This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File:                     5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier:          hNdooXTajfmwagB97Ap45xq4tISpVVJbNOW8GUaXW70=
Subject key identifier:   6D:7B:7F:DB:88:8C:FC:55:26:2E:BC:DD:DB:E3:0B:5E:B5:4D:00:0B
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer:       /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial:       0947
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number:          0926
Signing time:             Wed 04 Feb 2026 19:41:34 +0000
Manifest this update:     Wed 04 Feb 2026 19:41:33 +0000
Manifest next update:     Wed 11 Feb 2026 19:41:33 +0000
Files and hashes:         1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: TPk6lNY7qiZ3ET2dLkI+XfTIwCUe70QdkxliiLlxN7E=)
                          2: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=)
                          3: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=)
                          4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=)
                          5: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=)
                          6: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
                          rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Feb 2026 17:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375 (0x947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
        Validity
            Not Before: Feb  4 19:41:33 2026 GMT
            Not After : Feb 11 19:41:33 2026 GMT
        Subject: CN=6983a0ed-241b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:02:92:59:d5:48:46:41:a5:4b:8d:b7:dc:66:
                    b1:10:0a:f4:7d:95:59:c5:2c:0c:21:13:d8:7f:5b:
                    f0:65:63:09:84:ef:8b:bb:99:9f:07:ba:50:18:fe:
                    4f:ba:b2:8f:54:70:14:9f:64:c1:e7:0b:de:79:f8:
                    68:a0:92:fd:a8:62:9c:0f:88:32:f7:aa:86:ed:1b:
                    f8:ff:79:03:7e:7d:2d:15:97:a9:6a:c5:d0:83:20:
                    97:e9:57:3c:45:e5:6a:8d:6c:4f:2a:08:19:d1:2e:
                    d1:aa:b4:64:d0:7b:09:bd:39:9e:9f:45:5d:96:b8:
                    5f:2e:99:9c:62:e3:4a:ac:7d:d1:29:b8:0e:b3:81:
                    e3:45:07:21:07:d7:f5:40:08:2c:38:ad:16:6d:1f:
                    97:83:ea:54:60:5f:5f:f9:29:5e:0c:2e:5b:33:67:
                    db:67:9d:41:50:5a:25:a6:9a:16:e9:e1:11:02:26:
                    87:16:74:63:cb:ca:9f:3a:ea:de:06:9e:c6:75:cb:
                    c3:12:be:fe:cb:97:a2:68:7c:b1:0e:32:95:1a:07:
                    25:50:00:1d:48:35:74:13:bf:58:bb:73:5e:7f:fe:
                    26:0e:3a:46:00:3d:92:84:a2:c3:36:40:39:9b:cf:
                    eb:42:a9:fe:9f:56:a6:61:e2:22:0e:12:59:37:56:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:7F:DB:88:8C:FC:55:26:2E:BC:DD:DB:E3:0B:5E:B5:4D:00:0B
            X509v3 Authority Key Identifier:
                keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:02:63:dc:dd:62:78:c4:20:37:05:cb:af:24:16:61:af:
         03:b0:52:a4:41:b1:c2:df:c3:bc:fe:f6:f1:1b:04:be:8d:2d:
         69:ea:8f:49:24:ee:8e:b1:2c:8e:ab:ad:19:5d:24:b9:29:02:
         54:f7:65:e0:39:eb:c2:fc:2b:59:aa:1b:50:49:eb:00:e9:fc:
         3e:15:63:a8:51:b8:8c:8f:d9:bf:d4:78:28:ed:c4:49:1a:84:
         8b:5e:2f:55:89:6c:0b:64:c3:1f:8f:72:a4:ec:52:66:5a:78:
         95:89:e2:6e:fa:a2:82:dd:ec:3e:0f:b5:70:cf:b9:6c:3d:9e:
         20:5d:1e:a8:25:4a:0c:91:1f:77:76:4a:5e:a0:b1:3b:77:17:
         d0:68:56:f4:f4:0d:00:26:14:50:a3:72:b3:a1:85:a5:a1:c3:
         e0:2d:15:aa:62:8f:5e:3b:17:df:b2:dc:55:79:e5:f0:c3:e4:
         e2:58:77:52:d8:38:ef:f0:da:c0:67:56:8c:b6:b9:b5:b5:d4:
         63:4a:08:c8:41:85:14:8b:99:c3:af:d8:3d:6e:fc:62:e1:78:
         40:97:41:6a:74:27:08:04:13:f1:74:a4:d9:aa:21:a3:91:43:
         88:51:c4:c1:fd:cd:25:2c:45:10:5e:03:f3:30:e6:66:3c:67:
         27:d9:1d:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1
QTUwMjcwRTMwHhcNMjYwMjA0MTk0MTMzWhcNMjYwMjExMTk0MTMzWjAYMRYwFAYD
VQQDDA02OTgzYTBlZC0yNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+AKSWdVIRkGlS4233GaxEAr0fZVZxSwMIRPYf1vwZWMJhO+Lu5mfB7pQGP5P
urKPVHAUn2TB5wveefhooJL9qGKcD4gy96qG7Rv4/3kDfn0tFZepasXQgyCX6Vc8
ReVqjWxPKggZ0S7RqrRk0HsJvTmen0VdlrhfLpmcYuNKrH3RKbgOs4HjRQchB9f1
QAgsOK0WbR+Xg+pUYF9f+SleDC5bM2fbZ51BUFolppoW6eERAiaHFnRjy8qfOure
Bp7GdcvDEr7+y5eiaHyxDjKVGgclUAAdSDV0E79Yu3Nef/4mDjpGAD2ShKLDNkA5
m8/rQqn+n1amYeIiDhJZN1bHWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG17f9uI
jPxVJi683dvjC161TQALMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5
RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX
eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfPwJj3N1ieMQgNwXLryQWYa8DsFKkQbHC38O8/vbxGwS+jS1p6o9J
JO6OsSyOq60ZXSS5KQJU92XgOevC/CtZqhtQSesA6fw+FWOoUbiMj9m/1Hgo7cRJ
GoSLXi9ViWwLZMMfj3Kk7FJmWniVieJu+qKC3ew+D7Vwz7lsPZ4gXR6oJUoMkR93
dkpeoLE7dxfQaFb09A0AJhRQo3KzoYWlocPgLRWqYo9eOxffstxVeeXww+TiWHdS
2Djv8NrAZ1aMtrm1tdRjSgjIQYUUi5nDr9g9bvxi4XhAl0FqdCcIBBPxdKTZqiGj
kUOIUcTB/c0lLEUQXgPzMOZmPGcn2R2Z
-----END CERTIFICATE-----
Generated at Wed Feb 4 22:00:56 2026 by rpki-client