This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
File:                     d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json)
Hash identifier:          lFLchZ8StkUVcAP/nYdIl3zQ4Js1C7BKDoOPrpQ+p3U=
Subject key identifier:   29:AA:2B:3C:80:29:1D:B4:C9:C3:29:3D:F0:1F:94:96:9C:90:26:0D
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Certificate issuer:       /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial:       0C0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
Manifest number:          0C01
Signing time:             Sat 24 Jan 2026 18:24:31 +0000
Manifest this update:     Sat 24 Jan 2026 18:24:30 +0000
Manifest next update:     Sat 31 Jan 2026 18:24:30 +0000
Files and hashes:         1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: L6e7nkEqt3F8au9huG7p9DROlo2o9B9IHS0GrrA/WSs=)
                          2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: wE6z56gItRRwWH8NQGesjQ0xX5sSLBqbBFe4JVJ50FU=)
                          3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: GqSqhnn63EZ4p4JuVF5u2QSaZSQqUmP27m/tmKbsSUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
                          rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
        Validity
            Not Before: Jan 24 18:24:30 2026 GMT
            Not After : Jan 31 18:24:30 2026 GMT
        Subject: CN=69750e5f-2f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:e5:87:33:46:08:5d:be:b6:59:4e:20:17:
                    b2:1f:a4:12:2b:1e:f2:32:a6:2a:fc:4b:95:db:74:
                    f3:66:f1:de:8a:b1:dd:86:85:2c:ee:09:ef:84:f2:
                    3b:80:d0:ff:16:5f:bf:3a:b3:8c:37:4e:83:90:01:
                    9d:24:92:eb:dd:48:e0:2d:53:b2:0a:ef:98:47:ef:
                    fc:a5:33:99:a7:d6:c7:bb:1e:53:89:c4:04:7c:16:
                    ee:4d:af:62:b0:60:57:79:be:9d:2e:8f:ee:25:b6:
                    fc:dc:10:e9:81:98:ff:e8:83:ae:53:4d:3b:42:82:
                    8f:52:3f:80:57:a6:03:e2:22:67:bd:56:99:ee:87:
                    92:3d:fc:ff:8a:82:b0:80:ba:7f:3f:65:26:41:fa:
                    3c:8b:8a:e7:25:f1:f2:3b:6a:1d:88:3d:c6:cf:fb:
                    3c:b3:a6:51:8a:d5:31:8f:93:c6:2c:87:bb:fb:c0:
                    ad:89:73:bc:94:66:3b:56:55:92:75:35:80:34:96:
                    60:82:82:3c:02:6d:d5:1d:46:40:60:5c:f3:01:56:
                    42:a7:45:a0:c0:ac:fd:b0:3d:c9:bb:39:1e:1e:64:
                    b5:6c:a9:42:61:bc:5a:71:2e:52:7c:f1:91:e7:9c:
                    e2:ac:e0:31:05:68:e8:f0:93:c3:61:49:a2:4e:e7:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AA:2B:3C:80:29:1D:B4:C9:C3:29:3D:F0:1F:94:96:9C:90:26:0D
            X509v3 Authority Key Identifier:
                keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:dc:79:d5:fe:4b:d1:73:3d:7d:52:4f:d3:24:5b:d1:13:
         22:48:5f:3e:f1:e7:bf:62:c7:34:11:66:3a:58:8f:9d:3d:71:
         80:85:33:15:94:24:60:83:11:a9:1f:71:a6:36:45:7f:29:4f:
         48:99:36:65:a5:88:c6:b5:ca:8d:d2:1a:00:cb:c3:88:44:79:
         db:69:c0:20:ef:cc:f0:28:de:f8:e8:59:2b:18:e2:9c:c3:ea:
         bf:89:bb:ec:d4:3f:9a:41:40:12:0f:30:2f:51:07:f8:01:c0:
         ab:b4:e3:81:a5:2b:4e:b9:4c:22:d5:bf:36:76:1c:8e:da:d1:
         47:ba:d7:17:08:b6:60:00:6a:17:72:24:83:08:35:ac:08:d6:
         36:61:0c:ab:be:21:f6:6d:b8:59:cf:d9:9b:90:41:72:cc:ae:
         ae:22:44:0e:d4:ba:03:2d:0b:74:b5:1e:21:a0:18:7d:fb:30:
         b6:64:a7:ea:07:5d:e9:da:40:48:16:cb:e7:f7:7b:0e:42:8e:
         d2:ca:05:26:2c:24:64:25:b4:59:0b:77:72:ee:95:47:76:58:
         a6:6e:e7:31:fe:40:a2:63:be:f6:d8:de:21:b6:4f:02:8b:87:
         33:d3:22:61:9f:d6:a5:4e:2e:82:cb:37:fb:7b:a9:50:02:67:
         72:c5:75:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF
QTQ3NDUzNDYwHhcNMjYwMTI0MTgyNDMwWhcNMjYwMTMxMTgyNDMwWjAYMRYwFAYD
VQQDDA02OTc1MGU1Zi0yZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwe7lhzNGCF2+tllOIBeyH6QSKx7yMqYq/EuV23TzZvHeirHdhoUs7gnvhPI7
gND/Fl+/OrOMN06DkAGdJJLr3UjgLVOyCu+YR+/8pTOZp9bHux5TicQEfBbuTa9i
sGBXeb6dLo/uJbb83BDpgZj/6IOuU007QoKPUj+AV6YD4iJnvVaZ7oeSPfz/ioKw
gLp/P2UmQfo8i4rnJfHyO2odiD3Gz/s8s6ZRitUxj5PGLIe7+8CtiXO8lGY7VlWS
dTWANJZggoI8Am3VHUZAYFzzAVZCp0WgwKz9sD3JuzkeHmS1bKlCYbxacS5SfPGR
55zirOAxBWjo8JPDYUmiTueMjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmqKzyA
KR20ycMpPfAflJackCYNMB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB
RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV
MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ
c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCis9x51f5L0XM9fVJP0yRb0RMiSF8+8ee/Ysc0EWY6WI+dPXGAhTMV
lCRggxGpH3GmNkV/KU9ImTZlpYjGtcqN0hoAy8OIRHnbacAg78zwKN746FkrGOKc
w+q/ibvs1D+aQUASDzAvUQf4AcCrtOOBpStOuUwi1b82dhyO2tFHutcXCLZgAGoX
ciSDCDWsCNY2YQyrviH2bbhZz9mbkEFyzK6uIkQO1LoDLQt0tR4hoBh9+zC2ZKfq
B13p2kBIFsvn93sOQo7SygUmLCRkJbRZC3dy7pVHdlimbucx/kCiY7722N4htk8C
i4cz0yJhn9alTi6Cyzf7e6lQAmdyxXWg
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:40 2026 by rpki-client