This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File:                     -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier:          vTLxv0eBZuLAl3Oez74A0hVV0pNaAntG1UC7KXIck/w=
Subject key identifier:   E3:E0:E7:28:02:24:7C:F0:F7:0A:D4:0D:98:EF:A7:69:12:6E:7A:EC
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       033C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number:          0322
Signing time:             Sun 25 Jan 2026 00:20:11 +0000
Manifest this update:     Sun 25 Jan 2026 00:20:11 +0000
Manifest next update:     Sun 01 Feb 2026 00:20:11 +0000
Files and hashes:         1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: r1Ei5Fx1olJ5Efe0yXOw7a7qQFFcY2Zsm0+MLau0QTk=)
                          2: D2861480EF7111F083B369325B6F56BC.roa (hash: B0Lue4k5q/P8x3NWtKnj+hjinQYT4sflDVirfe7rdZs=)
                          3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=)
                          4: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: 6d1MeFDErLTksuqngoB0AUwhaZYy9q2yMdoCFh9lWOQ=)
                          5: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Jan 25 00:20:11 2026 GMT
            Not After : Feb  1 00:20:11 2026 GMT
        Subject: CN=697561bb-f3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:a9:06:03:45:67:67:45:69:b5:ac:4c:18:
                    5d:bf:a5:09:a2:96:1a:a3:b8:54:a5:3d:cb:bc:92:
                    57:46:a6:68:44:d4:1a:01:3e:eb:61:99:98:24:e1:
                    e8:6a:37:05:19:5f:34:25:ed:e2:24:e8:44:14:8d:
                    d2:68:3f:bf:ec:b9:2a:c6:88:6f:f4:6e:36:2d:8f:
                    56:eb:18:a3:66:1d:26:d8:32:be:64:c5:5f:17:80:
                    a7:f4:e2:55:1c:1b:49:b4:ef:49:d0:e4:1e:80:54:
                    8a:0b:0b:7b:b3:b5:36:67:74:fc:4c:cb:af:b6:b3:
                    81:26:be:de:be:f0:59:24:b9:9e:24:8b:a6:cf:eb:
                    0b:9c:15:0c:80:a8:d3:ee:e4:dc:e2:35:7d:0e:5d:
                    74:c0:60:f3:4c:1b:f6:8b:67:9a:b5:78:f2:1a:a5:
                    13:97:56:33:cf:7f:ed:89:b9:5c:8e:02:1d:5c:0f:
                    21:ad:4e:e3:0c:2b:3f:96:a2:9b:5f:c4:2d:30:83:
                    89:c9:e9:44:15:d3:76:c3:9c:2b:33:7b:e8:30:12:
                    9b:f2:af:ec:7d:cb:33:94:09:c5:a4:a9:60:4b:b9:
                    7b:7b:c6:ff:73:88:7a:5e:31:f2:15:8c:20:85:fe:
                    5a:07:66:1e:8b:9a:f9:69:65:05:f8:d7:12:e5:74:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:E7:28:02:24:7C:F0:F7:0A:D4:0D:98:EF:A7:69:12:6E:7A:EC
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:cb:9e:22:92:ba:e3:ab:ac:16:0f:12:82:35:98:81:52:
         89:f0:93:1e:ae:97:fc:25:1d:15:80:82:ba:3e:46:fe:a4:b2:
         f3:b6:b2:e6:6b:d4:d2:85:1d:c4:f7:1c:4e:a3:ac:1b:b0:b2:
         ec:95:da:87:51:38:5d:1d:81:20:94:7e:52:d6:92:f8:49:5b:
         eb:54:eb:25:36:7d:18:1d:2a:25:6a:59:55:9c:3e:2f:c2:21:
         87:56:45:68:5d:d6:d8:0d:5f:d2:e7:3e:51:68:42:18:ba:9c:
         f0:a7:90:de:bc:e7:6f:0f:ae:35:5d:35:1a:7f:89:83:e7:d8:
         a2:9b:66:f1:d6:f5:76:c7:80:99:d9:e8:e3:5c:86:9a:1e:16:
         b2:14:a9:64:3e:cd:f2:88:b7:13:f8:79:17:58:92:d3:ee:a2:
         93:16:df:d4:d1:19:a5:7e:0f:bd:da:ae:f4:22:82:f0:03:fb:
         96:30:d6:67:ec:2d:9b:b3:3b:db:e9:60:06:e7:f4:ec:d4:9c:
         16:3f:a0:b0:6c:d2:14:5b:d8:94:ca:0c:93:b4:2b:a0:31:7b:
         45:b5:3a:96:5d:9b:5c:06:96:45:24:15:48:61:f4:72:d2:1c:
         32:5d:38:49:24:ca:92:43:62:eb:d7:35:50:17:e7:e2:ab:6e:
         40:82:cf:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB
NTc1MjRERTEwHhcNMjYwMTI1MDAyMDExWhcNMjYwMjAxMDAyMDExWjAYMRYwFAYD
VQQDDA02OTc1NjFiYi1mM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6z6pBgNFZ2dFabWsTBhdv6UJopYao7hUpT3LvJJXRqZoRNQaAT7rYZmYJOHo
ajcFGV80Je3iJOhEFI3SaD+/7Lkqxohv9G42LY9W6xijZh0m2DK+ZMVfF4Cn9OJV
HBtJtO9J0OQegFSKCwt7s7U2Z3T8TMuvtrOBJr7evvBZJLmeJIumz+sLnBUMgKjT
7uTc4jV9Dl10wGDzTBv2i2eatXjyGqUTl1Yzz3/tiblcjgIdXA8hrU7jDCs/lqKb
X8QtMIOJyelEFdN2w5wrM3voMBKb8q/sfcszlAnFpKlgS7l7e8b/c4h6XjHyFYwg
hf5aB2Yei5r5aWUF+NcS5XRj0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPg5ygC
JHzw9wrUDZjvp2kSbnrsMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz
MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1
WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLHMueIpK646usFg8SgjWYgVKJ8JMerpf8JR0VgIK6Pkb+pLLztrLm
a9TShR3E9xxOo6wbsLLsldqHUThdHYEglH5S1pL4SVvrVOslNn0YHSolallVnD4v
wiGHVkVoXdbYDV/S5z5RaEIYupzwp5DevOdvD641XTUaf4mD59iim2bx1vV2x4CZ
2ejjXIaaHhayFKlkPs3yiLcT+HkXWJLT7qKTFt/U0Rmlfg+92q70IoLwA/uWMNZn
7C2bszvb6WAG5/Ts1JwWP6CwbNIUW9iUygyTtCugMXtFtTqWXZtcBpZFJBVIYfRy
0hwyXThJJMqSQ2Lr1zVQF+fiq25Ags9a
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:27 2026 by rpki-client