This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
File:                     iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json)
Hash identifier:          hL5EZ6lrMaBfebKMXpnWRXSkYttfqgtGml43YoJsivY=
Subject key identifier:   98:EE:F8:0E:E6:C0:0C:2B:66:13:68:C3:D2:8D:F8:85:2F:96:38:11
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Certificate issuer:       /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial:       13F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
Manifest number:          13BE
Signing time:             Mon 26 Jan 2026 16:42:24 +0000
Manifest this update:     Mon 26 Jan 2026 16:42:24 +0000
Manifest next update:     Mon 02 Feb 2026 16:42:24 +0000
Files and hashes:         1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: 1UHXL3cyTQF6q09YkAI1HYEOerlxIV4emj7XFrAHBG8=)
                          2: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 96q0yHBSk/Rmlo0qmQ4XhZWgKPNkJp4u/4iyHTCtNz4=)
                          3: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: GoAy5cjhZ6tHusMFJznhNoSIq/l4hxWlmp0vD6wrtPc=)
                          4: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: jOCYNbolAoXMHScfQ9iviRSTkspAFWIu2eYuLyyZDaI=)
                          5: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: Ev9eMpCw/MzuG/D+D40guHshDgyLCaCtAL+5ytANYiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 16:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5106 (0x13f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
        Validity
            Not Before: Jan 26 16:42:24 2026 GMT
            Not After : Feb  2 16:42:24 2026 GMT
        Subject: CN=69779970-d9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:02:4a:e2:c7:5a:73:4d:a8:65:61:c9:5f:
                    49:95:f0:7f:44:8d:18:13:2b:4e:c7:90:ab:d9:e2:
                    06:20:3f:04:36:21:4c:94:c0:e5:8d:77:a9:d4:29:
                    21:c8:bc:99:57:d5:51:8b:03:11:66:a6:be:9c:09:
                    b7:13:9e:6c:7a:b0:bf:ed:5d:8e:d2:8b:7c:e4:b4:
                    29:17:22:73:af:94:ae:b8:37:ab:4b:ea:ce:87:ec:
                    a2:cb:1f:d2:58:e8:88:84:40:df:b3:17:a3:eb:82:
                    3f:92:46:0b:0d:3d:b6:a1:61:8f:17:02:3c:cf:c1:
                    d5:12:ff:86:85:6f:58:97:bd:d5:b7:f4:74:09:a6:
                    d1:33:b9:dc:c0:92:57:8f:e4:32:10:18:28:a9:1c:
                    03:61:23:a6:b3:25:78:9b:f6:9f:0c:ef:eb:55:0d:
                    73:ff:92:84:4b:0a:17:d3:8c:41:93:c6:26:0b:cf:
                    3a:4e:0a:9e:e8:8c:3c:89:8e:e0:37:d4:9f:74:2b:
                    83:7a:94:73:42:40:0b:5f:ac:ea:39:45:c2:2e:e5:
                    69:69:e2:e2:d7:e3:8a:06:9f:49:26:7c:06:9a:40:
                    29:fb:9b:7d:b9:33:15:54:1d:86:d2:3a:a6:46:5b:
                    14:42:e4:e6:39:56:56:cb:dc:c7:25:c0:b6:53:03:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:F8:0E:E6:C0:0C:2B:66:13:68:C3:D2:8D:F8:85:2F:96:38:11
            X509v3 Authority Key Identifier:
                keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:d9:07:4b:b3:da:f7:18:27:3a:15:05:03:14:5b:6d:d2:
         f7:43:f0:24:9d:db:3e:9d:a1:80:ed:48:e3:c2:c9:bb:8e:62:
         b1:03:24:36:fb:ed:aa:09:7b:4b:4a:ed:1e:3a:fd:68:85:cb:
         23:29:08:be:85:85:08:74:0a:80:e6:66:1d:69:5a:e1:36:59:
         10:e4:6a:65:a1:39:ac:cf:95:d6:7c:e8:ce:64:70:cc:00:cd:
         fa:17:40:50:ec:7e:8c:21:14:9b:8a:4b:35:a3:a0:54:be:76:
         d9:95:32:d5:40:b9:1e:c8:65:d5:97:fa:54:dc:33:fb:95:47:
         84:9d:b9:03:09:97:5b:05:5a:f0:2f:12:18:38:7a:d7:dd:db:
         75:e1:7e:7f:02:c4:24:57:2a:f9:81:46:ce:a7:f5:3a:32:ef:
         26:14:f0:4c:a1:55:c7:9f:d9:34:e0:61:03:89:4e:32:ca:5e:
         25:ab:4e:14:96:3a:b4:1e:7b:9c:87:37:79:72:e9:32:eb:9b:
         21:7f:36:62:f8:f8:be:54:8b:63:12:02:64:19:6e:f3:51:ba:
         e0:85:04:a5:f7:45:6a:37:68:48:29:18:bf:ef:50:f1:94:9e:
         4f:45:a9:c3:c1:a8:01:af:f9:0a:f3:e9:80:44:41:94:d6:60:
         2a:1b:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:44 2026 by rpki-client