This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
File:                     DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json)
Hash identifier:          F/jP8PSxT8R3STLvi/5W439APJJA1C5TAEKuG0AZdSE=
Subject key identifier:   A4:19:42:25:0C:8B:B3:F4:15:2C:F4:0F:2E:50:9F:BA:1E:8A:6B:62
Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA
Certificate issuer:       /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
Manifest number:          0168
Signing time:             Fri 23 Jan 2026 03:07:31 +0000
Manifest this update:     Fri 23 Jan 2026 03:07:30 +0000
Manifest next update:     Fri 30 Jan 2026 03:07:30 +0000
Files and hashes:         1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: ystT/3syv0ZFadgjo9FsNzeXqlUGVJ1N54+vHqPmAxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
        Validity
            Not Before: Jan 23 03:07:30 2026 GMT
            Not After : Jan 30 03:07:30 2026 GMT
        Subject: CN=6972e5f3-290a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:1e:00:70:20:c8:e1:7b:9b:84:f6:24:63:
                    24:1c:12:14:5d:e1:2a:61:8c:5e:5e:ba:7b:0f:bd:
                    ba:b1:08:d3:58:ae:b1:fc:95:e0:2e:13:39:b6:66:
                    b8:8f:1a:b0:6d:53:52:62:cb:d5:eb:00:a8:1e:ea:
                    aa:ac:43:fb:d2:00:be:98:89:e8:a6:7b:01:6e:c5:
                    01:5f:54:a8:b3:c8:a4:dd:ba:dd:18:c6:e3:a8:6c:
                    db:cf:dd:69:48:43:9e:38:66:aa:9d:d1:2c:66:fe:
                    ca:6a:a2:07:85:15:23:83:3f:38:41:3d:2e:3c:ae:
                    d0:90:6e:25:83:14:07:08:a8:09:61:81:57:4c:e4:
                    30:4a:ad:10:64:1f:ab:ff:c5:0f:90:ed:a2:b7:14:
                    3b:52:9b:a9:d1:ac:3b:c3:03:71:08:dd:a1:eb:63:
                    c1:8e:ef:df:c2:84:ec:20:42:16:cb:2a:fd:78:63:
                    58:44:5e:c2:69:42:49:b9:cd:68:c9:26:bf:36:75:
                    cc:1b:81:88:ca:93:c8:b4:15:6a:05:24:ac:8c:92:
                    90:9a:3c:b3:a3:a9:5b:6f:38:1b:fa:6c:57:2e:5c:
                    a2:b5:a6:4e:dd:c8:f3:60:f1:a0:e7:1b:55:35:68:
                    10:4b:01:78:09:22:f3:2c:e5:5c:8b:79:da:9a:30:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:19:42:25:0C:8B:B3:F4:15:2C:F4:0F:2E:50:9F:BA:1E:8A:6B:62
            X509v3 Authority Key Identifier:
                keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:af:a0:ab:95:c3:a6:3e:2c:6f:48:99:bb:29:2a:8f:44:
         22:12:21:0f:4c:43:77:ce:48:54:ca:ec:a7:63:a8:35:8f:f4:
         f3:8b:da:69:bf:5a:22:07:32:a0:8e:86:3e:02:be:3f:14:41:
         f4:45:43:cc:82:0c:65:b7:43:e1:a2:78:d0:3f:10:66:f6:ad:
         c6:eb:5f:5e:65:64:a2:db:1f:a2:84:16:12:c4:4a:10:dd:b7:
         2c:e3:2e:f9:22:7d:ce:3a:3b:e1:f8:bb:8b:65:ff:0a:17:ee:
         b0:40:2a:19:41:76:44:d0:0c:df:4d:f0:df:64:a2:cd:58:27:
         71:0e:05:85:2c:a2:fb:2b:fd:32:e7:06:30:28:a0:55:dd:08:
         be:58:b2:7f:b7:de:d1:01:cd:fd:76:89:4f:31:59:c5:04:63:
         4b:44:b2:70:3a:dc:bd:96:e8:e0:e8:5e:44:e2:77:6a:d9:3d:
         99:96:e6:e1:09:3c:d6:47:53:58:37:25:17:4e:cf:68:15:8c:
         95:2c:e8:ad:54:8c:a0:57:c5:a8:42:09:07:dc:47:89:ed:23:
         e0:a8:df:fd:c3:31:b0:80:a1:5b:ff:5d:a0:40:34:ff:ec:a0:
         d5:76:bd:5c:5e:1b:44:2d:d2:68:e1:21:47:32:24:14:c5:eb:
         17:32:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:29 2026 by rpki-client