This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          Ym2GQJFvtVsDAIPPAFiOyeFFIixRW7CmxER55h2KfKc=
Subject key identifier:   79:46:CE:F7:47:3D:C3:27:12:DF:F3:BE:7C:71:31:38:50:11:71:46
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          063D
Signing time:             Sat 24 Jan 2026 21:59:08 +0000
Manifest this update:     Sat 24 Jan 2026 21:59:08 +0000
Manifest next update:     Sat 31 Jan 2026 21:59:08 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: SWWfdtR6tPg+yPtlOKhzKqZt5aVm8Gk8M/3+d130xCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: Jan 24 21:59:08 2026 GMT
            Not After : Jan 31 21:59:08 2026 GMT
        Subject: CN=697540ac-a06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:01:9e:ec:0b:86:4a:e3:d1:1c:34:86:ff:
                    d2:7d:d0:0a:39:fc:5c:a7:ec:a5:8f:e5:34:00:9d:
                    50:af:77:df:d3:9e:f9:5f:05:c4:cb:bc:29:67:2c:
                    ab:3d:8a:2a:de:e1:00:f6:af:bb:41:72:ec:12:80:
                    29:f0:bc:3a:0b:14:4c:b0:21:ec:64:42:b6:5a:01:
                    e3:46:ee:fe:d1:05:af:6f:2b:2a:b5:9a:7f:a2:3d:
                    08:3d:ea:2c:4a:ba:86:4f:65:47:5b:69:a6:31:e8:
                    de:24:10:3e:e9:42:11:a8:80:f4:8e:b1:c1:fc:54:
                    75:5e:f1:bf:47:43:42:08:84:51:c1:fc:9e:b4:b4:
                    42:aa:3a:8c:84:13:90:76:02:ec:4c:bf:68:84:d5:
                    de:e0:26:0e:5a:39:51:55:e5:c7:4f:67:33:4f:3c:
                    a2:2b:11:4d:87:1f:b5:2c:45:66:a6:2a:04:1c:f4:
                    e9:8f:69:d4:f8:96:6e:45:26:13:d1:58:ea:a3:04:
                    ea:13:8a:d8:06:ab:39:90:b8:1a:8f:e7:45:46:09:
                    a1:b2:53:b9:65:0b:5c:4b:f6:ee:dd:82:82:31:54:
                    45:b6:86:81:0f:28:b3:cc:97:ae:5c:e9:a7:20:f0:
                    30:e0:2c:8d:3e:81:90:5c:65:19:82:25:dc:3b:6d:
                    37:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:46:CE:F7:47:3D:C3:27:12:DF:F3:BE:7C:71:31:38:50:11:71:46
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:4e:6b:b6:b8:49:af:c1:59:51:1f:14:16:56:48:02:11:
         8d:82:bb:49:f0:fa:c7:66:85:ef:4b:3b:21:dd:5d:af:ec:2d:
         52:b3:cb:4e:98:45:34:3c:4c:e6:8a:44:91:07:35:94:4b:af:
         47:5d:0d:0c:22:b4:f1:1c:ea:88:17:07:34:cd:68:90:80:8b:
         e5:53:f7:c1:3b:21:b1:7f:e2:2f:a7:ce:a2:cd:53:fe:74:25:
         af:17:6d:a6:a3:78:e2:1a:cd:a3:4e:61:0c:11:d2:96:95:17:
         0e:64:c8:35:fc:9a:08:76:e4:28:da:5f:8e:2d:42:19:f1:73:
         68:f0:b7:b2:25:d6:ad:27:63:62:11:e3:68:84:ab:c4:75:26:
         35:a6:dc:f8:4a:68:a1:30:9f:80:dd:0e:fe:19:a6:46:06:01:
         ed:14:20:19:d3:a6:45:b5:2b:dd:a9:41:e2:3b:fc:03:fe:aa:
         99:1f:32:f0:35:42:3b:35:cf:62:65:74:25:10:59:d0:f2:d8:
         e1:86:a4:8e:79:f9:88:59:2a:b5:8d:66:2e:30:0c:5c:ed:a3:
         91:03:ec:b4:fb:fe:27:00:3d:f8:c4:80:cb:56:24:6a:c3:9a:
         33:f4:bb:95:f9:14:9c:af:05:3d:c0:86:9e:55:0d:78:ee:21:
         90:da:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:21 2026 by rpki-client