This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
File:                     d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json)
Hash identifier:          glp0o6s0xQDqXc9G2cXHQ2JxKBFO71iszmNmgf0PL7c=
Subject key identifier:   68:7B:9A:2C:A8:71:2C:E0:43:D1:8C:9D:EF:A2:7E:97:51:A1:22:89
Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14
Certificate issuer:       /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
Certificate serial:       142B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
Manifest number:          140A
Signing time:             Sat 24 Jan 2026 16:40:15 +0000
Manifest this update:     Sat 24 Jan 2026 16:40:14 +0000
Manifest next update:     Sat 31 Jan 2026 16:40:14 +0000
Files and hashes:         1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: Bgw9cJLRJoutE0X30wRJC+CINmG4zRb9BUHbfEsaQgg=)
                          2: 43A759B0C82811F0B893BE0BC4F9AE02.roa (hash: rbeldU58m4YF2/4dOPbk3su/ZdQtCAeI5lgK94z/0hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl
                          rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5163 (0x142b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14
        Validity
            Not Before: Jan 24 16:40:14 2026 GMT
            Not After : Jan 31 16:40:14 2026 GMT
        Subject: CN=6974f5ee-36cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:81:02:ba:b6:b9:38:1f:05:fe:49:0f:38:
                    76:ab:4a:0e:3c:2d:3a:01:6c:24:2e:64:b3:7e:25:
                    bc:ba:b7:f0:58:98:60:81:70:08:a0:5e:7d:5b:12:
                    d9:df:66:48:c9:b4:00:4e:2d:cc:d1:78:a9:ce:9f:
                    b8:ad:2b:b0:33:ef:db:e0:63:4d:d7:21:94:cc:39:
                    af:db:87:40:d4:6f:8a:1b:ac:fc:0d:af:28:c1:23:
                    5e:62:bc:51:40:35:83:bf:36:be:b0:e5:50:8a:15:
                    79:bf:a0:e3:a1:00:a1:01:66:8b:a3:50:3a:6c:4c:
                    f7:c0:8a:6d:91:a3:51:b0:b5:61:76:fa:99:0f:3d:
                    84:38:d5:9e:47:7b:26:dc:9c:e7:67:bf:1b:52:a1:
                    8f:8a:63:7d:1e:31:bb:23:90:cf:6c:8f:ba:4d:6b:
                    47:22:0f:77:e5:10:98:34:12:da:df:a7:73:61:5d:
                    5c:fe:90:a8:7c:2c:b3:bd:ac:89:c6:95:8d:0a:02:
                    80:ad:44:cc:75:e9:73:bf:cf:bc:c9:d0:38:2c:b3:
                    4b:49:f8:b5:1d:21:09:a9:43:3b:67:02:ef:d2:0e:
                    45:d1:e9:2a:99:ca:22:c4:48:53:39:76:e6:0a:79:
                    85:2d:db:ad:09:e3:d9:06:bd:d7:7a:c3:d7:ec:21:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7B:9A:2C:A8:71:2C:E0:43:D1:8C:9D:EF:A2:7E:97:51:A1:22:89
            X509v3 Authority Key Identifier:
                keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e1:f9:47:d7:06:97:fa:0b:93:02:fa:38:4b:a1:93:b1:5d:
         4c:49:40:b9:4b:4a:26:9a:09:c7:ff:e3:bf:78:3d:ca:eb:5c:
         05:43:9f:37:b8:8c:2f:51:9c:ea:26:fa:d7:3e:a6:66:24:17:
         ee:5c:3d:48:09:86:9a:77:65:26:32:8d:37:d4:f9:91:22:c3:
         b1:4d:5d:2a:39:ba:32:b8:91:4f:49:31:7a:18:c2:c4:a4:d0:
         fb:ca:f5:41:08:11:94:df:e5:da:51:8b:3b:fe:9e:8e:97:4c:
         17:58:6d:59:c4:f2:93:1f:96:54:14:7d:8f:f7:eb:de:32:d3:
         05:ba:8e:06:d2:3c:50:e5:9b:f4:35:70:fe:e2:7b:e7:95:01:
         d4:81:f6:05:94:aa:7a:24:31:7e:31:15:50:bf:91:2d:ee:01:
         8f:8d:22:00:d3:b1:91:61:79:f1:f0:48:75:6e:a5:4f:f7:26:
         94:e4:64:27:fd:b3:06:c4:4d:a3:36:54:7f:9a:93:9f:64:c8:
         a4:d8:66:31:c2:97:88:78:c4:01:6d:46:bd:2b:cc:66:23:f4:
         f4:ad:5b:32:bd:df:42:f8:16:2e:9c:1b:fd:61:0d:05:30:e8:
         32:63:f4:b7:48:b7:a3:57:be:0f:46:8e:73:74:fe:55:24:4b:
         4f:15:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:22:47 2026 by rpki-client