This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          rFV2YXGr8Z9d/cUzVae+D4s2wBAD9J7J+aayOqhuJ4g=
Subject key identifier:   5B:A7:FE:67:38:53:C2:BF:FB:67:F5:DF:08:C5:03:35:57:47:10:83
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          011A
Signing time:             Sun 25 Jan 2026 04:03:21 +0000
Manifest this update:     Sun 25 Jan 2026 04:03:21 +0000
Manifest next update:     Sun 01 Feb 2026 04:03:21 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: mx9lzhRZTTHc1asTNg/6u+H1+kSWmn0oZkrZ5GvaKsM=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Jan 25 04:03:21 2026 GMT
            Not After : Feb  1 04:03:21 2026 GMT
        Subject: CN=69759609-df91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:22:c9:da:57:47:69:68:8e:ac:03:4b:00:
                    52:36:d9:ed:6b:92:f2:53:85:40:3f:93:84:72:99:
                    89:af:9f:df:44:52:fe:50:78:b7:96:57:ce:ce:cd:
                    a2:e6:67:be:13:7f:1c:18:b5:fb:9e:43:e1:6f:6f:
                    3e:66:12:04:2f:9a:8a:02:49:39:6d:2e:59:2c:64:
                    0f:d7:c6:af:e3:98:2d:c6:f5:8c:17:24:2b:4b:58:
                    84:a3:c7:15:52:2d:21:5f:cd:f8:90:01:4c:45:ec:
                    35:c4:37:75:0e:af:1e:c7:7e:89:7f:1b:cc:f8:4c:
                    db:8b:69:80:f2:cc:ee:0f:da:b8:f7:d8:6d:67:48:
                    a6:8f:e4:9a:ae:17:9a:ad:30:d9:5d:38:af:16:9c:
                    d5:61:ae:e0:34:99:75:c1:f3:25:55:ec:d0:01:74:
                    8d:49:cc:9e:50:e6:2e:79:2b:bd:e5:d4:98:d1:36:
                    ca:cd:93:c8:c6:aa:d9:1a:23:a4:10:af:40:47:bc:
                    2e:5a:92:a2:a8:03:01:f9:cc:43:8e:e1:b0:d7:8e:
                    d5:7d:27:91:83:f9:06:0b:fe:d8:af:5d:03:a2:2d:
                    b9:76:25:f9:32:6f:f9:ff:81:f3:c1:f4:a4:71:e8:
                    47:2a:5f:de:fe:e3:16:fd:8e:44:0f:60:64:31:2a:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:FE:67:38:53:C2:BF:FB:67:F5:DF:08:C5:03:35:57:47:10:83
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:00:ff:07:04:95:d6:8f:7a:e0:27:f4:76:38:b1:67:47:
         54:3e:7a:df:ea:17:fe:22:23:0d:99:75:9c:26:4c:58:4b:2c:
         ea:a9:04:86:4e:9f:96:07:5c:6f:c2:38:60:c8:30:d7:15:5e:
         ba:ab:29:d1:2b:ad:be:fe:97:98:02:62:cf:6b:74:12:93:d0:
         09:b9:2a:a1:d7:e7:c7:1d:f2:2d:60:83:63:2d:49:d4:4f:2f:
         77:12:21:35:ef:1f:df:71:2d:6d:a6:20:98:9e:ed:cb:d6:7b:
         e7:f1:e6:4c:0c:5e:92:eb:73:18:5a:09:9f:81:52:ae:52:e3:
         6b:26:20:49:bf:cb:71:e9:e8:ff:f4:80:ca:18:86:57:01:0d:
         8d:ea:f4:ce:11:4f:28:cb:b6:52:8c:3b:d5:cd:d8:07:80:4e:
         8c:46:54:ac:7a:71:23:8a:bc:c1:01:e1:a9:b4:ac:02:59:9c:
         9b:42:e4:1a:0d:5b:05:a5:b9:fa:e5:02:77:7e:f9:8b:b9:c6:
         2f:a0:55:d6:57:fe:77:c8:95:3b:f5:32:29:9e:66:ce:a4:d6:
         85:47:a4:04:76:9c:37:b3:59:e3:1c:28:76:e9:ce:22:40:87:
         ac:8d:14:d9:c9:08:66:31:30:eb:71:d6:8e:bf:8b:24:b5:37:
         ff:9a:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:37:13 2026 by rpki-client