This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File:                     _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier:          gkMk/DlUSeFbA8A1u9kchGjdTdMkgKXxE1ypcB5u0mY=
Subject key identifier:   D4:9E:49:1B:6F:59:4F:0C:25:5D:BA:5F:DF:9D:AE:CF:CC:13:AB:4C
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer:       /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number:          015E
Signing time:             Thu 01 Jan 2026 03:41:50 +0000
Manifest this update:     Thu 01 Jan 2026 03:41:49 +0000
Manifest next update:     Thu 08 Jan 2026 03:41:49 +0000
Files and hashes:         1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: fruUE7mLvOzS3djJ6vOt1UmHhVjo9qrPYcnAWM1AGys=)
                          2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
                          rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
        Validity
            Not Before: Jan  1 03:41:49 2026 GMT
            Not After : Jan  8 03:41:49 2026 GMT
        Subject: CN=6955ecfe-077c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:f3:44:ca:f9:db:68:a1:2a:97:37:14:a6:
                    c4:20:b2:29:2a:33:d9:fc:e3:06:2b:33:40:26:92:
                    9f:ef:ba:11:c7:1c:73:19:c8:a2:bb:9e:34:70:2e:
                    db:a9:34:b2:de:f1:c1:63:b8:13:07:26:ae:0a:df:
                    2d:78:9e:b8:74:22:c8:9b:32:b9:27:7c:49:bb:f4:
                    fb:14:d0:81:d0:3c:89:4d:18:b5:50:a4:e6:91:dc:
                    18:a4:ec:a9:56:34:39:44:93:0d:a0:b4:19:17:a3:
                    48:0e:b1:89:9a:86:7d:81:46:37:c7:4d:58:87:4f:
                    3a:d2:f8:41:0e:3e:57:e9:75:68:c5:e5:74:0c:d5:
                    ba:9c:b1:38:9c:90:eb:01:70:40:58:76:9f:ca:94:
                    ee:81:e9:e9:b9:f9:d6:a3:b0:83:44:4f:e7:e9:c9:
                    5f:05:3c:e5:b8:29:98:f4:f1:48:15:de:c3:85:9c:
                    04:85:4e:42:ca:a3:03:aa:ed:bc:2e:be:ff:2c:c8:
                    7d:70:c8:f7:60:be:6d:b7:4d:cc:2d:80:9e:7a:ca:
                    4a:08:d0:e1:e8:29:06:98:74:a5:c6:92:86:ee:93:
                    b6:12:73:68:59:7d:cd:f0:5c:20:e0:0f:17:6b:a2:
                    a3:cb:c4:63:5a:96:1a:c6:db:b2:3d:ab:7f:1f:7e:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:49:1B:6F:59:4F:0C:25:5D:BA:5F:DF:9D:AE:CF:CC:13:AB:4C
            X509v3 Authority Key Identifier:
                keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:b6:52:19:a9:e6:0b:5f:3e:54:76:b3:bd:01:a1:cd:94:
         a0:16:b3:b5:ee:11:0b:82:45:26:9f:d1:f3:c6:0e:db:18:11:
         9f:61:04:8d:ed:ec:c3:af:bc:10:b1:e8:e8:f1:e1:e9:95:45:
         db:53:f8:1a:c4:3d:35:33:58:fe:96:11:cf:80:94:f1:3d:ea:
         aa:72:04:e2:2a:6f:2c:da:24:15:8a:49:9a:af:1b:e6:60:22:
         cd:eb:ee:f6:80:f6:10:d7:65:26:89:b3:7e:ca:0e:15:ac:a8:
         17:84:fc:1d:be:4c:ca:16:8d:5e:f3:d3:fc:c1:d6:49:9e:77:
         38:39:73:fa:aa:78:61:8d:a2:81:7a:79:41:2c:7d:0e:77:a8:
         bd:69:6c:04:f1:bf:4e:82:8e:51:8f:95:91:7a:9e:f4:91:d6:
         46:f8:01:f5:0f:39:74:af:c1:0a:1c:98:59:0e:7a:b5:02:b1:
         06:6c:4a:db:3f:5f:7f:9f:18:fe:d3:67:f6:f4:a4:80:29:9f:
         e4:a0:c2:df:90:38:86:58:1c:04:d4:87:f7:83:a3:ac:3e:ae:
         0f:84:ba:d8:fe:1e:a5:3e:24:91:04:92:e5:04:bb:d5:00:d5:
         9c:22:55:01:ed:1f:68:68:a6:ce:28:b4:ad:70:3d:a1:d1:7d:
         3f:27:50:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0
QjBCQUQ2NjYwHhcNMjYwMTAxMDM0MTQ5WhcNMjYwMTA4MDM0MTQ5WjAYMRYwFAYD
VQQDDA02OTU1ZWNmZS0wNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurvzRMr522ihKpc3FKbEILIpKjPZ/OMGKzNAJpKf77oRxxxzGciiu540cC7b
qTSy3vHBY7gTByauCt8teJ64dCLImzK5J3xJu/T7FNCB0DyJTRi1UKTmkdwYpOyp
VjQ5RJMNoLQZF6NIDrGJmoZ9gUY3x01Yh0860vhBDj5X6XVoxeV0DNW6nLE4nJDr
AXBAWHafypTugenpufnWo7CDRE/n6clfBTzluCmY9PFIFd7DhZwEhU5CyqMDqu28
Lr7/LMh9cMj3YL5tt03MLYCeespKCNDh6CkGmHSlxpKG7pO2EnNoWX3N8Fwg4A8X
a6Kjy8RjWpYaxtuyPat/H37uIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSeSRtv
WU8MJV26X9+drs/ME6tMMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw
MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU
OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2LLZSGanmC18+VHazvQGhzZSgFrO17hELgkUmn9Hzxg7bGBGfYQSN
7ezDr7wQsejo8eHplUXbU/gaxD01M1j+lhHPgJTxPeqqcgTiKm8s2iQVikmarxvm
YCLN6+72gPYQ12UmibN+yg4VrKgXhPwdvkzKFo1e89P8wdZJnnc4OXP6qnhhjaKB
enlBLH0Od6i9aWwE8b9Ogo5Rj5WRep70kdZG+AH1Dzl0r8EKHJhZDnq1ArEGbErb
P19/nxj+02f29KSAKZ/koMLfkDiGWBwE1If3g6OsPq4PhLrY/h6lPiSRBJLlBLvV
ANWcIlUB7R9oaKbOKLStcD2h0X0/J1Ai
-----END CERTIFICATE-----
Generated at Thu Jan 1 18:02:19 2026 by rpki-client