This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File:                     PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier:          c/RfwulelCsrWAzewGs2FJa8/VHMTQfzJARju689kJ4=
Subject key identifier:   E7:71:59:84:90:30:1C:A8:B3:10:23:83:90:FA:02:16:29:64:E1:E1
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       03FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number:          03EC
Signing time:             Sat 24 Jan 2026 23:43:55 +0000
Manifest this update:     Sat 24 Jan 2026 23:43:54 +0000
Manifest next update:     Sat 31 Jan 2026 23:43:54 +0000
Files and hashes:         1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: yBzA/5Sa0Ds2qPfsWofTjqxkrg+XV1HkEGLmVZG32KU=)
                          2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=)
                          3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: Jan 24 23:43:54 2026 GMT
            Not After : Jan 31 23:43:54 2026 GMT
        Subject: CN=6975593b-21b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:3f:2b:6d:e6:ec:80:c6:2a:73:c4:9f:5a:
                    5d:60:ae:bd:66:aa:18:43:94:56:5b:57:44:0e:76:
                    7c:72:56:76:66:3a:02:d6:a0:b6:7f:59:c8:61:ab:
                    d6:33:cc:07:6e:6c:47:1b:97:5d:15:c7:1c:b6:dd:
                    b4:f5:a0:b8:c6:c9:c2:dd:ab:17:5f:cc:bf:5e:91:
                    36:ac:6e:ce:7a:45:88:ae:8d:4e:93:a1:1f:e1:cf:
                    39:52:9d:89:99:2d:06:71:45:af:77:0f:ef:e1:0b:
                    51:de:5d:35:76:04:50:8c:8b:7e:2d:94:ae:a9:35:
                    97:84:aa:d2:1f:c6:22:b6:79:22:fa:6a:91:e0:37:
                    d1:5c:40:e1:55:ab:be:ea:8c:72:12:18:d1:af:01:
                    69:c4:15:0a:77:8a:7c:4d:da:d6:44:09:dc:b7:82:
                    c2:8c:b5:3c:d0:89:b7:5b:eb:7b:82:62:d6:7c:f9:
                    96:73:ef:cc:08:54:28:48:a3:ee:d3:e4:f9:7a:67:
                    37:9b:d5:82:ae:8d:26:0e:8d:06:82:8e:82:c0:8a:
                    42:e3:93:4f:ae:e5:c6:50:9e:f0:e3:f2:a8:65:ac:
                    90:64:2d:dc:20:52:0f:32:d5:02:d2:b4:58:fe:9c:
                    37:c3:84:5b:60:a6:1f:50:8f:a0:0b:a2:25:58:ec:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:59:84:90:30:1C:A8:B3:10:23:83:90:FA:02:16:29:64:E1:E1
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:16:de:1a:f4:a1:65:4c:ea:7a:cd:47:4b:a1:3c:c9:de:6c:
         fb:e9:53:ef:d9:e3:b0:f3:cc:64:8f:33:85:29:f9:53:2b:ae:
         73:36:09:0f:36:c1:9f:e5:96:f7:9c:22:e9:5b:60:bf:56:8f:
         27:c5:fb:33:68:18:b7:bb:38:09:0d:ea:3a:89:31:50:59:74:
         ce:e0:7a:24:d9:1d:3e:44:e1:4f:6c:03:87:6d:07:17:95:9e:
         40:e0:ad:61:c1:0a:53:67:3f:83:b4:57:5f:f3:34:1b:d3:fb:
         ce:cc:f8:33:f1:54:ab:f3:6e:26:7c:d1:f2:c4:eb:9e:db:5b:
         38:27:6e:a1:44:e5:4a:2d:18:8c:36:71:e1:12:3e:28:35:09:
         d2:19:86:5a:6f:21:00:b5:ee:6f:13:6a:d6:cc:b5:c3:8c:c1:
         60:72:c7:34:1f:f7:19:5f:fa:49:ba:87:e8:c0:8f:42:52:72:
         f3:26:7a:89:c7:f7:95:34:6a:df:b3:96:bb:3e:fe:53:a9:dc:
         6c:06:73:ce:87:9d:ea:19:c2:5e:e7:45:86:36:aa:ae:27:51:
         9c:3d:e0:c2:dd:11:15:00:8a:95:55:bc:1f:63:89:c8:aa:b5:
         39:a6:99:2c:00:b9:46:a4:74:67:53:4d:46:5a:82:1e:ac:cc:
         db:f2:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:08 2026 by rpki-client