This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          YY8Pld56Mezz0CFNTwma3xLNhUWxLH+fJD2ozsib2j0=
Subject key identifier:   E0:AE:B1:7A:78:B0:9C:DD:86:44:B8:15:22:39:CA:6A:FD:67:4F:99
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          DA
Signing time:             Sun 25 Jan 2026 04:50:55 +0000
Manifest this update:     Sun 25 Jan 2026 04:50:54 +0000
Manifest next update:     Sun 01 Feb 2026 04:50:54 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: wpdwEvT9JCEb1iOE0FAExylVqTbuowBl/PTy3qSff4o=)
                          2: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: MXLScbZrX+ixKdw+PkZ2ou8n1e3yrgCRyU1xYRmvDJE=)
                          3: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: e+4VvyTw5EiL9s2wDbpueyf6WrUVOXMUrF9XKmOAfHk=)
                          4: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 8Y7BjEQwwth3UdSD7/xgkj96IaOOzZmnkVz9bWZwiMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Jan 25 04:50:54 2026 GMT
            Not After : Feb  1 04:50:54 2026 GMT
        Subject: CN=6975a12e-47b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:71:49:7a:cf:fe:56:87:24:a4:f9:b6:09:
                    24:56:d7:5d:66:9b:ec:27:47:a0:b4:e7:e9:4f:79:
                    6f:5a:ce:22:fb:0d:c7:84:b1:6c:7f:8f:6d:0f:74:
                    6b:5f:33:2b:ad:d2:0f:61:db:94:06:19:b2:e5:42:
                    c3:06:e3:62:46:43:77:3c:06:49:4b:6a:eb:63:d8:
                    14:02:9c:c9:a5:0e:6c:8b:1c:92:c7:91:f0:6d:76:
                    5f:a4:00:d4:9e:2a:9f:cc:aa:35:60:6b:34:5a:7d:
                    2c:45:d6:b9:80:1a:df:34:50:86:a8:1e:07:a6:d3:
                    0a:dd:4c:1a:b1:ff:b9:41:af:32:fd:6c:9b:6f:d1:
                    a8:a2:35:d0:4d:27:3c:e8:1c:79:21:0c:27:e7:f9:
                    b6:3b:28:0d:4c:5e:de:89:a1:b1:c4:4f:7d:9e:ac:
                    6c:a8:56:67:6f:5f:a5:88:52:67:df:a8:fd:6f:3a:
                    f0:17:11:fc:8b:b2:9b:7f:b4:80:a0:99:d2:cd:52:
                    97:14:a9:30:58:d6:64:fd:05:e2:0b:3e:66:a2:36:
                    9d:13:a9:1f:b7:39:f7:e8:2c:32:7f:bb:75:c2:fa:
                    20:e4:c5:aa:4e:c1:9f:db:bc:06:ef:bf:29:10:ed:
                    69:45:cf:5e:47:cc:97:e8:75:84:31:17:a1:47:2f:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AE:B1:7A:78:B0:9C:DD:86:44:B8:15:22:39:CA:6A:FD:67:4F:99
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:ec:71:98:04:a4:10:c9:0b:cb:7b:0c:48:18:ab:ca:36:
         62:16:9e:bc:55:80:e9:c0:63:a7:7e:ff:a6:af:79:11:e1:01:
         f6:29:90:bf:84:ff:42:3b:8e:de:0d:8c:31:da:71:f1:f4:af:
         83:f2:6f:4c:6b:66:d2:69:aa:32:18:4f:71:21:69:8a:68:91:
         33:05:ad:d9:0c:d2:bf:68:cf:6c:0f:cd:e1:48:40:f2:66:2f:
         bd:12:52:1e:35:24:0c:64:35:2a:12:60:cf:42:49:11:fb:ee:
         bc:a8:45:0b:12:d5:47:eb:46:58:0f:4a:e7:8c:34:b2:84:af:
         c8:d9:6e:48:18:b4:20:a6:aa:cb:68:8e:10:79:83:5a:b2:b5:
         68:0a:a1:60:dd:1f:81:2e:e0:3f:14:66:48:33:1a:86:25:42:
         b9:28:68:08:71:88:a6:ae:a7:f1:e3:2f:2f:ad:45:08:e1:cc:
         71:ce:cc:f8:27:57:a4:c5:ea:7b:cb:1c:95:e4:1e:a4:22:3c:
         7b:f1:6c:25:96:bf:f4:8d:d1:f7:31:6b:29:02:05:b7:d0:5e:
         ce:c3:6c:e3:50:9e:bd:b8:63:17:fa:67:25:28:6d:97:b7:e3:
         25:f3:94:5f:c3:d8:f4:ca:ce:e4:79:05:34:8f:64:c3:62:bb:
         97:29:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:42:48 2026 by rpki-client