This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File:                     8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier:          oS4SDkVkHCEPJXFSRkaSedQywjOaON0Zn2BZtyDBcI4=
Subject key identifier:   C2:1F:F3:36:1B:FE:26:4F:F3:72:12:A2:48:B6:26:FF:26:33:5F:82
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer:       /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial:       34FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number:          34FB
Signing time:             Sat 24 Jan 2026 15:03:52 +0000
Manifest this update:     Sat 24 Jan 2026 15:03:52 +0000
Manifest next update:     Sat 31 Jan 2026 15:03:52 +0000
Files and hashes:         1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: tLFKUQ5zBzX+c5kabeM6SpOYFEvEoNnRDhQh3WwN72I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
                          rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13563 (0x34fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
        Validity
            Not Before: Jan 24 15:03:52 2026 GMT
            Not After : Jan 31 15:03:52 2026 GMT
        Subject: CN=6974df58-2d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:21:83:c6:22:ca:15:e6:e5:a5:e6:27:3b:
                    8f:06:dc:8d:0b:dd:b0:f7:32:3d:eb:65:20:6b:8b:
                    49:26:6b:84:47:f1:f7:db:7f:60:1a:3b:f0:9c:10:
                    ab:ba:fe:c4:48:f3:cf:b6:25:e3:73:d1:72:6a:b3:
                    69:47:c9:81:bc:54:91:96:5e:5d:34:09:c4:05:12:
                    f0:7e:13:9c:c0:f5:93:e0:aa:f0:3a:0b:1d:cc:9b:
                    2b:aa:56:3f:35:b8:37:3d:eb:e2:1f:68:6d:05:bc:
                    a0:36:59:3e:f0:37:5e:32:b3:d4:58:5a:f2:fe:2a:
                    2d:d2:1c:28:39:42:7b:ff:19:c9:ba:de:2a:d5:67:
                    23:54:a9:80:2e:a9:f9:30:76:19:fd:c9:75:d2:db:
                    9a:cb:59:ce:f0:70:2b:d7:bd:9b:b0:ad:a9:87:30:
                    25:2b:9c:aa:6a:17:62:3a:08:06:92:e6:78:c0:ec:
                    2e:46:2a:1d:25:e8:20:d4:55:26:ff:6f:4c:ea:c6:
                    53:14:6a:42:52:59:13:64:98:e3:f0:89:a2:e2:a4:
                    cc:15:cd:c7:f1:c6:f5:8e:dc:80:d1:1f:84:b6:13:
                    82:ab:65:d2:93:a5:38:41:53:fd:e2:90:9c:40:b7:
                    ca:39:1d:10:cd:8c:98:a8:5e:14:37:2b:c1:b2:e2:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:F3:36:1B:FE:26:4F:F3:72:12:A2:48:B6:26:FF:26:33:5F:82
            X509v3 Authority Key Identifier:
                keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bf:17:a2:e4:45:20:0c:7e:b8:dc:17:e8:ce:ce:ae:da:5b:
         4b:8b:32:50:ff:c1:fe:c7:82:29:32:5d:71:0c:ca:31:a3:57:
         ed:31:04:b5:37:8e:8b:ee:a3:0f:f3:3d:8d:33:6b:2d:18:db:
         84:f6:97:13:8d:60:47:e7:9b:3b:be:66:15:d8:be:82:6c:66:
         75:76:1e:c5:8d:cf:1f:8b:4c:fd:3d:bb:20:6a:30:23:8f:5f:
         7d:43:7a:68:13:c9:76:25:bc:38:6b:b5:28:eb:ee:71:46:7c:
         ed:46:08:08:99:f2:b1:4f:ad:00:f9:82:7d:bc:08:c0:e4:a6:
         1e:51:fd:90:96:71:a2:8b:fd:8e:50:8f:5f:df:fb:2a:11:c1:
         44:2c:06:b7:e1:cd:e5:b7:c9:90:22:a6:23:2a:08:fc:7b:eb:
         fc:8c:53:7f:bc:3f:cd:a6:6b:a6:e5:dd:6a:e0:fe:c2:14:03:
         ad:5f:1e:f3:94:b6:a0:3d:36:cb:99:f2:16:38:52:92:5f:c5:
         3b:9c:8e:46:be:3e:01:d8:e1:ab:3b:03:ed:c0:4d:87:2c:d0:
         dc:9f:22:2d:fe:7e:42:3c:84:a4:7a:9c:24:9d:b6:1a:55:14:
         78:04:aa:2f:c4:83:07:5b:1f:fe:b7:0d:5b:a8:57:81:58:d0:
         64:c6:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:25:49 2026 by rpki-client