This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File:                     diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier:          CYztdv15rJKCGmKnTilqjbDMdgek18UnQtFtGc7fPPQ=
Subject key identifier:   AE:74:9F:F0:21:AB:61:51:E6:53:81:B9:71:2A:A2:B2:DC:EF:ED:FE
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer:       /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number:          B5
Signing time:             Thu 01 Jan 2026 05:37:15 +0000
Manifest this update:     Thu 01 Jan 2026 05:37:14 +0000
Manifest next update:     Thu 08 Jan 2026 05:37:14 +0000
Files and hashes:         1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: HycOrmP97MCkvFgU+1NJxhec3Mlw9s3WxRgAK2thDJs=)
                          2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: HTX8AzlBVBkYFaGVRN5GWHgC9HxdFLqil4uBj/GLN6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
        Validity
            Not Before: Jan  1 05:37:14 2026 GMT
            Not After : Jan  8 05:37:14 2026 GMT
        Subject: CN=6956080b-db7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:a8:14:17:d1:a0:41:5a:5a:82:94:e9:db:
                    90:9b:58:16:82:32:31:7b:12:f4:06:9c:0a:d0:62:
                    f6:64:b3:76:66:f1:68:38:ae:6c:88:d8:f8:4c:6d:
                    d2:8b:81:30:71:e8:92:a2:17:04:f5:e0:8b:13:27:
                    73:a3:86:1a:b4:b3:0d:71:41:0d:3d:d6:5d:c5:04:
                    d1:63:ae:c1:51:0b:00:49:a2:29:a7:01:81:1a:92:
                    8c:84:ec:b2:c9:2c:36:7b:25:2a:5b:59:d1:17:ae:
                    66:49:55:36:e9:5f:9f:60:47:01:b5:09:8d:aa:3b:
                    8e:3e:88:ec:2f:d2:aa:ee:b2:7a:19:3f:6e:e0:c2:
                    76:c3:72:4f:dc:44:54:2a:c6:01:6b:16:35:38:0a:
                    dc:49:4d:08:85:27:8a:e4:72:f5:6d:fb:10:c3:34:
                    50:90:cf:05:b5:74:d4:13:ad:32:9c:66:f0:44:ec:
                    b9:a3:1a:74:a8:bb:b6:24:ac:c3:fc:d8:82:38:fd:
                    bb:b7:61:77:c3:e7:75:5a:64:0e:8b:ba:89:80:25:
                    19:29:dc:94:74:fd:6b:ba:83:94:bc:6c:cd:82:f4:
                    13:28:03:3c:c7:33:c4:29:a7:7b:23:54:ad:bf:eb:
                    39:18:57:f3:48:02:52:83:58:91:36:d0:93:e3:50:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:74:9F:F0:21:AB:61:51:E6:53:81:B9:71:2A:A2:B2:DC:EF:ED:FE
            X509v3 Authority Key Identifier:
                keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:9d:95:fc:05:4a:58:aa:39:6a:95:75:04:de:82:8f:02:
         e9:b5:8f:37:60:cc:97:4c:37:38:2b:e7:b6:8e:cc:5f:81:3d:
         e3:db:db:4a:f2:c4:6b:06:e8:b2:c9:d5:93:91:20:25:2e:05:
         14:d5:2f:89:00:91:d9:15:79:90:de:77:52:f6:4d:24:b9:d3:
         23:af:02:b5:0a:27:06:ad:73:ad:bc:6f:a0:37:90:49:c8:a6:
         21:63:40:e9:89:44:1c:c3:7a:c0:c4:3f:f5:0e:5d:8d:dc:9e:
         9b:a6:c6:88:43:47:77:f9:60:bf:2e:09:03:1f:9c:cd:24:c7:
         e2:68:51:4d:17:0c:87:79:4a:14:13:48:d9:a4:d8:75:3b:ea:
         95:09:da:55:08:8c:b7:76:3a:f6:16:25:fa:55:7c:e8:61:f6:
         ee:63:14:58:20:23:8f:d5:36:5b:91:d0:c6:f5:40:ab:10:bd:
         bb:ba:21:1e:0c:60:67:be:c0:1a:29:f8:0f:3a:97:9c:06:6d:
         6b:86:64:76:83:d1:93:89:e0:e2:af:8d:4b:69:af:88:c2:6a:
         6e:5f:e2:a8:86:e9:a3:77:43:66:4d:99:51:c1:15:f6:2f:e0:
         6b:d9:ac:06:ac:8e:19:31:5d:37:f7:89:c5:5f:a4:34:33:f8:
         ef:39:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 17:17:12 2026 by rpki-client