This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
File:                     _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json)
Hash identifier:          NPd+Z/4iPShlRsibM8zo4GJOgAOOEnd1l6fcZ4SEuRM=
Subject key identifier:   21:38:74:89:FC:04:B0:3C:A1:4D:BE:F4:E3:9A:A9:93:71:56:19:72
Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Certificate issuer:       /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
Manifest number:          0152
Signing time:             Sun 25 Jan 2026 03:30:31 +0000
Manifest this update:     Sun 25 Jan 2026 03:30:31 +0000
Manifest next update:     Sun 01 Feb 2026 03:30:31 +0000
Files and hashes:         1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: 6s4OBmO2K3uIoX4dspQrPW7QBVoFKWdCS7u0JYU5kqo=)
                          2: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: R5owjVusYT1yzRbPvUH5Ej87j/W5N646Aao5Y3mq5wA=)
                          3: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: RDk8brqQwOSnjYaq+zDlbRakXm4WtI5gZfQM2U1Www8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl
                          rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392
        Validity
            Not Before: Jan 25 03:30:31 2026 GMT
            Not After : Feb  1 03:30:31 2026 GMT
        Subject: CN=69758e57-511d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:2e:a2:da:6e:52:b3:51:dd:00:b0:14:ba:
                    68:21:e8:1e:13:c2:88:d3:58:bb:8f:b4:71:5c:7d:
                    29:1a:40:23:a3:c7:c5:92:22:b4:9f:f3:39:a2:a8:
                    ad:8e:9d:b6:b3:00:d3:c8:2d:3f:cb:3a:f7:70:e9:
                    87:fe:ae:f9:0c:e7:bb:00:fe:da:2f:d1:1a:10:b7:
                    ff:85:ee:77:97:2c:c6:71:eb:57:13:8d:22:77:a5:
                    3a:cc:3f:f0:c2:12:4a:f4:8a:21:63:1c:d5:45:53:
                    63:d6:aa:2e:e2:58:bb:96:c0:62:ea:c0:48:16:8a:
                    20:f8:37:21:a2:7e:11:30:a7:fc:37:0b:c4:d7:18:
                    51:fb:8d:d5:54:c9:af:29:29:9e:e7:75:f8:81:b5:
                    aa:a6:6e:23:84:69:02:9c:d3:ac:9f:cf:a1:be:84:
                    a7:66:ba:bb:5d:bc:04:8a:b8:03:5e:d4:a1:23:7c:
                    62:2d:10:a3:1a:ee:4d:a4:7b:de:ee:39:d7:f3:9a:
                    53:13:e3:5f:b3:92:bb:81:23:5a:b8:61:e8:f0:79:
                    24:f9:d7:d3:f6:cc:dd:73:aa:e8:b3:02:75:55:30:
                    8c:f4:6b:57:90:38:b4:86:ed:6f:bb:cc:87:50:4d:
                    46:bf:ec:a0:56:da:e8:99:2e:c0:92:84:ba:5d:6d:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:38:74:89:FC:04:B0:3C:A1:4D:BE:F4:E3:9A:A9:93:71:56:19:72
            X509v3 Authority Key Identifier:
                keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:49:2b:93:c4:a7:51:00:d5:04:fd:a4:17:52:41:48:73:
         c5:62:39:c8:cf:df:29:1a:65:2c:9e:c5:70:b9:0f:43:6c:0f:
         90:5c:8c:23:3e:66:05:9e:fc:1e:4c:63:ad:64:92:08:49:4f:
         58:b0:80:cc:93:37:87:ae:1a:77:a4:dd:0a:ba:36:fb:46:d5:
         c6:99:78:42:ad:57:ff:0a:13:aa:ea:f5:c5:35:cf:fc:f9:ce:
         35:ab:45:01:57:83:7d:d0:32:c2:6a:ec:c5:e4:3a:1f:3a:a9:
         df:66:8c:fa:fc:a9:c5:cf:6e:45:b6:69:7c:e2:e8:28:8f:9b:
         53:c4:ad:8f:d3:d5:f4:25:40:70:33:b2:35:26:f0:a3:9c:50:
         04:72:3c:91:bd:37:ef:01:c3:b9:76:23:92:99:a7:49:91:cf:
         69:34:4d:56:f3:e2:47:ee:d1:47:e4:f7:4f:71:88:c0:94:1e:
         75:d1:9c:d9:d0:e6:09:6a:b7:64:8d:80:c6:62:92:5b:3e:6a:
         99:70:ab:19:88:66:ab:b3:c1:54:e0:f1:69:04:f5:93:62:0b:
         ca:1f:57:be:ac:ca:0b:fd:f2:3f:9d:71:a3:23:41:ff:0b:d4:
         05:90:82:ca:46:7f:d0:da:2f:66:4d:93:fe:3e:71:61:cc:0f:
         00:09:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:05:17 2026 by rpki-client