This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          5MIpVLEnNtr59v21jTBFLRmW9qkCKJteRizRiSaatgE=
Subject key identifier:   FD:50:D9:F9:D5:A9:C8:29:19:EB:A1:86:52:F8:D6:C8:1D:93:0D:D0
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0F67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0F5E
Signing time:             Sat 24 Jan 2026 17:15:13 +0000
Manifest this update:     Sat 24 Jan 2026 17:15:13 +0000
Manifest next update:     Sat 31 Jan 2026 17:15:13 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: F/31U8x8BBGmcOAYqJ8c6u7Cp0g2rJGfRagBFDBFzUI=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3943 (0xf67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Jan 24 17:15:13 2026 GMT
            Not After : Jan 31 17:15:13 2026 GMT
        Subject: CN=6974fe21-d93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:cc:60:19:1e:c3:ab:9a:8c:13:6d:f7:ab:
                    17:29:25:14:4f:69:45:5e:f2:ec:ba:cd:67:86:5f:
                    90:50:8f:d8:09:f6:8e:e5:19:02:c6:d8:b3:17:42:
                    28:21:e9:a3:c1:eb:44:19:eb:10:50:60:9d:1b:a6:
                    1f:4d:e6:18:a9:b3:de:c8:6a:27:bc:98:d0:4a:fb:
                    0c:88:e3:08:2c:4f:81:84:c6:10:ad:c2:09:e4:28:
                    b3:b2:48:a5:c5:04:6f:bc:2c:22:8e:88:be:db:2c:
                    5e:13:be:ed:9a:a6:5b:46:09:d5:9e:40:ad:b1:fa:
                    2b:57:1f:5c:10:23:5f:b9:76:11:23:69:ee:5f:40:
                    f9:e5:e7:75:02:9f:c5:8b:a7:25:96:a0:c4:18:62:
                    e4:2a:ec:35:99:c8:86:e5:43:a7:ca:d3:0f:cc:c6:
                    8f:b8:22:b8:22:c0:2f:7e:1a:43:c4:e1:bc:fc:85:
                    f1:9b:de:f6:c9:16:ff:c7:9a:90:be:d0:e1:37:0b:
                    47:29:49:a0:65:ae:90:e7:eb:a3:44:96:75:a5:31:
                    ad:41:8b:76:7c:01:d0:d2:5c:2e:14:c1:77:5f:cc:
                    19:68:f1:41:7f:ce:a5:c9:5b:cc:70:06:d1:17:a3:
                    6d:63:17:5a:8a:da:0d:22:b6:a9:d9:82:08:2e:10:
                    92:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:50:D9:F9:D5:A9:C8:29:19:EB:A1:86:52:F8:D6:C8:1D:93:0D:D0
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e5:da:c7:62:a3:79:e9:46:23:68:26:f0:68:26:4e:8d:5e:
         1e:14:74:39:79:f6:cf:ac:df:ae:5e:f7:16:65:65:fe:c5:eb:
         9c:53:db:3d:7e:be:23:7b:d3:e0:7e:01:16:73:e1:84:1f:dd:
         91:b0:b5:d8:73:f8:d3:fc:f5:dd:39:fa:be:bc:c2:00:75:c0:
         24:3f:92:11:f6:d3:15:28:66:f7:e3:15:07:8c:1a:65:53:c3:
         3b:c1:4a:5d:61:3a:18:18:e4:fc:f1:53:93:21:7b:9d:83:9d:
         95:f3:86:88:25:a1:52:b0:83:b1:ab:b4:56:2d:55:80:49:d1:
         a9:11:bf:19:bd:9e:b2:d3:3e:c3:41:fe:65:e6:da:cf:04:a3:
         1f:98:f6:20:4a:bb:67:25:6f:41:8e:4c:d5:59:fa:52:b8:f1:
         79:8f:e1:ad:94:e8:85:36:4b:47:e4:7a:6b:ae:1c:91:76:d5:
         ad:ea:aa:a4:71:f3:c7:da:d3:0b:8a:74:b8:0f:96:0f:99:44:
         94:9a:9b:b9:4f:0e:ea:c6:16:05:78:e3:f7:5f:2a:25:59:ec:
         9f:4d:d8:c2:8e:87:a1:a2:58:5f:58:f5:af:d4:80:c9:f4:11:
         3d:4e:38:c6:b7:ac:ad:e0:83:c8:bd:9c:93:18:bb:68:e4:6a:
         74:89:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:52 2026 by rpki-client