    9a:4a:a8:19:18:b2:d3:e5:05:93:5c:43:03:c8:0d:
                    43:76:67:57:87:60:33:12:79:5c:37:09:7e:7a:d2:
                    96:e5:c1:da:71:22:da:34:c7:ca:2d:28:58:93:32:
                    b7:bc:5b:f8:1b:15:51:30:db:64:e3:34:a0:45:d7:
                    50:3c:8a:b5:fe:2f:e4:9d:4b:2d:60:c0:d1:9b:ee:
                    09:8b:f8:af:4b:5c:a4:34:d9:1e:06:88:23:bd:e8:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:DB:21:23:76:FA:67:20:81:94:4C:23:BF:13:17:1F:1A:47:E5
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:78:27:83:7c:68:0d:22:3f:a8:c4:c3:bd:ab:33:a0:b0:b3:
         4d:75:da:1b:2d:c4:3f:8d:b2:4b:91:01:4d:57:9d:4b:81:ea:
         a6:5e:3d:4b:88:d6:d3:38:fa:10:e4:aa:79:ba:b5:5f:4c:03:
         29:29:e8:80:a0:25:74:30:e3:81:23:dd:7b:f1:02:18:78:bf:
         d2:a7:d7:da:72:6f:fa:fa:46:0c:93:94:7f:b5:3c:2b:88:c3:
         e7:c0:2b:f5:a8:50:87:80:70:37:9e:26:1b:88:eb:20:4f:48:
         f2:ab:0a:27:17:7a:ee:9f:7d:b9:1b:99:c3:2b:96:11:0d:00:
         bc:95:25:4c:f5:ae:89:85:00:01:ff:bd:51:1e:8d:57:0a:63:
         db:6c:f4:94:cf:58:e7:ab:59:6d:71:9c:76:69:72:38:3b:b8:
         19:70:41:9f:2f:50:a5:65:c9:28:31:7d:29:ee:4c:c3:d3:6c:
         29:8e:72:8e:f8:9f:c0:c0:ad:fc:0c:a2:01:a3:d8:56:5a:48:
         74:cd:fe:f1:df:e8:ae:40:97:cc:9f:ba:87:60:b3:ec:ef:10:
         4e:cd:c5:c0:a5:e4:43:40:af:e1:a3:fc:99:0c:ea:66:30:83:
         b2:af:4b:a7:05:21:26:9b:a1:b9:97:ca:e4:a9:1d:3c:46:c6:
         a4:04:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:23:02 2026 by rpki-client