This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
File:                     skC8cHDxvddkqwCyJosol1s1H4E.mft (raw, json)
Hash identifier:          a9J2nT9lo2JMYdIQ+efelYeJxbT4RTB+wGFQVIyObck=
Subject key identifier:   AB:F8:E5:20:54:2E:68:60:9F:3D:48:8A:91:19:C5:89:2D:1D:CF:0C
Authority key identifier: B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81
Certificate issuer:       /CN=A9134E06/serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
Manifest number:          50
Signing time:             Fri 23 Jan 2026 06:18:23 +0000
Manifest this update:     Fri 23 Jan 2026 06:18:23 +0000
Manifest next update:     Fri 30 Jan 2026 06:18:23 +0000
Files and hashes:         1: skC8cHDxvddkqwCyJosol1s1H4E.crl (hash: QLBtDOs3Qge6JrYaX//Opo8k23IYyIoXM9GQRV47Yu8=)
                          2: 2E280FE4839511F0A13CF851C4F9AE02.roa (hash: +NAp20HVoC7X3NkZRrqBkvrLNUwPLb0BFJTZcwRdJbg=)
                          3: AE3D97B0839711F09F03EB74C4F9AE02.roa (hash: lqkfru0328Qtng9CyabJsPCzNrKra8F2S7phaoNuQNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl
                          rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E06, serialNumber=B240BC7070F1BDD764AB00B2268B28975B351F81
        Validity
            Not Before: Jan 23 06:18:23 2026 GMT
            Not After : Jan 30 06:18:23 2026 GMT
        Subject: CN=697312af-a953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:5c:18:66:a6:40:3a:be:42:de:bf:19:5a:
                    09:21:99:c4:cf:db:4f:a4:81:c8:c3:d6:df:8b:33:
                    c0:d8:b9:a3:33:56:b7:bf:79:f7:b4:c5:d0:cb:2b:
                    08:d6:3e:92:f3:70:ac:04:9e:a5:88:3e:29:e4:cf:
                    2b:28:60:63:3c:1c:ea:2e:f9:58:8b:e5:46:50:56:
                    38:72:d4:ee:44:11:92:f6:7b:7c:57:64:c7:c2:ae:
                    1c:19:4e:b0:40:e0:ea:32:61:33:da:bd:2f:56:de:
                    f3:c6:1a:c7:8c:7c:4c:20:7a:91:30:c3:49:46:f6:
                    e0:b6:f7:38:59:d4:88:09:e0:5f:9a:ca:08:51:e6:
                    31:c1:9b:de:9f:a3:45:f2:10:3f:de:45:3c:85:c4:
                    02:00:ca:02:a5:77:9d:56:25:c9:6f:42:1f:c1:fc:
                    8f:a1:d8:7f:6f:a9:9b:05:21:88:02:f1:50:a7:1d:
                    9a:1d:90:3b:74:a1:c2:fe:ac:9d:1b:6a:be:a9:bb:
                    fb:84:81:28:eb:5a:cc:2f:b5:68:ba:65:6b:75:0d:
                    80:dc:4e:75:2a:7d:9f:33:5f:54:b9:ce:f2:a7:9d:
                    89:57:34:2b:03:3f:57:38:5e:f9:63:6d:59:56:43:
                    a7:dc:09:22:2f:89:cb:78:38:7f:32:24:35:87:72:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:E5:20:54:2E:68:60:9F:3D:48:8A:91:19:C5:89:2D:1D:CF:0C
            X509v3 Authority Key Identifier:
                keyid:B2:40:BC:70:70:F1:BD:D7:64:AB:00:B2:26:8B:28:97:5B:35:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/skC8cHDxvddkqwCyJosol1s1H4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E06/F08FC8FA839111F08B642084C4F9AE02/skC8cHDxvddkqwCyJosol1s1H4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:42:85:10:a1:55:9a:82:0f:68:56:43:00:8f:8b:0a:eb:
         1a:5f:22:3d:7c:04:e7:99:9e:a9:ab:b4:9b:b2:47:68:b7:3c:
         39:28:c2:8b:dd:b6:cc:3a:27:32:60:8d:54:a1:e9:80:85:d8:
         1d:44:09:28:b0:db:9f:4f:62:13:87:c9:ae:c5:e5:75:fb:87:
         87:32:76:d5:06:f9:f6:a5:16:fa:b2:90:33:76:bb:fc:b1:1a:
         75:9b:f9:c7:ee:f1:dc:f8:cc:be:82:9a:53:af:91:88:76:0a:
         a2:ed:db:3f:9e:ec:56:52:31:61:23:d6:c9:91:7e:da:f0:50:
         09:ed:c1:67:8d:bb:72:c3:21:56:85:ba:d7:fd:4d:45:bd:4d:
         52:c7:77:f6:8a:85:67:14:4b:b9:09:13:b4:2d:f6:8f:bd:0d:
         f2:e9:03:ea:1f:f1:4a:6d:e7:76:86:a1:aa:cf:4d:86:d3:5b:
         7a:6d:92:3d:c2:27:8a:a9:51:d0:09:9f:8d:b0:f6:7c:cb:9d:
         2a:18:61:96:3f:84:1a:e9:0c:a7:02:06:31:72:f4:19:bf:3a:
         cd:b8:41:10:99:68:3e:3d:52:4a:a2:eb:cb:8d:a2:29:8f:a6:
         48:a4:04:04:0a:22:97:ac:a0:f2:fa:aa:3c:72:3e:f2:4a:7f:
         b7:72:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:24 2026 by rpki-client