This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File:                     A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier:          gi0s3T2mmvu6lfJYILFZ++5VN2HMBw5ym90FKMjoAKI=
Subject key identifier:   F1:6D:A9:83:E3:E2:4F:18:4A:80:5C:AD:43:31:A3:92:9D:35:CD:57
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer:       /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial:       04D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number:          04CF
Signing time:             Sat 24 Jan 2026 23:03:04 +0000
Manifest this update:     Sat 24 Jan 2026 23:03:04 +0000
Manifest next update:     Sat 31 Jan 2026 23:03:04 +0000
Files and hashes:         1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: sNTTIkCh+ZLuqsJDvdrI5uL3lYpj/Y1Fjz/qvd0ANQc=)
                          2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: LakU53mmAKZxWbtHABnd6u2JIQUwSgIdxv6XnbOWa7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
                          rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
        Validity
            Not Before: Jan 24 23:03:04 2026 GMT
            Not After : Jan 31 23:03:04 2026 GMT
        Subject: CN=69754fa8-aa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:ae:5e:9f:73:e2:83:6a:e8:32:5a:54:88:
                    4e:bd:1b:75:68:54:c2:63:25:d7:bb:6d:aa:4c:f6:
                    f0:ad:dd:9d:8c:bb:e2:97:84:74:85:fd:8f:19:77:
                    25:48:ec:04:b2:f7:80:17:e8:20:01:28:bf:2a:2e:
                    af:5e:e1:38:8f:5a:27:29:75:7c:eb:ec:b8:26:a9:
                    19:e3:75:18:6c:0c:76:f4:ca:5d:44:c5:a2:c7:26:
                    e0:5a:31:8c:a4:12:45:2f:46:1a:07:8c:da:2a:b0:
                    e9:57:46:77:04:7b:a5:8e:05:b7:34:4b:46:95:9a:
                    51:50:01:3d:6d:7e:0d:8a:72:e4:5e:26:d4:17:b1:
                    66:76:c9:20:12:2f:c0:f6:8d:19:01:81:cd:29:5e:
                    f9:f8:e0:d1:db:38:26:f3:2d:c6:6f:0d:10:50:23:
                    f6:f1:36:b3:79:e1:f6:3a:7a:8a:49:42:c2:54:91:
                    a3:d4:22:0b:74:11:20:91:0b:0c:2e:64:17:a8:c4:
                    f5:38:92:8c:58:74:06:bf:4f:64:e4:1c:f6:be:0a:
                    84:6d:96:72:29:ef:fc:03:68:49:1b:9d:a3:e0:cf:
                    9f:0f:26:07:5e:b1:1b:1d:fe:9b:b8:5f:7d:2c:a0:
                    dc:cb:4b:ce:cd:09:e9:fb:57:20:f1:0d:04:e0:c8:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6D:A9:83:E3:E2:4F:18:4A:80:5C:AD:43:31:A3:92:9D:35:CD:57
            X509v3 Authority Key Identifier:
                keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:54:e2:ad:33:12:19:75:6b:64:cd:7c:59:80:6c:de:d3:0c:
         a1:77:89:fd:7b:a1:af:fe:b4:bd:fd:ee:1f:c7:19:02:f6:f9:
         0f:a6:5b:75:e8:88:a1:5f:38:7d:b6:28:28:f7:7c:7f:d4:6a:
         94:e9:23:74:70:0a:59:f5:d1:b2:2f:dd:ef:12:b0:bc:7b:93:
         3d:3b:f4:b5:dc:c6:b1:53:a8:97:41:2f:9c:98:b3:5a:29:33:
         9c:43:63:1b:ee:7a:36:db:7f:a9:0a:f6:0e:11:06:94:38:5d:
         25:53:00:a2:56:75:12:e9:13:66:b8:98:aa:ee:ad:c8:78:bc:
         dc:16:b2:eb:b9:fd:09:6a:7e:0f:de:63:8d:a5:f5:84:df:1f:
         27:6d:6f:e4:60:0b:2b:4f:c9:6d:8e:f4:c3:27:a1:31:13:2f:
         a5:0b:fa:90:5a:13:ee:00:b8:da:62:b9:3b:35:6e:ca:b1:24:
         a2:e0:c5:2f:93:78:87:2d:ee:73:15:1a:1b:51:83:6d:c6:22:
         f9:96:af:16:67:2c:eb:75:17:b1:ce:d5:51:79:5d:52:78:da:
         65:1b:d9:b2:9c:d1:a4:00:67:8f:f0:38:f0:f2:9d:82:43:2d:
         fc:eb:40:c3:92:67:eb:2e:ad:9f:ea:ed:0f:ab:26:b0:e1:26:
         81:7f:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:17 2026 by rpki-client