This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
File:                     h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json)
Hash identifier:          35yrYzdEOAU18CoJBBBDo7XtpUIB+pzqy03a1E24tN0=
Subject key identifier:   FF:FE:AF:80:04:70:C2:A9:D7:14:70:72:00:1C:9C:F2:7A:AC:D0:90
Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Certificate issuer:       /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
Manifest number:          F2
Signing time:             Sun 25 Jan 2026 04:30:11 +0000
Manifest this update:     Sun 25 Jan 2026 04:30:10 +0000
Manifest next update:     Sun 01 Feb 2026 04:30:10 +0000
Files and hashes:         1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: 4AFQUs9roAEQgY2byeRw/TifST0qL74BvvMTo5O3N7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
        Validity
            Not Before: Jan 25 04:30:10 2026 GMT
            Not After : Feb  1 04:30:10 2026 GMT
        Subject: CN=69759c53-46e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:a3:d4:6d:c9:85:7f:02:12:d1:10:8d:8d:
                    8d:3f:60:e1:11:fd:50:44:3e:3a:ff:42:25:48:18:
                    e3:cb:9a:22:f2:7c:06:3f:24:3e:c4:de:7a:d3:fa:
                    ab:05:f9:25:5f:2e:5c:ed:eb:e0:0d:42:49:21:ad:
                    ca:b7:9e:16:ea:e0:6e:3e:a5:4e:68:cd:e2:30:cf:
                    ed:53:16:1c:c9:11:cb:b2:d9:13:0e:0a:ed:1c:53:
                    3d:07:42:30:51:9b:43:58:e0:06:ab:8e:62:2f:ae:
                    e6:97:3a:a6:88:31:b5:de:44:54:48:9c:df:dc:d7:
                    90:e9:ec:0b:a3:2c:17:7e:83:a5:28:61:b5:47:19:
                    19:bc:dd:2a:e3:21:50:96:19:40:f2:c7:ea:6e:62:
                    13:4a:cb:09:e0:d4:39:84:b2:15:c7:98:d3:94:df:
                    ee:18:75:cd:da:27:61:df:c6:57:ac:20:d4:40:c4:
                    38:18:ce:ad:5c:74:bc:33:16:d2:6a:91:e7:f0:46:
                    74:8f:31:b7:e1:18:00:d5:30:37:23:12:24:24:f6:
                    fb:6c:49:bd:c2:15:4a:d7:09:8c:f6:34:eb:de:9a:
                    40:8d:40:3d:b1:64:7e:50:af:34:d6:53:3f:1d:e7:
                    5d:e0:00:ec:58:e2:5f:e7:7b:c8:2d:e6:f3:4e:94:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:AF:80:04:70:C2:A9:D7:14:70:72:00:1C:9C:F2:7A:AC:D0:90
            X509v3 Authority Key Identifier:
                keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:24:fb:79:53:04:b1:7c:3b:30:8e:d4:d4:e6:fb:67:9e:ad:
         d7:0c:01:66:9d:e0:05:b8:a0:56:93:d9:b7:49:e7:04:07:1a:
         0b:f4:f9:4d:93:44:a5:92:35:3f:44:6c:1e:35:28:89:17:e8:
         15:7a:7e:53:53:fe:d2:fc:ef:e4:92:5c:98:a3:83:73:35:d5:
         3f:f5:7b:6b:e0:0c:ce:8e:57:73:ab:3f:61:91:82:60:7a:e3:
         71:ae:e6:46:b7:5d:2f:83:df:94:60:20:3c:73:f1:f7:96:5b:
         2e:07:cc:fc:ee:e6:1f:58:6e:b4:26:14:d1:44:f3:58:8a:27:
         16:5f:b6:42:1a:fb:ab:dd:65:15:95:fc:77:0d:4b:41:d6:aa:
         0c:95:f9:a7:9b:24:ed:b5:c8:89:cd:30:37:a6:9e:a4:16:e9:
         0e:f8:d3:f5:8a:2f:6f:e2:2a:2f:20:35:ed:b7:af:fe:3e:c9:
         e5:70:29:4b:c3:18:cd:b4:9e:79:38:8d:17:4b:63:c9:6e:a7:
         f5:a8:4b:f2:cf:6b:93:8c:71:a2:7d:a8:40:d2:48:c7:cd:6d:
         6c:51:fc:46:75:8b:ba:da:07:6d:f7:0a:d6:26:ab:cd:b9:8e:
         72:72:f8:e3:4f:2d:3a:fe:56:8f:85:6e:b7:26:44:af:fd:5c:
         e9:df:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:01 2026 by rpki-client