This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File:                     4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier:          MMl4o0MJW3RP1jEJoF/JyZT1iMGB0w4X6DL++WBNKvI=
Subject key identifier:   E1:26:E2:B7:70:49:6F:18:96:9C:79:F8:05:E1:2B:05:BC:32:EC:82
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer:       /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number:          66
Signing time:             Fri 23 Jan 2026 06:06:33 +0000
Manifest this update:     Fri 23 Jan 2026 06:06:33 +0000
Manifest next update:     Fri 30 Jan 2026 06:06:33 +0000
Files and hashes:         1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: s659HAGhAmUM5i3vGPBvH9Ueyf/mx9DYtESVXa+SXqo=)
                          2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: VJHNLTTmYE0OnrSaYRsFhyrLIddh+nJKNb/E2v8OcCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
                          rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
        Validity
            Not Before: Jan 23 06:06:33 2026 GMT
            Not After : Jan 30 06:06:33 2026 GMT
        Subject: CN=69730fe9-43c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:59:63:df:17:78:0a:3c:e8:65:06:1b:ff:
                    ed:80:4b:e8:5e:fd:97:ac:6e:8c:b8:6b:9a:1d:cc:
                    63:8c:8e:91:5c:63:9f:14:36:49:6b:60:99:6f:6b:
                    d3:e8:96:31:c5:b7:2e:32:cc:de:84:53:b9:41:a3:
                    12:b5:27:a1:d9:b8:19:63:a0:5b:37:5c:d0:d0:54:
                    96:5c:b9:a5:e3:23:0e:0d:70:e8:72:c8:f6:3e:f8:
                    7e:2e:13:52:68:d0:4a:d1:cb:9b:c7:36:ee:aa:68:
                    dd:98:64:20:50:82:99:86:04:e7:4e:3d:5f:97:ea:
                    77:80:e2:34:2c:2d:d2:d3:a4:0a:8f:2f:00:f9:6f:
                    d7:d8:5d:c7:d9:02:57:ee:ef:3d:8b:34:f7:da:94:
                    b4:76:9c:7d:62:fb:6d:85:92:ad:09:73:82:8e:a5:
                    ab:e1:01:63:25:bd:a1:55:f0:32:7f:fb:40:fa:d4:
                    63:3f:cb:f1:80:a2:6d:c7:3f:d6:2b:ab:6b:55:bd:
                    dd:85:4d:e2:ac:5e:ee:18:cc:f2:fa:5f:f1:23:35:
                    de:b8:6a:be:7a:dc:7f:ec:4f:77:eb:d4:c6:0e:30:
                    e1:bc:19:ca:f0:d4:5f:03:44:b7:db:1c:2d:4d:e0:
                    44:c3:51:ea:64:ff:12:1a:75:07:a7:7f:02:f9:64:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:26:E2:B7:70:49:6F:18:96:9C:79:F8:05:E1:2B:05:BC:32:EC:82
            X509v3 Authority Key Identifier:
                keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:9a:63:7c:df:db:e1:c9:e4:6b:31:48:d3:50:8b:79:10:
         57:6e:53:cd:bd:e8:3d:e5:0d:1c:62:4c:d3:ee:5a:20:36:37:
         cd:0a:e9:d1:07:20:98:9e:19:47:f3:4a:f9:84:b5:db:6c:9d:
         24:3e:a2:fb:a5:c4:a1:64:2f:cf:72:4d:11:50:0d:b6:d6:63:
         19:55:39:fa:a5:ea:64:69:a3:40:36:9c:77:e0:69:35:e0:8b:
         93:bc:6b:0e:0e:c8:81:8f:9c:ac:d7:51:a9:3f:74:ba:81:36:
         e0:67:21:db:77:f7:fa:ba:39:72:3d:0b:ad:d7:d3:7e:9d:d5:
         d1:0b:72:90:32:72:0b:eb:07:95:d4:fb:cc:cc:34:32:fb:e8:
         45:bb:41:7c:9f:c0:91:95:a4:65:bc:de:c1:f8:ef:e8:a5:d1:
         9b:41:a0:94:e9:fd:5d:89:93:11:ba:ae:94:7a:40:0d:07:65:
         58:25:31:f7:29:19:d3:4d:6a:be:06:90:5e:00:67:bc:bb:ea:
         ae:10:30:00:e3:bf:71:11:61:85:79:2c:4a:09:fb:f2:57:77:
         e1:88:43:f7:48:23:b0:94:4a:50:7e:ba:2d:19:35:17:a7:5b:
         45:f7:9e:0a:f1:95:4b:5a:61:5d:97:d4:dd:c6:2e:c3:4a:d8:
         6a:08:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:28 2026 by rpki-client