This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File:                     MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier:          hmUqPegj4PcQj1PjKSm91fTbbynEF3NOGcvqmNl1hNY=
Subject key identifier:   A4:8C:FC:B1:88:B8:7D:54:B9:47:B5:2E:11:BA:22:5C:7A:67:7B:63
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer:       /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number:          25
Signing time:             Sun 25 Jan 2026 05:10:48 +0000
Manifest this update:     Sun 25 Jan 2026 05:10:47 +0000
Manifest next update:     Sun 01 Feb 2026 05:10:47 +0000
Files and hashes:         1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: w69JSOCkDQWJ/f2zJI7QHS27Dwt0JNKOZnc3JObAqRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
        Validity
            Not Before: Jan 25 05:10:47 2026 GMT
            Not After : Feb  1 05:10:47 2026 GMT
        Subject: CN=6975a5d8-7307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:12:b6:2a:53:65:ef:ac:68:c5:bd:e8:af:
                    01:e1:5c:f1:76:76:86:77:16:45:c2:52:b3:90:8b:
                    78:41:2e:8e:e1:18:93:15:62:07:c0:7a:88:b6:ca:
                    d9:4f:0d:af:35:8a:b3:f8:70:68:20:ee:98:c2:f5:
                    00:4b:8e:01:ed:67:a5:a0:d8:25:89:20:4f:5b:9d:
                    70:be:71:fc:28:d2:cd:b4:05:90:6f:d3:f6:0d:7b:
                    10:04:14:65:9f:16:b7:75:54:87:6a:fb:f1:8e:e1:
                    e2:5d:1a:a6:8f:54:b4:dd:9b:fb:28:48:a9:ad:36:
                    c2:24:81:67:35:ed:9d:49:b2:20:a8:be:2b:d3:c9:
                    e2:dc:45:30:48:96:1a:96:cb:df:fc:3f:52:79:c0:
                    71:41:36:24:2c:d7:74:57:7f:e7:c8:73:87:f8:fd:
                    67:44:49:f6:ca:fb:1c:d2:34:81:70:a2:af:ec:1c:
                    2a:54:eb:36:15:bb:86:cc:8c:81:de:63:b6:5c:e1:
                    03:fe:c8:f0:02:17:a7:b3:91:94:89:f4:1c:f7:f8:
                    b2:1c:f1:aa:e4:76:a0:32:71:9f:35:1b:9b:ab:f7:
                    09:a0:1d:b7:76:01:52:49:53:ce:52:a9:fe:25:3b:
                    fc:5c:39:9f:e9:dc:b8:fc:61:08:48:b2:12:93:5b:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:FC:B1:88:B8:7D:54:B9:47:B5:2E:11:BA:22:5C:7A:67:7B:63
            X509v3 Authority Key Identifier:
                keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:70:13:74:05:0c:2e:30:fd:e0:97:60:b9:88:49:47:bf:4f:
         a3:be:f8:48:4b:08:8e:0a:4a:ec:b4:4e:b3:4b:2d:7a:e7:6c:
         0a:34:97:91:0e:9a:6d:c0:d1:c2:9c:15:02:10:99:7a:c3:b5:
         2e:26:c5:44:8b:5a:f3:8c:c0:af:1a:50:94:fa:77:49:0a:46:
         ad:63:0b:99:15:7c:9c:74:a0:36:45:9c:92:9d:90:8a:54:a3:
         3c:2b:d3:f8:45:bb:15:28:16:c0:46:d6:ac:75:6f:6d:29:5f:
         cc:ef:ef:03:ec:0c:76:d9:fd:3f:eb:71:a8:a0:59:e1:68:64:
         dc:91:b2:d5:dc:10:89:ff:0e:4b:33:ff:e1:02:5d:ce:b4:93:
         e8:a7:2f:68:c8:d3:6f:30:93:0a:15:9e:54:de:5e:6e:7c:0f:
         c9:5f:01:91:04:8a:f6:09:4e:cf:44:8f:3c:3b:aa:9b:76:87:
         98:98:68:61:c1:96:d4:80:12:54:32:9f:6e:37:7b:81:f5:d3:
         aa:e8:c6:f3:e5:d2:d5:53:a9:1a:71:c5:b8:6d:16:84:c0:8d:
         da:97:b9:27:53:55:09:92:44:06:3f:0e:05:57:8a:be:90:0e:
         9e:9f:a2:02:c5:78:ee:af:65:4b:56:66:2f:8b:88:d1:e7:9e:
         67:2d:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:33:59 2026 by rpki-client