This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
File:                     swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json)
Hash identifier:          olUJWJfAq4/z2UfOxTzICPt9BwZuq0KYOQDTqsNevWg=
Subject key identifier:   FB:19:05:A7:8C:A5:13:DF:49:5A:3B:07:49:6D:06:4C:43:26:5F:7B
Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9
Certificate issuer:       /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
Certificate serial:       0D7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
Manifest number:          0D7E
Signing time:             Sat 24 Jan 2026 17:36:29 +0000
Manifest this update:     Sat 24 Jan 2026 17:36:28 +0000
Manifest next update:     Sat 31 Jan 2026 17:36:28 +0000
Files and hashes:         1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: xUnTU7zotmbR6aKqOBJwZktUkun9zcZhoLENpZYyS2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl
                          rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3455 (0xd7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B16, serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
        Validity
            Not Before: Jan 24 17:36:28 2026 GMT
            Not After : Jan 31 17:36:28 2026 GMT
        Subject: CN=6975031d-ac84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:83:d2:de:8e:fb:a6:0f:dd:73:d6:d0:9b:9e:
                    3b:b4:88:b7:b7:cd:67:81:02:3f:7d:8a:27:8d:70:
                    70:ee:e2:4d:19:26:64:b0:6f:fa:6a:b7:a6:01:57:
                    54:7e:da:fc:d6:5d:0b:2c:02:e8:31:86:cf:6a:64:
                    2f:56:a9:c3:4f:b1:93:97:31:2c:74:29:d1:42:5b:
                    fc:29:ae:4e:55:b1:c1:79:7b:83:86:6e:ea:53:49:
                    d1:60:be:a1:45:6e:03:80:2a:95:85:f9:a0:f1:d0:
                    bf:3f:e2:40:a1:54:e3:0a:66:50:ed:f5:df:8d:0d:
                    c9:3c:c6:2f:22:e2:2c:dd:7b:4c:af:e7:e4:36:b9:
                    b7:d1:5f:33:18:46:5b:10:1c:83:3c:c3:a8:0a:d1:
                    27:ea:2d:6e:ba:69:ba:4b:4f:be:d0:5a:3b:6a:1b:
                    16:54:73:5b:c1:c0:90:bd:52:93:81:89:0b:34:40:
                    e0:55:45:b8:67:24:0d:f2:8f:b5:e3:e8:2c:0b:10:
                    1b:40:d7:3f:4a:74:2e:d5:46:50:6b:ca:78:2f:b9:
                    ad:be:41:14:7e:2c:9d:5b:67:67:e5:53:cf:57:14:
                    e8:93:75:9c:9e:59:81:58:9b:7e:b0:41:e6:7f:f3:
                    7e:b6:38:5f:23:0a:c7:14:77:fe:fd:41:23:7b:06:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:19:05:A7:8C:A5:13:DF:49:5A:3B:07:49:6D:06:4C:43:26:5F:7B
            X509v3 Authority Key Identifier:
                keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:42:f6:56:d7:69:aa:d4:ee:22:64:2d:5c:5c:8b:23:72:6c:
         43:02:c1:38:51:8f:61:8c:4d:a8:f0:41:6e:d4:87:ab:73:76:
         b2:1f:55:74:2e:9c:0f:87:b9:43:76:f7:a9:b7:95:a9:24:5f:
         10:11:7a:ad:24:d8:95:42:53:42:fd:3f:9d:0e:d6:15:77:2f:
         8b:d9:09:63:49:c8:25:2b:1a:8c:1b:04:fb:df:6b:9a:ac:c2:
         eb:2c:42:be:c6:c6:15:e3:bc:1a:83:0b:87:5f:a4:7d:20:62:
         98:52:2d:a4:a6:0c:cc:b7:21:94:4b:4e:f5:b5:85:50:fe:67:
         aa:bb:20:a8:34:f7:8b:eb:6d:e9:67:74:56:44:52:45:96:35:
         d6:7c:bf:3a:d6:8c:59:03:2d:5d:c0:d3:e9:d9:78:d6:44:cd:
         ac:b4:09:b2:98:1e:3a:ab:b4:3c:91:04:40:b4:88:86:a4:70:
         65:fc:ef:a5:e5:30:87:42:d3:53:2b:b5:58:03:07:95:88:60:
         b0:63:d1:18:81:a3:29:bf:95:76:12:30:a0:21:16:d4:45:9c:
         d2:63:84:f6:c0:40:f8:17:b8:37:80:82:cf:f7:65:a7:d1:cd:
         42:e8:04:08:5b:4e:25:d4:77:c8:d3:6e:cf:cb:19:f7:56:2e:
         2b:e7:f9:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCMTYxMTAvBgNVBAUTKEIzMDc0RTdDOTRERjg3OTgwQzZBREJGNDU3ODY1MTQw
NkM1QzUzQTkwHhcNMjYwMTI0MTczNjI4WhcNMjYwMTMxMTczNjI4WjAYMRYwFAYD
VQQDDA02OTc1MDMxZC1hYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7YPS3o77pg/dc9bQm547tIi3t81ngQI/fYonjXBw7uJNGSZksG/6aremAVdU
ftr81l0LLALoMYbPamQvVqnDT7GTlzEsdCnRQlv8Ka5OVbHBeXuDhm7qU0nRYL6h
RW4DgCqVhfmg8dC/P+JAoVTjCmZQ7fXfjQ3JPMYvIuIs3XtMr+fkNrm30V8zGEZb
EByDPMOoCtEn6i1uumm6S0++0Fo7ahsWVHNbwcCQvVKTgYkLNEDgVUW4ZyQN8o+1
4+gsCxAbQNc/SnQu1UZQa8p4L7mtvkEUfiydW2dn5VPPVxTok3WcnlmBWJt+sEHm
f/N+tjhfIwrHFHf+/UEjewbcbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsZBaeM
pRPfSVo7B0ltBkxDJl97MB8GA1UdIwQYMBaAFLMHTnyU34eYDGrb9FeGUUBsXFOp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUIxNi80Q0MwNjVFMkRE
RTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1Z01hdHYwVjRaUlFHeGNV
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N3ZE9mSlRmaDVnTWF0djBWNFpSUUd4Y1U2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUIxNi80Q0MwNjVFMkRERTYxMUU5ODRGNTY1NzhDNEY5QUUwMi9zd2RPZkpUZmg1
Z01hdHYwVjRaUlFHeGNVNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWQvZW12mq1O4iZC1cXIsjcmxDAsE4UY9hjE2o8EFu1Ierc3ayH1V0
LpwPh7lDdvept5WpJF8QEXqtJNiVQlNC/T+dDtYVdy+L2QljScglKxqMGwT732ua
rMLrLEK+xsYV47wagwuHX6R9IGKYUi2kpgzMtyGUS071tYVQ/mequyCoNPeL623p
Z3RWRFJFljXWfL861oxZAy1dwNPp2XjWRM2stAmymB46q7Q8kQRAtIiGpHBl/O+l
5TCHQtNTK7VYAweViGCwY9EYgaMpv5V2EjCgIRbURZzSY4T2wED4F7g3gILP92Wn
0c1C6AQIW04l1HfI027Pyxn3Vi4r5/n3
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:26 2026 by rpki-client