This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
File:                     SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json)
Hash identifier:          BDlnBlhz2j5u86GGSWTbqmUvQkNXtCRgByHB1tGiCr0=
Subject key identifier:   7B:B0:B2:4C:49:F1:99:E0:AF:08:5D:F0:42:45:72:D7:78:1A:82:DC
Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
Certificate issuer:       /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Certificate serial:       06E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
Manifest number:          06DF
Signing time:             Sat 24 Jan 2026 21:21:03 +0000
Manifest this update:     Sat 24 Jan 2026 21:21:02 +0000
Manifest next update:     Sat 31 Jan 2026 21:21:02 +0000
Files and hashes:         1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: zn2iOmFYgxBJV8M992MfTMBt0vjiuaWN101yQj6Fq2o=)
                          2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 6Kv6ZSL3MazMHrERvQ2sPcXYF/GKUnOfly5I2XW62pA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
        Validity
            Not Before: Jan 24 21:21:02 2026 GMT
            Not After : Jan 31 21:21:02 2026 GMT
        Subject: CN=697537bf-41d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:7e:7c:dc:33:8f:d6:0b:f6:c8:06:1a:75:
                    f9:82:56:35:28:00:41:11:ce:bc:58:38:2d:5e:77:
                    79:ad:d3:16:e9:24:b2:5d:aa:c9:2c:02:d5:df:bb:
                    8f:8d:ef:aa:b0:61:d2:15:7d:16:f2:67:f6:c8:1c:
                    7a:81:e2:05:5a:c3:3f:e8:f5:9f:e6:01:69:2d:e6:
                    05:9f:01:fb:a0:5b:5a:18:3d:0e:da:d8:bf:bd:42:
                    e8:ac:56:5c:4b:cd:b9:bc:9d:86:58:01:31:68:e2:
                    7c:bb:94:3a:e6:3f:f6:43:90:26:a3:47:57:cb:14:
                    49:85:ad:53:98:96:ef:9f:72:90:60:ae:69:5d:77:
                    9b:8e:25:d6:51:c2:4f:2f:69:07:36:e4:c7:0c:90:
                    10:ce:d8:41:9e:8f:e8:7c:47:b0:a5:30:99:4d:75:
                    41:79:7f:66:ca:2a:16:bc:46:b6:01:f4:2d:da:94:
                    89:35:ee:26:8c:0c:6c:22:24:6e:2c:d5:b3:ed:d8:
                    86:30:57:6a:3c:1f:fb:ed:5d:81:bd:e1:ff:5c:3c:
                    04:4d:40:33:74:4a:f2:92:02:6c:ed:f0:60:e1:a4:
                    dc:5c:2e:4a:df:45:12:29:c3:7b:3a:f9:07:60:eb:
                    dc:34:25:39:9c:21:ab:bc:60:2b:43:93:c6:23:c0:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:B2:4C:49:F1:99:E0:AF:08:5D:F0:42:45:72:D7:78:1A:82:DC
            X509v3 Authority Key Identifier:
                keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:d7:3e:ed:af:d8:b5:34:51:0d:ef:71:4d:b4:68:ac:f1:
         fe:61:39:4f:ca:12:6f:1e:1a:7c:08:df:86:45:84:7e:36:8d:
         0f:b0:45:a7:ee:1e:67:e2:a5:27:61:3f:d8:26:8b:d4:e4:3c:
         0f:9d:00:da:26:14:16:6c:d6:46:10:75:00:85:45:5b:a7:39:
         6c:a1:b7:e6:b5:05:ab:06:bf:07:ff:04:e4:c5:99:b7:c0:22:
         e3:5c:78:fa:19:1d:4b:f3:5e:4c:f6:00:16:d0:cb:34:85:3c:
         c7:81:ee:42:89:15:bb:9b:be:7b:f2:de:9a:03:70:22:2c:37:
         50:e4:8d:37:23:44:2e:7e:c8:a7:3f:c0:d7:c7:5e:ed:c7:e5:
         24:58:3f:00:73:e6:b4:cf:81:e7:75:48:38:f3:81:53:18:a7:
         a5:5d:9f:eb:2d:8b:2a:08:ef:99:27:cf:e6:9f:1c:5b:1b:a8:
         cb:2b:57:e4:a5:3c:bf:e5:5f:e5:f7:96:02:f4:85:e6:b5:ec:
         39:fb:28:70:df:3d:29:6e:48:16:94:a1:ff:9c:12:84:8c:6e:
         9b:e1:59:0e:2c:ab:21:1d:eb:6e:0b:38:31:88:ff:34:c0:78:
         f0:dd:1f:56:b6:41:21:94:6c:bc:74:28:dc:2d:ea:3c:01:dc:
         d9:1c:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:19 2026 by rpki-client