This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          mfWovlio/dTpoDhCXIK8q2AEvhjjf7SddLBqA40g6U8=
Subject key identifier:   B8:D4:DB:14:90:7D:47:52:C8:75:6F:32:D6:A7:2A:E4:DF:69:4C:E9
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0455
Signing time:             Sun 11 Jan 2026 00:06:13 +0000
Manifest this update:     Sun 11 Jan 2026 00:06:12 +0000
Manifest next update:     Sun 18 Jan 2026 00:06:12 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: lBR2f/3GMR6szw0OfsCVGwzFAVMO/GC02vAs8Fa3M5w=)
                          2: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          3: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          4: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          5: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          6: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          7: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
                          8: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          9: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: e79uMm9d9d2sMrfZFQKyNez6EK836OZIdpe1x4pJt20=)
                          10: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          11: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          12: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          13: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jan 11 00:06:12 2026 GMT
            Not After : Jan 18 00:06:12 2026 GMT
        Subject: CN=6962e974-5e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:39:07:e6:d2:b1:99:51:e9:7c:28:8c:cd:
                    89:78:c8:34:62:c2:25:22:b0:14:12:00:20:1d:01:
                    56:41:69:31:07:05:90:27:19:c1:36:56:ab:97:99:
                    29:68:8f:68:a3:5f:08:2b:1c:50:c5:fd:f1:b1:41:
                    c6:97:c0:9c:49:ee:68:6c:e8:1c:fd:95:f6:5b:c7:
                    2c:6f:c3:b5:35:94:8e:5c:00:91:e7:9f:9d:bc:bc:
                    cf:87:f2:61:5f:7b:41:53:2a:39:d5:da:7c:21:fa:
                    d6:bb:4c:6a:ba:87:53:87:58:12:99:55:2a:a0:39:
                    84:2f:3a:91:f1:f5:57:c9:30:b7:af:d8:20:f8:e8:
                    21:28:5c:f5:10:96:1e:bd:ef:fa:5c:6b:c3:64:b0:
                    4e:2d:32:34:a5:0b:59:48:e8:84:d9:93:cf:1a:d7:
                    e3:29:2b:ab:5e:8b:c0:7b:c3:c1:fd:2d:2a:cc:aa:
                    91:dc:65:17:8f:85:6b:8e:00:e6:c6:31:d8:76:aa:
                    99:73:88:d3:5b:96:38:22:b9:6c:67:81:c3:a4:27:
                    e2:78:23:f4:15:7d:12:b2:fb:8d:5b:db:17:8c:17:
                    37:4a:1b:d1:a3:6a:8e:57:f8:61:05:95:b1:ef:b1:
                    05:6e:5c:6a:cb:2f:7a:86:21:46:d5:84:64:3c:3a:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:DB:14:90:7D:47:52:C8:75:6F:32:D6:A7:2A:E4:DF:69:4C:E9
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:6b:16:b4:c7:65:5d:c4:4b:3e:87:08:11:4c:c2:00:ba:
         9a:78:72:e7:f9:40:6f:c3:62:15:a6:31:2d:0a:4d:cb:90:9e:
         cb:04:46:b0:e2:f7:e8:de:a8:5f:4b:1f:7e:23:0f:cb:13:72:
         af:d4:e0:4c:14:23:28:56:60:88:37:c0:4b:0c:51:fc:2a:c6:
         11:c2:22:9a:38:f2:60:1b:98:a9:38:8e:c3:21:d4:fb:ca:16:
         26:5e:a1:35:3a:c9:c6:f1:80:fb:f7:a8:d2:71:61:3b:bb:71:
         f0:d7:d2:05:5f:4d:6e:f6:f6:3e:f6:db:90:2c:44:c9:8a:f4:
         fe:c5:46:4b:c2:ca:ec:b8:05:5d:c6:03:1d:d6:71:62:b3:97:
         4f:e1:48:f2:87:7f:a6:cf:2f:64:b9:36:3c:5d:33:bc:89:e6:
         ec:b2:5d:81:da:01:31:18:b1:22:16:2b:4a:8b:d6:a7:3b:0f:
         20:04:f1:14:06:26:42:0d:e2:6f:6c:f8:2e:9e:66:af:50:77:
         43:d7:a9:ea:87:77:9b:2d:45:aa:f5:12:41:da:6c:31:9e:2f:
         fe:03:70:68:35:a5:f5:51:f2:1e:5a:ee:5d:12:aa:eb:a3:c9:
         ee:35:73:af:83:04:0d:ed:52:c9:25:bb:ce:f1:65:a3:28:27:
         f4:56:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 05:34:01 2026 by rpki-client