This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
File:                     DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json)
Hash identifier:          3tbIUwooaMM7fVgFNnDO7rIM3gjgo1qL7dF1r7BIOKs=
Subject key identifier:   69:3C:32:53:69:D4:6A:B6:FE:C2:44:84:69:01:A8:26:9B:30:AF:4D
Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
Certificate issuer:       /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
Manifest number:          01C3
Signing time:             Sun 25 Jan 2026 02:16:12 +0000
Manifest this update:     Sun 25 Jan 2026 02:16:11 +0000
Manifest next update:     Sun 01 Feb 2026 02:16:11 +0000
Files and hashes:         1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: U0su8KDiJKrOx4C9y5S74eBvu8ss4jTCDaIAVP2Q6b8=)
                          2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: jXDiNUfmAph8KmmhKCwstWhLejYXnSu0uk3x3qOWIK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
                          rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
        Validity
            Not Before: Jan 25 02:16:11 2026 GMT
            Not After : Feb  1 02:16:11 2026 GMT
        Subject: CN=69757cec-f76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:ed:d5:3d:40:c3:d7:fa:2c:9a:8b:43:2a:
                    fd:09:2c:4b:c0:8c:04:20:cc:13:05:b9:ae:2c:88:
                    ce:dc:6c:20:2d:67:32:60:d2:c5:0c:b3:43:9b:2b:
                    59:f4:2f:74:9f:56:34:ec:1e:d6:0c:47:13:e6:8c:
                    4f:58:8c:5c:b0:a9:e2:8a:c7:c3:9e:a1:4f:27:f8:
                    d4:74:4e:5b:f7:db:c1:f3:62:49:52:64:23:dc:65:
                    eb:4e:29:f0:06:2e:25:f1:13:dc:17:b9:50:ca:5c:
                    8a:44:3b:af:31:3f:69:7a:cd:bf:cd:50:3d:18:72:
                    83:f8:85:bd:fb:a6:50:ec:90:ff:26:bc:83:24:74:
                    20:77:a8:ed:f8:85:1b:dd:46:58:46:16:2f:bf:32:
                    1c:95:96:5c:7e:05:06:7e:ad:3a:4f:b0:00:1b:9c:
                    48:7b:47:05:d5:8c:bd:5a:40:94:17:ff:24:df:89:
                    d0:ae:85:5b:4e:bd:9d:28:eb:c7:c2:40:33:a6:15:
                    57:71:53:aa:a4:d1:8a:e5:89:6b:31:af:4a:17:82:
                    1a:72:50:86:43:e5:cc:95:4f:6e:a3:91:f8:f6:c2:
                    e4:4c:91:c1:48:5f:8c:02:1d:bf:5d:bc:74:19:c9:
                    1e:8b:68:0e:84:ca:4c:9f:9a:6e:30:b4:32:35:54:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:32:53:69:D4:6A:B6:FE:C2:44:84:69:01:A8:26:9B:30:AF:4D
            X509v3 Authority Key Identifier:
                keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f7:20:da:a3:7a:d0:c3:59:7d:d7:6b:f9:27:05:f0:e5:78:
         ec:a8:63:f2:1a:68:83:f2:65:93:e4:42:13:33:81:77:84:f7:
         39:6c:3d:53:62:63:b8:af:a6:20:a4:97:85:81:c7:d8:f8:04:
         fc:a0:cc:00:a6:ae:19:36:b9:d6:c2:80:71:2a:2d:f0:59:f6:
         3a:d2:47:78:d8:2b:3a:67:dd:57:aa:ae:73:c6:95:b6:fd:57:
         30:ed:38:6f:ac:48:1e:2f:57:8f:1e:b3:6f:6f:1e:26:b0:5c:
         da:62:bc:f7:25:be:af:f7:ed:4b:b4:42:ce:ac:6f:61:23:f1:
         9e:ee:1e:cf:f1:9a:fa:da:27:9b:b0:fc:7c:50:ab:bf:cd:45:
         26:0b:bc:fa:59:87:22:86:8d:a0:eb:8c:ae:90:3b:6a:45:5f:
         3c:a5:ae:76:bc:00:8d:4d:cd:0a:c3:98:ae:44:20:7a:73:59:
         1f:d1:42:16:10:d5:ec:47:ca:78:0c:eb:0c:df:4b:f9:46:cd:
         1c:27:37:5f:4e:74:3a:2c:df:b0:7e:9e:87:51:eb:d7:79:24:
         78:ad:38:8f:5f:61:5e:a5:5e:90:f8:e7:c1:00:f5:ec:53:5a:
         f7:d4:6c:14:da:e3:fd:dd:f1:19:8a:0c:ec:cf:4b:00:4e:21:
         fd:02:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:36 2026 by rpki-client