This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
File:                     FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json)
Hash identifier:          qDnBKvodccnlrojVq3jNlhcclEJ3UIqVO1NIrGPJdSE=
Subject key identifier:   7F:7F:3C:B1:98:5B:45:C8:9A:87:9A:A4:72:A1:99:81:84:35:1E:2F
Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8
Certificate issuer:       /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
Certificate serial:       05D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
Manifest number:          05CA
Signing time:             Sat 24 Jan 2026 22:17:37 +0000
Manifest this update:     Sat 24 Jan 2026 22:17:36 +0000
Manifest next update:     Sat 31 Jan 2026 22:17:36 +0000
Files and hashes:         1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: IhXQQ7JHJzWnSTi4RYfmB2rT/14cxFuZLVkTdPqCD84=)
                          2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: T8wRLHwgRzAbwRJS9A54vWKieYY8OWEG7CceQpyt02E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl
                          rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C564, serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8
        Validity
            Not Before: Jan 24 22:17:36 2026 GMT
            Not After : Jan 31 22:17:36 2026 GMT
        Subject: CN=69754501-44c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:fc:93:f6:0a:39:28:da:9b:40:15:32:52:
                    d8:90:84:c2:0a:65:14:9c:51:97:70:29:91:42:e6:
                    02:db:6f:4f:68:52:d2:87:10:36:11:96:b9:d8:e7:
                    91:22:1a:88:11:51:d5:5a:da:3c:f1:a3:36:24:22:
                    30:a5:e5:28:52:0d:e5:1a:5d:53:0b:55:ac:f3:06:
                    3f:29:a6:a0:45:24:08:6b:9e:96:fc:28:61:e0:d4:
                    21:2d:b4:3f:c7:2e:69:81:23:62:f8:ba:14:c3:9c:
                    ed:d4:f8:bb:39:fc:88:4f:c2:3d:0f:99:ce:d8:2e:
                    74:51:8c:3f:86:df:25:d4:2a:fc:c5:fe:50:b2:a4:
                    a6:0e:ad:cb:72:55:68:73:fd:e6:59:65:36:6b:f7:
                    1a:1e:1b:ba:d2:83:0a:4c:02:00:03:cf:a6:d2:2e:
                    8e:cc:a8:c0:27:2e:cd:91:6c:db:bb:3d:d0:69:8c:
                    0a:fd:d7:38:2c:3c:88:83:8b:df:b7:f2:aa:33:23:
                    6f:92:e4:d2:df:33:32:79:32:fa:1a:d3:33:77:a6:
                    33:85:4c:ba:04:1b:3c:57:b4:f8:44:63:db:75:4e:
                    58:33:85:4c:af:b3:cf:4c:72:8c:f0:58:e3:9e:8f:
                    47:68:d9:f2:fe:e0:95:2b:93:b1:45:27:4b:a8:c3:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7F:3C:B1:98:5B:45:C8:9A:87:9A:A4:72:A1:99:81:84:35:1E:2F
            X509v3 Authority Key Identifier:
                keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:ab:d1:a6:13:36:38:f4:6d:7b:a9:17:f4:44:af:b8:a5:
         07:42:a9:b5:20:d4:4c:0b:1a:e7:d3:11:7b:96:8c:9d:fa:9a:
         c8:f6:9b:b2:61:95:3d:29:2d:fc:6a:fa:43:7c:31:c1:90:2d:
         f5:01:7d:1c:02:25:2e:fa:c3:2e:61:a9:9b:53:4e:19:69:d6:
         f2:df:94:e9:04:f4:4c:1d:ac:63:69:a7:87:a9:47:9b:2e:5a:
         d9:96:10:d0:9c:13:a9:af:1f:02:ad:6e:8c:e0:a5:28:61:6d:
         a8:93:b2:f8:0e:69:e4:60:d0:4a:0f:19:de:08:ef:4e:ca:c2:
         cd:54:ea:28:d5:25:eb:ba:90:8e:80:cb:2c:58:03:45:e0:fd:
         c0:c2:70:e7:ca:53:9c:9f:b0:dd:3e:06:02:f8:c7:97:a8:56:
         ba:03:39:5e:c2:c3:60:ba:5f:79:03:f8:08:f4:c4:1c:48:98:
         37:84:29:72:c4:70:38:06:a0:b2:c4:e3:ed:36:a1:f7:2a:ef:
         f0:5b:ff:52:36:53:35:ea:80:77:70:f9:cc:6e:38:e6:c3:81:
         e6:34:8a:ef:f9:56:56:b5:2b:24:51:6a:4e:f2:c3:a4:b9:b3:
         57:22:7c:86:19:47:1b:6c:b2:10:e3:7f:98:c0:b2:b0:74:0d:
         37:b7:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:13 2026 by rpki-client