This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          5qukRMJaQb3Fh1yZuK2+YDDnBtybm8vEn/E/Wqdz+p0=
Subject key identifier:   D7:BB:38:80:40:32:3D:73:62:22:45:7F:E1:76:CE:EF:D1:79:58:9B
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       096B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          094F
Signing time:             Sat 24 Jan 2026 19:37:26 +0000
Manifest this update:     Sat 24 Jan 2026 19:37:25 +0000
Manifest next update:     Sat 31 Jan 2026 19:37:25 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 5GG/xHenL9iu3VHvTLCQ2hQUL7hzHYG1Tvwg2MyBtKM=)
                          2: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: AMggt9zpwS0BRdqI+ClPrj6WWxTra7y9F4TlC3w0Ums=)
                          3: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: rJeii+ilF+9cVriG2vucr/nhWEU/kidxHLEjPFgUME0=)
                          4: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: RO65RMNM2Nj+skVx9D4SwK+SURjH9kvIKLTrXVq1cDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411 (0x96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Jan 24 19:37:25 2026 GMT
            Not After : Jan 31 19:37:25 2026 GMT
        Subject: CN=69751f76-d55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:9b:88:b9:07:73:10:a0:f5:4f:eb:b4:b4:
                    76:4a:eb:13:44:b5:f9:34:23:a7:d8:1f:a5:e3:02:
                    28:81:08:72:4a:6b:c9:29:19:e6:ac:b2:0c:0a:8d:
                    67:28:a8:2c:7c:d5:fd:30:14:b0:ed:9b:17:ba:4e:
                    8e:d1:75:a6:9c:92:02:f0:17:b9:50:e7:5d:6c:9b:
                    0f:71:54:a8:49:b2:3b:09:c1:c6:fb:a2:e5:4f:f1:
                    eb:6a:83:75:b2:77:88:73:60:b9:cc:fd:ab:b4:85:
                    60:de:e5:47:f5:31:68:6d:2e:a0:83:79:42:be:8f:
                    0f:e3:e7:d5:10:c1:8a:af:92:0b:b7:06:4d:3a:0c:
                    12:29:1c:c4:7a:80:43:d5:c4:57:95:25:9d:75:2e:
                    a4:81:91:f8:43:1c:ce:3e:31:2b:e9:49:c9:3f:17:
                    9b:ad:08:0a:5e:22:c8:27:41:7e:37:ab:d7:75:f9:
                    17:7c:fa:9d:33:90:1f:a5:c3:af:85:f1:75:1d:84:
                    dd:1e:a2:b6:cc:2f:39:1a:66:2f:12:6e:b7:7c:41:
                    b6:25:7b:58:00:ac:e3:38:b1:23:7b:4b:95:49:7a:
                    b9:22:b2:d5:a2:f5:a7:15:2c:c9:5c:df:7f:1b:80:
                    da:2c:90:bc:e6:97:fd:08:a6:c1:18:3a:60:84:1e:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:38:80:40:32:3D:73:62:22:45:7F:E1:76:CE:EF:D1:79:58:9B
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:0d:eb:6e:cf:74:80:46:c6:54:c1:94:7d:25:90:28:73:59:
         bb:1a:5d:4c:d4:b2:04:a0:78:56:00:41:d7:51:aa:60:45:ec:
         02:44:18:16:77:4f:89:9e:17:8a:95:2e:8d:36:d3:41:a0:30:
         53:03:c1:79:64:be:be:5f:87:38:53:47:58:6b:6f:41:03:83:
         e6:6e:e8:c1:d2:c3:d7:ce:7f:55:a7:3a:04:73:83:b7:0d:fd:
         d6:15:e4:53:d6:e2:95:85:a2:e7:96:ba:47:70:b6:80:62:ae:
         9c:78:45:09:7a:28:00:78:38:8d:8c:44:df:f2:b0:2a:d0:12:
         2d:1b:7f:13:6d:72:4b:94:64:1c:9d:08:52:69:4e:e6:fe:b5:
         bf:8f:60:90:73:0d:50:e3:4f:2d:6e:4f:49:f5:7a:cf:53:75:
         03:0d:ec:43:57:e9:c6:55:c6:14:71:7b:07:dc:2b:09:2a:62:
         f7:82:40:25:2b:a8:a3:b6:c6:df:16:20:34:80:58:e4:6c:c2:
         52:f9:72:0c:82:9c:f2:e7:35:43:ec:ec:46:db:6b:90:5c:c0:
         02:f0:1d:84:54:b2:7b:28:24:37:de:87:4d:42:a9:2a:2e:85:
         d4:c4:4b:ee:41:ba:97:1d:2a:fd:29:fb:7b:e8:88:26:7e:34:
         3c:17:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:53:43 2026 by rpki-client