This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File:                     5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier:          6qXBKfmZtpUYkgLUR+ndRNoBN4qvuxRbKosc3I/Odo0=
Subject key identifier:   BF:73:75:71:4F:AD:63:DA:C8:17:4B:33:D9:39:F8:0F:16:41:4A:4B
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer:       /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number:          020C
Signing time:             Sun 11 Jan 2026 01:38:23 +0000
Manifest this update:     Sun 11 Jan 2026 01:38:22 +0000
Manifest next update:     Sun 18 Jan 2026 01:38:22 +0000
Files and hashes:         1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: 6ZtYgMb1tEZBEeaP6pbKCw5XTLt6xW3Y8prdBqHWgqc=)
                          2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
                          rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
        Validity
            Not Before: Jan 11 01:38:22 2026 GMT
            Not After : Jan 18 01:38:22 2026 GMT
        Subject: CN=6962ff0f-d83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:63:01:45:dc:ee:ec:1d:16:b1:ce:69:2d:
                    8a:27:c6:99:cc:cc:88:0d:2b:98:90:7d:90:45:6a:
                    2c:65:69:f0:8e:34:ae:5c:17:4d:e2:d1:a9:82:cb:
                    1f:7d:23:2c:9b:e4:9a:af:31:f2:50:fb:1f:3f:c0:
                    fd:c9:43:b7:dc:d7:b6:50:ab:cc:5f:68:c8:ba:4a:
                    f2:ba:20:0d:f9:48:0e:fe:91:ec:61:fe:b1:ae:68:
                    01:23:1b:a7:82:d2:5f:ae:2a:4d:31:b6:96:60:ef:
                    0a:40:cd:b9:c7:ee:06:9c:0c:e4:46:37:00:a6:ee:
                    65:c5:ce:3f:f8:00:7f:0f:51:cb:6f:58:d2:81:be:
                    85:f7:eb:7c:a0:1b:cf:60:73:6d:8b:c4:5e:84:9e:
                    cc:28:67:9c:14:1c:a9:64:30:c1:5a:57:6b:79:fe:
                    54:3b:9a:20:6d:ad:ac:bd:a4:5e:a9:39:71:0a:7b:
                    c7:67:e7:3d:b8:98:35:1b:c8:47:bd:47:1c:f9:29:
                    51:dd:a0:46:ed:c1:d4:88:1c:d9:e4:62:0e:02:5c:
                    61:f8:36:d9:aa:69:04:83:c0:1b:ca:fc:94:c1:05:
                    04:4f:00:b2:e1:ac:ed:7d:59:e5:3a:46:75:e7:55:
                    22:bb:8d:bb:ae:70:66:ab:01:74:21:f6:88:83:39:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:75:71:4F:AD:63:DA:C8:17:4B:33:D9:39:F8:0F:16:41:4A:4B
            X509v3 Authority Key Identifier:
                keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f1:c2:31:8c:03:36:0e:6a:3e:a7:4e:cd:dc:da:3c:9f:6d:
         ee:eb:80:87:df:c5:fd:a6:2e:43:29:9d:75:87:fe:64:73:63:
         64:a7:6c:28:c7:4c:9f:2d:42:17:7c:fb:db:1b:3a:91:10:12:
         87:80:21:cb:32:0a:d3:ed:fd:b1:e1:17:af:94:43:16:06:be:
         ba:95:b8:05:b9:04:da:6f:fb:2a:d0:8b:17:f0:ad:9f:7d:84:
         e4:20:bb:3a:f2:4c:89:98:84:99:b7:95:45:44:eb:af:8e:18:
         aa:60:f8:b4:05:9a:d6:a8:dd:52:2c:36:d0:b0:ef:77:dd:f9:
         c2:d7:cc:59:eb:35:d4:0e:62:4c:7d:f6:df:b5:ed:35:4d:67:
         70:eb:e5:17:32:07:f7:9d:c2:2d:ac:3b:79:05:3f:c9:6a:86:
         80:69:c0:ee:5d:db:a2:73:cf:2e:b8:ef:76:f3:f1:0d:c7:b5:
         44:b3:4e:c5:8b:b5:6e:b4:bf:df:2f:94:e1:7b:1e:19:a6:ca:
         f7:8c:6d:a2:3e:e4:8c:bd:f6:ab:66:75:3a:73:06:f7:09:38:
         a0:a1:86:14:6d:66:23:a5:c9:8b:e7:ca:0b:b4:ec:16:5e:bc:
         b2:ed:a3:56:bb:b4:3f:7b:29:ee:99:49:e7:aa:fd:9e:2f:80:
         33:a3:3a:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG
RkFCQTVFQzcwHhcNMjYwMTExMDEzODIyWhcNMjYwMTE4MDEzODIyWjAYMRYwFAYD
VQQDDA02OTYyZmYwZi1kODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniBjAUXc7uwdFrHOaS2KJ8aZzMyIDSuYkH2QRWosZWnwjjSuXBdN4tGpgssf
fSMsm+SarzHyUPsfP8D9yUO33Ne2UKvMX2jIukryuiAN+UgO/pHsYf6xrmgBIxun
gtJfripNMbaWYO8KQM25x+4GnAzkRjcApu5lxc4/+AB/D1HLb1jSgb6F9+t8oBvP
YHNti8RehJ7MKGecFBypZDDBWldref5UO5ogba2svaReqTlxCnvHZ+c9uJg1G8hH
vUcc+SlR3aBG7cHUiBzZ5GIOAlxh+DbZqmkEg8AbyvyUwQUETwCy4aztfVnlOkZ1
51Uiu427rnBmqwF0IfaIgzltmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9zdXFP
rWPayBdLM9k5+A8WQUpLMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz
NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du
RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCk8cIxjAM2Dmo+p07N3No8n23u64CH38X9pi5DKZ11h/5kc2Nkp2wo
x0yfLUIXfPvbGzqREBKHgCHLMgrT7f2x4RevlEMWBr66lbgFuQTab/sq0IsX8K2f
fYTkILs68kyJmISZt5VFROuvjhiqYPi0BZrWqN1SLDbQsO933fnC18xZ6zXUDmJM
ffbfte01TWdw6+UXMgf3ncItrDt5BT/JaoaAacDuXduic88uuO928/ENx7VEs07F
i7VutL/fL5Thex4Zpsr3jG2iPuSMvfarZnU6cwb3CTigoYYUbWYjpcmL58oLtOwW
Xryy7aNWu7Q/eynumUnnqv2eL4Azozr2
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:18:43 2026 by rpki-client