This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
File:                     r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json)
Hash identifier:          FIzXf5VuQFakiWmwXpQWnoK3CZFAmjJR9eCuahhLTJM=
Subject key identifier:   5C:C5:AB:8A:08:F2:02:09:44:5D:28:CF:70:CB:E5:20:CD:25:EA:4C
Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
Certificate issuer:       /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Certificate serial:       082A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
Manifest number:          0820
Signing time:             Sat 24 Jan 2026 20:18:42 +0000
Manifest this update:     Sat 24 Jan 2026 20:18:42 +0000
Manifest next update:     Sat 31 Jan 2026 20:18:42 +0000
Files and hashes:         1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: r2VtBZeAwxgzpdhqKdZrwcLNjrnE95fKbFNGS+4q97I=)
                          2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=)
                          3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
                          rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
        Validity
            Not Before: Jan 24 20:18:42 2026 GMT
            Not After : Jan 31 20:18:42 2026 GMT
        Subject: CN=69752922-8f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:d8:14:ad:fd:d8:b1:24:70:e4:11:c2:4c:
                    9d:a0:42:52:20:40:87:0a:4e:6a:a1:ee:2e:59:c0:
                    60:22:8a:05:11:66:03:1f:a7:57:ea:2f:22:44:2b:
                    b9:fa:5a:f0:4c:fa:8b:f9:1e:be:6b:e4:9e:45:21:
                    60:69:51:09:9d:bf:39:ae:88:1c:d9:38:85:64:8d:
                    e0:9e:b9:f5:8c:fe:50:00:e0:4b:93:6c:18:c5:dc:
                    1c:41:85:5f:f8:3c:12:16:f7:b1:43:69:7a:68:dd:
                    5a:27:3d:a5:1d:05:65:49:a4:64:99:88:6f:b6:d3:
                    06:e5:52:b3:74:ea:f8:4f:19:6c:19:71:cd:43:98:
                    85:99:75:4c:62:6b:71:f0:d0:56:49:cb:9e:85:7a:
                    5b:3f:9a:7a:ab:1b:ca:c3:81:c9:f0:ef:5b:9d:6f:
                    a5:f0:cd:a7:47:f6:53:21:ee:e2:83:e1:03:be:fb:
                    a1:ef:cc:5b:b0:33:1b:72:e1:24:43:27:e1:05:df:
                    a9:38:5e:68:0a:ab:fe:de:3c:c3:b5:67:d3:46:06:
                    1d:d3:53:6f:cf:1b:0c:eb:49:1f:7a:0f:da:74:1a:
                    91:e1:f5:d3:7e:34:b1:11:54:9b:9f:ac:ca:49:72:
                    50:1f:a7:e2:00:7a:1e:85:7a:11:1f:f5:90:04:05:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:AB:8A:08:F2:02:09:44:5D:28:CF:70:CB:E5:20:CD:25:EA:4C
            X509v3 Authority Key Identifier:
                keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:ad:1b:41:e6:55:ac:e2:e0:da:f5:e7:8c:11:e2:73:c6:
         6b:50:c9:99:fb:99:df:ca:1e:2c:25:f5:ec:8c:fc:4a:ff:70:
         33:57:bc:f8:7f:99:59:e1:2d:5a:8c:e8:af:ed:12:98:ef:99:
         ed:e9:89:cf:ae:38:01:17:b4:6b:7e:c8:4a:7b:99:fb:b7:f8:
         47:cb:8d:ca:48:38:92:e1:37:48:b9:97:bd:03:5c:61:b4:a3:
         8e:33:bf:bc:14:df:90:46:3c:07:86:d7:b7:0b:1f:02:34:a6:
         81:c8:75:73:bb:c8:56:25:f8:12:ac:31:dd:d8:f4:ab:a1:3c:
         0d:fa:b4:68:7f:27:c9:54:3f:e1:ab:49:55:05:9b:a4:2c:e7:
         e7:15:45:d2:36:c6:4c:7c:39:32:8d:27:e5:17:97:b4:4a:a4:
         a7:e8:5d:7d:cf:ba:fe:1a:77:1b:32:62:37:0a:a7:54:fa:78:
         6d:c3:c8:ba:58:7e:88:5d:d2:3b:b0:c0:3d:34:9a:b7:06:87:
         7f:4d:11:e5:53:8d:b0:c6:1f:df:68:f9:a5:67:4b:fe:aa:af:
         e8:0c:49:88:96:7a:18:7b:84:ea:80:09:df:81:57:a7:c2:d0:
         be:11:0a:8b:53:19:8b:31:7f:ae:60:a2:aa:a9:d1:a5:18:5a:
         a0:9f:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:24 2026 by rpki-client