This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File:                     pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier:          AN69Gn5D4QYdV5RVgXKleSd2xj1/2Iz38zZRvcShYuY=
Subject key identifier:   FB:AF:45:7F:39:64:E6:78:7A:59:F2:31:6F:33:0A:07:2C:BD:4E:E5
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer:       /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number:          064E
Signing time:             Sat 24 Jan 2026 21:53:44 +0000
Manifest this update:     Sat 24 Jan 2026 21:53:44 +0000
Manifest next update:     Sat 31 Jan 2026 21:53:44 +0000
Files and hashes:         1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: vpsv6YoXp8fCmivNrPbtiAO2Vht+KbMsMV5C/bPilRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
                          rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
        Validity
            Not Before: Jan 24 21:53:44 2026 GMT
            Not After : Jan 31 21:53:44 2026 GMT
        Subject: CN=69753f68-1867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:78:7e:20:36:de:0b:ad:d9:de:68:9a:1f:
                    3c:cd:cd:78:5a:97:43:6d:17:05:21:47:2f:88:c9:
                    69:66:8a:d6:48:b8:19:da:0c:0b:0d:31:2d:3e:ca:
                    e7:cf:42:7d:7f:27:be:83:d1:8b:de:bf:b7:f7:45:
                    c0:74:1f:73:4e:aa:37:19:04:0a:c1:c9:70:af:e7:
                    0b:6c:5d:c4:4e:cd:10:42:07:ed:e4:11:57:74:f5:
                    2c:1b:90:f3:8b:be:82:dc:5f:57:7d:4d:ff:13:13:
                    5b:5d:f0:ba:b5:5c:22:6f:df:0f:1d:e2:72:1f:32:
                    df:3b:a8:09:f9:e3:8c:6e:1b:82:1c:57:5b:01:98:
                    ea:63:27:bb:9b:15:6e:6c:a4:66:b1:53:1d:2e:17:
                    54:b8:85:67:b6:58:bb:08:f1:db:ab:43:ad:ed:dd:
                    79:74:e5:29:ca:b9:ce:67:02:d3:85:d4:33:83:ea:
                    6d:21:a3:b2:b4:b1:20:3d:30:56:fe:87:5d:90:b6:
                    0b:30:37:e1:09:cb:4f:6f:fe:72:e0:5c:ab:d2:82:
                    db:d0:7a:45:6c:a2:92:ca:89:f9:fe:1c:16:1b:ad:
                    54:c0:c1:a8:86:b7:f8:89:17:bb:43:58:a8:4b:dd:
                    90:51:51:b1:4c:4e:ff:7d:0c:1b:d5:b1:7f:12:12:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:45:7F:39:64:E6:78:7A:59:F2:31:6F:33:0A:07:2C:BD:4E:E5
            X509v3 Authority Key Identifier:
                keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:1e:d5:4d:8e:aa:5d:7b:b3:25:b4:5b:d0:ff:1e:ae:73:
         e2:77:70:06:31:84:74:a1:ee:e9:89:97:8b:8d:e2:5b:94:5e:
         b8:50:6b:07:6d:52:80:9e:88:da:7f:f9:fa:78:37:3b:0c:15:
         bd:2e:50:d1:dd:7d:28:7c:95:72:96:cc:18:49:c4:0d:a1:91:
         cd:b5:c8:d6:b5:b0:29:be:e5:16:b1:6a:34:ea:1a:2d:f2:e6:
         ff:06:3f:3a:ac:1e:df:56:f4:08:1b:2a:5d:d4:8d:f7:dc:2c:
         89:44:fd:d0:8e:7a:41:c3:62:6d:72:56:9b:08:b1:51:96:a1:
         41:18:1c:76:23:36:f8:dc:7a:48:d3:80:34:e8:d7:92:8c:f8:
         02:59:e7:79:4a:01:19:bb:0f:d4:eb:47:dc:f9:f7:1f:2c:19:
         bd:df:c7:d2:87:ad:fe:ed:fb:c2:f3:61:85:4d:34:c9:05:9b:
         8e:66:c6:f8:d7:70:16:75:ce:d4:33:23:66:53:2c:d5:50:40:
         52:11:dd:d9:86:21:d7:17:3b:91:c6:70:a6:1c:a7:cb:f2:08:
         bb:13:79:86:b5:6e:b8:9d:de:42:42:3d:bd:3e:94:dd:75:9e:
         f6:52:18:70:45:2f:09:5f:7e:cc:02:e5:7d:50:f3:bf:9d:7f:
         6a:22:1b:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG
NjhGQzY5OTAwHhcNMjYwMTI0MjE1MzQ0WhcNMjYwMTMxMjE1MzQ0WjAYMRYwFAYD
VQQDDA02OTc1M2Y2OC0xODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyh4fiA23gut2d5omh88zc14WpdDbRcFIUcviMlpZorWSLgZ2gwLDTEtPsrn
z0J9fye+g9GL3r+390XAdB9zTqo3GQQKwclwr+cLbF3ETs0QQgft5BFXdPUsG5Dz
i76C3F9XfU3/ExNbXfC6tVwib98PHeJyHzLfO6gJ+eOMbhuCHFdbAZjqYye7mxVu
bKRmsVMdLhdUuIVntli7CPHbq0Ot7d15dOUpyrnOZwLThdQzg+ptIaOytLEgPTBW
/oddkLYLMDfhCctPb/5y4Fyr0oLb0HpFbKKSyon5/hwWG61UwMGohrf4iRe7Q1io
S92QUVGxTE7/fQwb1bF/EhINlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuvRX85
ZOZ4elnyMW8zCgcsvU7lMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3
QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN
MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCm9h7VTY6qXXuzJbRb0P8ernPid3AGMYR0oe7piZeLjeJblF64UGsH
bVKAnojaf/n6eDc7DBW9LlDR3X0ofJVylswYScQNoZHNtcjWtbApvuUWsWo06hot
8ub/Bj86rB7fVvQIGypd1I333CyJRP3QjnpBw2JtclabCLFRlqFBGBx2Izb43HpI
04A06NeSjPgCWed5SgEZuw/U60fc+fcfLBm938fSh63+7fvC82GFTTTJBZuOZsb4
13AWdc7UMyNmUyzVUEBSEd3ZhiHXFzuRxnCmHKfL8gi7E3mGtW64nd5CQj29PpTd
dZ72UhhwRS8JX37MAuV9UPO/nX9qIhs8
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:56 2026 by rpki-client