This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File:                     dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier:          C5F3Zg9wHHUTBeP0Wo3dNfAuLs0Qh4pY/eFu5vAJoCU=
Subject key identifier:   8C:76:8A:4A:16:7D:4D:E2:AC:98:8F:D9:F3:1D:56:3C:D5:1A:FD:70
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer:       /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number:          F2
Signing time:             Sun 25 Jan 2026 03:15:38 +0000
Manifest this update:     Sun 25 Jan 2026 03:15:38 +0000
Manifest next update:     Sun 01 Feb 2026 03:15:38 +0000
Files and hashes:         1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: gls3hbCaTGi5rqcohfD00DIDwk3swKnkPMJXBMg5t1g=)
                          2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: YQlBNwYwGzBA47XLIFpxmRNKyhqsARhKVE7X4e31ohg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
        Validity
            Not Before: Jan 25 03:15:38 2026 GMT
            Not After : Feb  1 03:15:38 2026 GMT
        Subject: CN=69758ada-adfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:19:52:d0:b8:e0:c7:4d:03:a4:7d:31:cc:
                    ce:61:4a:b5:22:3a:13:c6:27:a0:0c:5c:21:af:4b:
                    2c:63:3d:9b:67:b6:99:23:45:65:f0:34:54:16:0b:
                    81:27:76:11:ce:8d:a7:93:82:89:39:1e:20:21:2b:
                    fd:84:91:9d:8d:4a:16:d5:5c:7c:79:2d:91:27:05:
                    ad:ee:48:cb:fd:0a:b5:03:1d:6d:08:8f:0b:11:c5:
                    2b:5d:a1:ba:0c:f9:53:5a:96:59:d6:8d:c6:c8:33:
                    b3:c1:9d:84:f4:77:f9:f0:31:e5:d3:fa:34:e5:53:
                    48:66:75:dd:20:89:11:18:9e:8d:3b:62:b9:58:93:
                    48:50:bd:c8:4e:32:04:ce:b1:0a:7d:c7:d8:b0:a6:
                    cc:38:9e:fb:ab:80:05:69:df:31:65:1e:15:86:4f:
                    fe:70:75:c1:52:36:e7:d6:79:5c:b0:db:b5:0e:2c:
                    32:2c:c2:e0:79:ff:8c:5a:32:f5:b9:00:3f:4e:0c:
                    07:18:84:94:f3:4b:0d:c9:d8:d8:39:36:15:d9:87:
                    62:ae:ea:5b:90:20:ba:7f:00:c5:9f:5c:37:2f:3f:
                    dd:15:8f:4c:6b:d6:af:32:e3:52:62:a9:47:7d:63:
                    2c:87:cd:ef:be:25:6d:8d:1b:32:50:3d:e5:ca:5b:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:76:8A:4A:16:7D:4D:E2:AC:98:8F:D9:F3:1D:56:3C:D5:1A:FD:70
            X509v3 Authority Key Identifier:
                keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:9f:78:08:bd:8b:f3:9e:17:dd:da:ef:a8:2a:4a:d3:1e:
         62:b0:13:21:2a:bb:65:73:e7:c0:de:4b:88:33:8d:58:ed:78:
         63:81:7a:a0:7e:5e:ae:e2:83:3e:dd:bd:05:e9:eb:17:38:2e:
         74:c5:a0:5c:1c:bd:23:16:7e:ea:19:6c:05:cb:41:d1:76:39:
         4e:08:f9:69:12:0f:3c:9b:0c:ae:19:f1:94:39:38:53:32:1d:
         aa:fe:87:b7:ea:36:65:9e:f9:89:94:89:9a:c0:bb:24:b6:81:
         99:60:2b:93:60:ce:6b:37:be:32:5d:6e:62:3d:09:7d:7a:8d:
         26:d6:30:f6:ac:32:f7:85:ae:00:f9:cc:3c:25:d1:8c:73:7e:
         db:ce:68:69:6f:ed:4d:8e:65:f0:2a:32:c3:ba:19:9c:30:c7:
         19:a8:ed:0e:18:04:d1:8e:a7:0f:72:27:d0:d6:08:0f:31:f5:
         d8:a7:ac:b3:7f:37:d7:d2:b7:50:85:77:3d:b8:c8:cb:b2:03:
         bd:28:64:68:fc:72:0c:f9:57:07:59:73:f9:ed:42:6c:00:2e:
         db:2a:a5:41:53:78:68:6e:93:9d:5b:2a:6e:f2:0f:d6:6e:ea:
         9a:59:39:8a:f7:71:a1:96:59:78:3d:5a:af:bc:0f:0e:0e:a4:
         f3:79:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:15:34 2026 by rpki-client