This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File:                     U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier:          eCIEmkEv7n3phW7NxERFh1q9IRphBQWhbf0Wq+Bso3A=
Subject key identifier:   FD:F5:AD:D1:26:9A:71:FD:DE:84:73:B4:9D:E8:4C:76:EE:84:A6:57
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer:       /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial:       05C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number:          05B1
Signing time:             Mon 26 Jan 2026 22:21:19 +0000
Manifest this update:     Mon 26 Jan 2026 22:21:18 +0000
Manifest next update:     Mon 02 Feb 2026 22:21:18 +0000
Files and hashes:         1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: ikpttceENT5hNzFNBiHVF/i3C7tUt6624h/+HD4zy0U=)
                          2: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: k5X4by3Br8W/PYfkmb4iRMPeho37AmOnY5X1wBHf0bs=)
                          3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: 0dj9Leao2hIOrNuzQzhTyOKvRe7wijLNctX+F2sNN6Y=)
                          4: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: gBnTTYjyqczZgDb3uD73c44S0Waa5svUhRxTsEIxWDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 22:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
        Validity
            Not Before: Jan 26 22:21:18 2026 GMT
            Not After : Feb  2 22:21:18 2026 GMT
        Subject: CN=6977e8df-8ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:f6:b0:15:b3:dc:e9:fd:18:6b:a8:93:87:
                    80:4b:ed:39:6c:bd:99:fd:42:b8:cd:7f:1f:7d:9b:
                    a1:a2:54:5f:d6:b4:f2:a2:90:90:a8:b9:15:7d:0a:
                    e8:b7:fb:67:c7:4a:26:a9:af:36:01:16:88:e8:77:
                    56:35:33:da:ba:22:77:76:8b:42:59:da:c4:75:5b:
                    d8:59:f7:dc:5b:be:2f:6b:f5:f5:45:78:0b:0b:c9:
                    fc:f9:58:40:4d:1c:ba:db:c4:4e:e8:3b:46:cf:fe:
                    60:dc:61:a4:16:e0:00:ba:05:e8:9c:90:1d:fa:4b:
                    23:cd:36:a2:04:f0:2e:c2:32:98:4a:2c:c3:7d:a3:
                    bb:b7:0f:42:cb:66:56:4d:0b:6b:a6:15:c8:4e:ad:
                    7b:e0:c6:44:1f:98:11:14:60:cd:39:b6:0d:ae:7e:
                    5d:2a:13:07:75:c3:56:14:f2:c3:21:b8:73:90:4c:
                    aa:3f:0e:0b:39:a1:22:69:a4:b3:ae:8e:8c:17:b8:
                    3a:86:2c:b0:dc:b9:6c:8b:93:20:83:2e:76:76:f7:
                    2a:8a:6e:30:b5:43:14:ed:d1:8c:5b:78:83:de:91:
                    2f:dd:c4:02:c8:05:78:10:36:91:26:76:04:d6:61:
                    13:82:9c:3a:a1:1a:ab:8f:05:4b:24:6b:0e:8a:ec:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:AD:D1:26:9A:71:FD:DE:84:73:B4:9D:E8:4C:76:EE:84:A6:57
            X509v3 Authority Key Identifier:
                keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:3c:57:a2:13:31:91:87:bd:f1:90:5b:99:6b:e3:f9:92:
         ae:ba:3e:2f:c1:b8:53:db:38:9b:07:0c:5a:4d:e1:c8:a8:3f:
         39:6a:a3:02:0b:53:90:76:c8:b4:8c:85:a1:2a:91:8d:ec:4d:
         6a:fb:50:07:70:ed:75:ea:29:3f:50:23:19:f2:f7:66:ae:7a:
         98:8e:36:b7:9b:2f:00:42:21:5e:75:79:96:db:d6:92:8c:61:
         b2:ff:da:6f:22:7c:9c:1d:99:79:89:73:42:8c:7c:09:92:92:
         2e:15:55:d4:d9:f0:fb:15:8c:a0:80:2f:90:89:4a:a2:00:97:
         ac:cf:d3:e6:95:c9:80:03:c1:56:c5:7b:11:b5:9b:00:bf:e1:
         78:19:69:05:42:77:66:40:df:40:5c:5c:22:83:08:1e:09:ca:
         a5:a4:06:d0:7a:60:bc:a8:84:9e:1b:21:60:ad:88:4f:c6:a8:
         be:66:e0:5c:48:7b:ec:c6:d9:e2:74:d8:3b:a1:46:9b:30:80:
         05:f4:ed:7e:a9:3d:77:1a:ea:50:20:d9:04:fc:05:fd:c3:52:
         71:ad:31:43:fd:2b:03:f3:10:58:c8:33:e8:47:87:d4:ae:13:
         41:2d:88:c6:4b:3c:18:80:10:6c:1e:7d:6a:a0:54:4d:d7:de:
         83:5e:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:37:05 2026 by rpki-client