This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
File:                     plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json)
Hash identifier:          bZbznBHz24CM7CJRgE7kUUdu+KmtXTeoqlnzU9ttN+E=
Subject key identifier:   1C:00:C6:12:47:42:F7:34:CA:DA:4B:0C:81:9F:B4:36:79:88:BA:F4
Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58
Certificate issuer:       /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
Certificate serial:       10D8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
Manifest number:          10CF
Signing time:             Sat 24 Jan 2026 17:01:38 +0000
Manifest this update:     Sat 24 Jan 2026 17:01:38 +0000
Manifest next update:     Sat 31 Jan 2026 17:01:38 +0000
Files and hashes:         1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: 1y8MFgrJNQVzGyRMoUjYeDoUqX//fowrMXbPkv9tyT4=)
                          2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: qPjQ6qU9b4Y2Yxe9iOnxcnbbcXQxddrSOa1xx9RMf9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4312 (0x10d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
        Validity
            Not Before: Jan 24 17:01:38 2026 GMT
            Not After : Jan 31 17:01:38 2026 GMT
        Subject: CN=6974faf2-1740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:55:b0:26:be:79:09:35:59:ef:a4:21:5d:
                    4f:e4:e5:02:9e:ec:bb:20:fd:a5:a3:b4:c1:59:af:
                    bf:d1:8e:73:ca:86:f0:ff:03:ee:21:b3:c2:59:43:
                    10:38:75:37:6f:9a:7e:7e:79:21:8f:7f:89:0e:96:
                    a1:9f:af:ad:f3:6b:38:ea:67:0a:e2:f0:14:b1:13:
                    30:13:12:f0:af:b9:33:95:a9:49:02:f2:11:41:7c:
                    68:9d:59:f5:3f:41:d3:ca:e4:8e:b6:9e:35:44:55:
                    82:2f:a7:f5:2b:35:6b:b9:46:4b:91:c7:b3:f6:b8:
                    2a:3e:38:1a:84:9f:6f:2c:b8:e0:b1:f3:92:42:03:
                    c5:ce:4c:45:89:e3:dd:a9:48:6a:9a:c0:2f:43:04:
                    ee:ca:82:8c:a5:c7:d6:14:31:a5:95:07:f7:e0:f0:
                    bf:d7:11:ca:e2:40:0a:a2:b2:bd:7e:e2:39:b7:1f:
                    0a:e6:81:42:0b:fe:26:38:66:2d:1e:8f:6d:e4:ef:
                    20:3e:3f:db:11:39:92:3d:d8:9b:4c:8c:24:8d:d4:
                    1a:a6:ea:0a:48:9a:a3:8b:2f:a9:eb:42:ec:93:e2:
                    76:8a:d0:28:ed:90:ba:c0:39:51:89:81:8c:15:66:
                    fd:66:10:95:6a:ea:06:4b:80:b3:cc:99:c9:00:b1:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:C6:12:47:42:F7:34:CA:DA:4B:0C:81:9F:B4:36:79:88:BA:F4
            X509v3 Authority Key Identifier:
                keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:21:5f:23:99:be:49:1f:67:b0:e3:b9:c3:5c:40:18:aa:
         51:0d:87:f0:e3:25:74:aa:06:2e:68:cc:49:db:cc:fc:85:54:
         98:d2:d5:25:77:2f:4d:ff:43:47:70:71:f5:6d:14:d5:6c:ab:
         01:bd:f2:ed:ac:8c:b3:88:82:eb:73:90:2c:b8:c0:59:40:d1:
         1a:31:d9:43:94:63:b6:4c:3d:d2:0c:eb:a4:c0:66:df:50:62:
         42:1e:f6:6c:c3:42:62:f8:74:12:07:33:b3:e8:d8:b2:1c:bc:
         ea:d1:cc:fc:1d:34:d7:35:9d:f7:be:7d:ff:b3:b4:07:e0:43:
         68:53:17:61:4f:ed:de:27:9c:3e:8a:7b:c8:12:a2:9c:c7:23:
         63:02:51:14:9f:f2:9f:7d:85:66:d8:5f:4f:d2:b0:e8:a7:4b:
         03:80:43:a6:7d:fd:c9:0c:7d:f6:76:b2:06:07:ff:6a:7c:f6:
         dd:fd:74:1a:2f:76:11:e6:05:50:35:8f:c0:3b:0a:f0:e1:3f:
         b2:05:c5:4c:1d:01:82:43:5b:29:70:6c:2a:a7:d9:7e:f8:15:
         a1:6b:1f:35:67:19:d1:c7:e8:e2:8e:23:8d:1a:64:66:42:3c:
         82:04:06:2d:a5:00:98:72:62:83:09:a8:d2:62:be:98:a0:c9:
         4c:64:1a:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICENgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3
M0RERTVGNTgwHhcNMjYwMTI0MTcwMTM4WhcNMjYwMTMxMTcwMTM4WjAYMRYwFAYD
VQQDDA02OTc0ZmFmMi0xNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hpVsCa+eQk1We+kIV1P5OUCnuy7IP2lo7TBWa+/0Y5zyobw/wPuIbPCWUMQ
OHU3b5p+fnkhj3+JDpahn6+t82s46mcK4vAUsRMwExLwr7kzlalJAvIRQXxonVn1
P0HTyuSOtp41RFWCL6f1KzVruUZLkcez9rgqPjgahJ9vLLjgsfOSQgPFzkxFiePd
qUhqmsAvQwTuyoKMpcfWFDGllQf34PC/1xHK4kAKorK9fuI5tx8K5oFCC/4mOGYt
Ho9t5O8gPj/bETmSPdibTIwkjdQapuoKSJqjiy+p60Lsk+J2itAo7ZC6wDlRiYGM
FWb9ZhCVauoGS4CzzJnJALERPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwAxhJH
Qvc0ytpLDIGftDZ5iLr0MB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB
NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP
YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAA3SFfI5m+SR9nsOO5w1xAGKpRDYfw4yV0qgYuaMxJ28z8hVSY0tUl
dy9N/0NHcHH1bRTVbKsBvfLtrIyziILrc5AsuMBZQNEaMdlDlGO2TD3SDOukwGbf
UGJCHvZsw0Ji+HQSBzOz6NiyHLzq0cz8HTTXNZ33vn3/s7QH4ENoUxdhT+3eJ5w+
invIEqKcxyNjAlEUn/KffYVm2F9P0rDop0sDgEOmff3JDH32drIGB/9qfPbd/XQa
L3YR5gVQNY/AOwrw4T+yBcVMHQGCQ1spcGwqp9l++BWhax81ZxnRx+jijiONGmRm
QjyCBAYtpQCYcmKDCajSYr6YoMlMZBqZ
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:50 2026 by rpki-client