This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          ZSNmUB+VgVSeKh9jTpxHH3yDS9zb5jNdStSqKFnSfPM=
Subject key identifier:   FE:9F:35:CF:B7:12:89:47:81:01:C7:AC:C6:D8:DA:50:7E:92:63:21
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0458
Signing time:             Sat 17 Jan 2026 00:00:39 +0000
Manifest this update:     Sat 17 Jan 2026 00:00:39 +0000
Manifest next update:     Sat 24 Jan 2026 00:00:39 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: A/NqzWvnle/Ly7zSsVfSeBHk1n7cXtPBhazDnP9y8wI=)
                          2: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          3: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          4: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          7: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          8: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          9: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          10: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          11: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jan 17 00:00:39 2026 GMT
            Not After : Jan 24 00:00:39 2026 GMT
        Subject: CN=696ad127-c172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:20:2d:db:3b:33:63:b6:1a:9d:c6:be:5b:
                    05:6d:1c:dd:c6:8f:9f:74:c5:3f:50:91:1c:88:6f:
                    a7:5a:e0:7d:07:31:56:e7:38:f3:1f:b6:b5:8d:d3:
                    f2:c6:b7:26:a2:b1:cc:1f:fe:8b:59:f9:63:9c:7b:
                    ac:59:ca:bd:41:6a:04:1a:3c:fc:9d:14:2d:35:c5:
                    33:20:04:4c:56:72:06:fa:23:aa:b6:06:cf:c9:9c:
                    8d:c6:fe:9b:be:4d:54:7e:30:22:15:4a:14:7c:d8:
                    5e:24:8f:3b:12:cd:27:0d:2e:5f:d0:06:96:30:ac:
                    06:79:9a:ec:f7:d1:83:a7:2f:b1:9f:00:a1:70:17:
                    88:80:f2:6f:ff:d3:0a:b2:6b:aa:34:2f:b5:3a:61:
                    e6:16:de:5b:5f:3e:94:a2:38:4d:34:6b:67:3b:78:
                    0c:ae:6e:d4:c7:51:9f:d0:6c:5d:db:6b:32:4f:c9:
                    3a:1e:c8:15:d1:65:33:1f:32:00:00:cd:50:f1:e5:
                    7c:bc:cb:c9:83:9c:c6:78:e9:f4:36:e0:b8:f6:97:
                    42:ec:40:23:4b:dc:f4:9c:1b:f3:20:38:2c:81:52:
                    8f:12:ce:0a:7c:be:de:b0:06:b2:63:bb:6c:0f:69:
                    49:b4:1f:99:62:0a:5b:87:f7:a5:cf:21:61:2a:70:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:35:CF:B7:12:89:47:81:01:C7:AC:C6:D8:DA:50:7E:92:63:21
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4d:01:6f:4f:5c:fe:90:0e:2e:32:f7:b0:ae:ab:e6:94:79:
         a2:86:9f:14:9c:22:95:2f:d7:b8:ad:83:2b:e3:42:2c:85:5b:
         d6:09:73:67:ae:bc:dc:02:1b:83:0b:44:20:0b:2c:e5:b6:da:
         92:7b:bf:42:27:f5:ef:5f:d3:58:03:f1:61:74:60:60:d4:43:
         24:11:cc:ed:fc:e9:5d:3b:c0:95:56:cd:e8:53:ab:2d:d6:b8:
         86:e6:8a:c3:12:2c:5a:83:10:b1:88:12:a8:fa:5a:2a:71:8b:
         39:4f:9f:e7:32:f5:0d:c1:29:24:88:7c:bc:84:2f:e4:8b:ee:
         35:da:a9:32:d4:e6:a0:ce:aa:5c:b4:42:30:cd:06:95:f6:4c:
         14:83:43:40:8b:57:d6:46:82:72:6f:e3:7f:db:be:44:2e:bc:
         fb:61:47:15:49:f5:ec:c3:5e:21:19:da:24:d7:4b:dc:bf:29:
         3b:56:80:ff:8d:0b:73:ec:6b:8e:c0:db:84:18:c0:c9:b5:5f:
         3d:78:2e:ed:36:3c:66:c1:98:13:7a:4f:59:4d:99:6b:87:3a:
         d6:e9:3c:01:9f:1a:1d:d2:34:d6:9c:be:81:2f:e3:82:4a:e6:
         06:db:12:4f:32:bc:ee:d5:bc:a7:22:ea:a8:3e:96:af:af:33:
         2c:0f:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:32:41 2026 by rpki-client