This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          kHkSB4cIp4UelQGV0DfCxmiy3B4EN9V1vc+w0CnD6og=
Subject key identifier:   BE:03:4B:6A:05:6B:67:A5:C7:9C:10:62:3B:27:68:D0:27:24:97:3C
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          010D
Signing time:             Sun 25 Jan 2026 04:12:07 +0000
Manifest this update:     Sun 25 Jan 2026 04:12:06 +0000
Manifest next update:     Sun 01 Feb 2026 04:12:06 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: lYOt4GWouaJqWOIu+TzNnUCRooZtBT0A0FHjE/5A1o4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Jan 25 04:12:06 2026 GMT
            Not After : Feb  1 04:12:06 2026 GMT
        Subject: CN=69759817-49be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:80:87:fa:c3:7e:02:37:8b:4c:22:e2:39:
                    a2:82:ad:0e:49:bf:46:d7:1b:a2:d8:3c:1d:a4:2c:
                    97:a8:0e:66:1f:2e:ff:29:ad:d4:64:db:10:84:85:
                    5c:4b:09:63:55:26:b9:23:25:4d:bb:d8:86:d8:cf:
                    f5:b7:6a:b3:f1:52:bf:08:0c:80:ca:50:9d:ff:75:
                    a0:a7:83:d7:19:5c:2c:bc:29:68:69:f0:3d:03:10:
                    29:93:75:8c:35:58:b7:ed:19:2a:1f:c7:80:67:6d:
                    f2:d8:78:38:0b:d6:20:c8:e8:89:27:3c:ba:1b:8b:
                    aa:a8:9e:73:26:64:3e:c5:db:33:97:4f:b9:43:b1:
                    52:5a:0a:78:9d:13:96:22:b3:d3:1b:1a:cd:39:c7:
                    d2:29:ee:a2:54:9c:e2:31:71:6c:78:bc:4d:4d:90:
                    0e:ae:e2:2c:6c:a3:b4:e1:a1:52:10:55:a8:96:76:
                    42:16:2c:ff:68:9f:92:74:40:a1:a9:6e:61:00:82:
                    1d:08:7f:8f:54:04:56:1e:92:80:5b:0a:70:47:a8:
                    86:35:36:bb:39:e0:fe:20:7d:08:f9:d7:aa:35:94:
                    c1:17:b0:b8:12:1f:10:b4:c5:62:aa:dc:55:a4:82:
                    cc:0d:2d:7b:49:e5:22:e8:3d:98:ca:fc:4d:53:b9:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:4B:6A:05:6B:67:A5:C7:9C:10:62:3B:27:68:D0:27:24:97:3C
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:ed:09:7f:75:90:1d:2c:17:22:99:0c:b4:bc:6e:9e:c2:
         1f:4f:31:08:46:b8:54:87:93:c1:a2:46:cd:dc:ad:fb:34:6f:
         d9:f6:2a:99:a4:dd:7b:2a:ea:e4:6e:c3:b7:d8:76:20:53:a1:
         3b:4b:1d:6b:6b:12:c0:0a:60:2e:b7:46:49:a6:6b:46:41:1e:
         34:58:6f:15:47:16:13:a1:b3:60:da:14:5a:ab:8f:0e:06:a0:
         0d:92:4d:9c:d2:b0:3c:3a:1c:d0:c0:2c:19:51:6c:5a:57:ee:
         d9:9b:c9:af:46:16:bb:76:2b:04:71:24:c1:26:fc:18:e7:39:
         3b:0a:d7:1d:04:9b:20:64:5a:d5:6c:58:57:b4:e5:e0:a3:46:
         17:fe:b5:8e:06:ce:b3:10:8a:3c:5c:af:68:b2:48:4a:ca:9b:
         82:c9:f0:2d:61:64:d8:6b:92:e2:a0:e2:22:ab:64:48:c6:19:
         e8:2c:2d:93:19:14:62:55:d4:30:85:02:8a:2f:d6:87:69:b6:
         0d:0a:d0:aa:d9:f5:8b:e6:48:bc:04:9f:17:4f:f1:44:91:1f:
         c7:79:45:bf:22:21:bf:66:7e:ae:89:b5:3c:fd:74:cc:a6:21:
         82:fc:2f:99:1e:b0:4c:16:9c:54:ed:ff:46:dc:02:31:ca:6d:
         a5:8f:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:49 2026 by rpki-client