This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
File:                     SGjuTp_AEUegPCaatSEKj-cnp4s.mft (raw, json)
Hash identifier:          wjB3coYHVQPUpdjZZ5EZfzX2Zzr+1HXM8exGDEAFiII=
Subject key identifier:   FA:AA:D9:9B:5F:6F:1B:84:E9:CC:09:FC:07:21:07:FA:8D:66:E7:DE
Authority key identifier: 48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B
Certificate issuer:       /CN=A9131CF4/serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
Manifest number:          2C
Signing time:             Fri 23 Jan 2026 06:39:01 +0000
Manifest this update:     Fri 23 Jan 2026 06:39:00 +0000
Manifest next update:     Fri 30 Jan 2026 06:39:00 +0000
Files and hashes:         1: SGjuTp_AEUegPCaatSEKj-cnp4s.crl (hash: vCM++3WiLY59fVByJUHWqVS/1ZeHGHT/G7OIj98MSWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl
                          rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131CF4, serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B
        Validity
            Not Before: Jan 23 06:39:00 2026 GMT
            Not After : Jan 30 06:39:00 2026 GMT
        Subject: CN=69731785-d11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:a7:83:76:02:4f:94:cf:1d:d8:9a:ab:fc:
                    7b:cd:ed:29:ac:0b:eb:42:5d:04:55:15:5f:32:a3:
                    70:2d:b4:ff:32:ce:a9:83:39:d6:19:39:93:7a:79:
                    2f:23:9f:50:6a:66:aa:2a:c1:52:61:83:16:28:bf:
                    ca:d1:8a:28:c1:38:49:40:40:f9:e4:e0:bc:99:50:
                    de:fc:f9:3a:e1:c1:2d:cd:f3:76:7a:00:b8:3b:b0:
                    e9:9f:e6:7b:1b:96:8e:c3:58:d5:27:0f:46:b9:41:
                    4a:58:02:21:83:c9:b9:8d:1e:b6:1a:61:41:50:cf:
                    fd:8f:4f:45:6e:b3:22:84:39:13:eb:3e:51:9c:d4:
                    b7:ac:b8:85:f5:e7:40:bd:29:13:3a:f3:c9:df:11:
                    9a:14:1c:16:0c:6e:f3:9e:06:a1:81:43:0f:d9:e1:
                    7a:91:b5:b7:f1:37:94:af:dd:fb:07:ce:99:cf:64:
                    f9:f7:d6:26:94:3f:4a:83:bd:5d:5e:7f:6b:d1:2f:
                    39:ce:ef:8d:2d:0b:ff:d6:2a:0d:b5:76:21:d6:8b:
                    4c:46:b2:cc:4b:42:10:67:8a:4e:9d:ec:34:c4:d3:
                    27:5a:21:c0:6d:6d:35:99:71:4e:e2:27:8b:ee:9f:
                    40:e2:ab:84:b1:f5:5c:f1:a6:fd:db:bb:3f:9a:be:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:D9:9B:5F:6F:1B:84:E9:CC:09:FC:07:21:07:FA:8D:66:E7:DE
            X509v3 Authority Key Identifier:
                keyid:48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:ed:2e:69:98:58:f0:77:13:dc:67:7e:6d:79:5a:0e:6e:ae:
         a4:a4:22:0a:3d:3d:24:f7:e0:bd:8a:e9:e7:1f:54:62:3b:55:
         c7:11:f5:21:5e:6a:5c:73:a7:e9:5f:c0:a0:e7:46:85:e6:da:
         e4:9b:13:c3:07:5c:f7:bc:2a:36:14:25:f8:87:0b:40:e9:39:
         1e:21:fd:e6:35:d3:ed:14:ce:e8:0d:ea:db:e1:8b:b4:d2:dd:
         89:4a:44:40:a8:2e:31:91:33:cf:90:8b:bd:aa:0f:e6:32:ca:
         d4:d5:8e:ec:49:a5:f1:b5:c3:b6:80:d4:10:18:f5:7c:48:03:
         39:05:db:2d:31:aa:81:bf:35:b1:ec:d2:c3:be:4e:a9:7e:8c:
         77:4c:f5:f4:a7:92:00:7f:2d:29:43:6b:2a:a2:52:05:67:31:
         84:c5:d1:48:4d:01:70:64:a4:e2:1a:41:f0:f3:0e:8b:07:8a:
         bb:15:38:33:95:82:d8:9a:53:99:b0:b3:25:93:52:2a:87:dc:
         95:9e:52:ae:29:e8:0f:6b:e9:f7:fb:e4:db:ea:e1:c4:5f:dd:
         10:6a:95:0d:af:0f:ac:2e:33:11:e8:48:92:d6:ab:87:fa:fc:
         33:1b:55:9d:85:7d:c9:4f:6d:56:22:bb:5b:08:bf:37:47:ee:
         1a:1a:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:12 2026 by rpki-client