This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File:                     fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier:          u8bnTb/j23gnXMExD+eBarGATZYDSAmEjV+zBrIBSBg=
Subject key identifier:   FA:AF:1C:92:00:93:EA:3C:89:B1:9E:71:BA:BA:0B:01:A7:B8:4E:53
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer:       /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial:       3577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number:          3532
Signing time:             Sat 24 Jan 2026 14:44:14 +0000
Manifest this update:     Sat 24 Jan 2026 14:44:14 +0000
Manifest next update:     Sat 31 Jan 2026 14:44:14 +0000
Files and hashes:         1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: hK5FVsTSFxsjbZoj35MVKuEQ5NZHs0q5VjD1ddHhdhI=)
                          2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: WsCaaQ8L1bxWhxg54hjuG1Go8zBEJwAX8ylibjmK7QQ=)
                          3: E652AA52C40911EBA930053BC4F9AE02.roa (hash: 059V5evvVlwvqhYmAH8RCR6WncgUFs2g2N8S+IGfKUE=)
                          4: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: jtNYB2wRKxdcsyRMOMGrPRMxmPYLg6mXDKTfhKPhrtw=)
                          5: C5859C724D7611EFBA188667C4F9AE02.roa (hash: aTe2/qHECp604MTOZNBT11/TWC/3VIpR1RLRNWUq1YA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
                          rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13687 (0x3577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
        Validity
            Not Before: Jan 24 14:44:14 2026 GMT
            Not After : Jan 31 14:44:14 2026 GMT
        Subject: CN=6974dabe-6860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:d7:9a:40:06:e9:72:d8:8d:d8:f9:df:c4:
                    44:7a:9c:3a:ab:00:81:d0:72:9c:b6:21:7c:9a:41:
                    9f:bc:48:a7:8e:d8:47:d2:9b:fc:d2:ca:b2:aa:82:
                    75:ce:02:47:8c:bb:77:76:4a:be:74:9a:6b:d5:4d:
                    40:24:0b:24:05:a3:a8:7c:87:47:da:e7:5e:e3:ea:
                    e0:9d:13:f5:63:6e:48:ea:29:38:c2:2f:ab:68:ba:
                    76:aa:d2:1b:7d:13:8a:f3:e7:07:38:46:bc:69:d9:
                    5d:c8:af:46:8a:17:a7:fc:6f:51:bd:54:ae:70:b0:
                    c2:db:d2:a4:b6:bb:75:78:52:88:2d:4b:96:55:20:
                    f7:4e:de:70:7e:de:4b:cd:80:76:ca:20:73:19:4b:
                    99:01:95:a6:e7:de:5f:2e:27:81:5f:d5:88:61:1e:
                    5c:2a:b9:d4:c4:f7:a7:62:90:f3:ae:6c:1b:c6:5a:
                    23:51:d5:80:b6:8b:d1:cc:57:0c:26:ba:8d:b6:77:
                    b5:4e:9f:13:5e:f2:33:cf:e2:db:f8:7a:2d:64:4c:
                    e9:04:a4:99:15:8d:59:cb:39:e2:21:8d:2b:29:91:
                    14:24:6b:43:00:82:92:66:e5:37:55:28:d8:8e:c1:
                    3a:53:9c:e9:66:10:68:ed:07:05:86:5c:9a:93:c3:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:1C:92:00:93:EA:3C:89:B1:9E:71:BA:BA:0B:01:A7:B8:4E:53
            X509v3 Authority Key Identifier:
                keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:00:40:0e:3e:9a:e5:55:77:bb:d1:0c:55:f1:c7:27:31:46:
         a8:1d:6f:e5:d6:1b:bb:36:f1:80:58:53:26:f1:d5:ef:f4:46:
         71:65:42:3d:3c:c2:9c:b5:5f:e4:e5:a8:3e:b8:0f:d3:06:cc:
         c6:fe:d0:09:ca:15:15:7c:c5:27:80:81:c6:3d:02:cc:f7:05:
         d6:cd:d4:5f:41:a6:43:0e:62:9d:3d:61:5a:f4:19:ed:f1:3c:
         7d:ea:54:1b:8c:a3:21:64:c2:cf:98:78:94:63:9f:81:3b:a5:
         7b:29:c5:2f:ff:a8:76:b8:bc:da:78:bd:50:65:40:61:cb:6c:
         1b:99:84:84:f0:3b:06:07:80:45:76:67:7b:ad:0d:60:64:02:
         7d:c9:91:f4:d2:37:f1:b2:52:ef:59:1a:a0:d0:1b:5a:52:df:
         ed:e5:3b:36:84:e2:5c:db:52:c3:db:32:cb:33:4f:a8:5a:36:
         08:b1:32:be:c8:61:c8:e8:35:99:d8:98:47:de:2b:73:99:f6:
         0b:03:47:a2:80:7e:39:be:15:27:73:1e:fd:e7:1a:12:4e:58:
         3e:d2:6a:70:14:41:25:bb:f5:b4:9d:4c:5d:b4:7e:8f:ab:77:
         b6:ac:f7:79:c2:2b:84:ad:11:61:45:9f:b9:4b:e7:82:44:26:
         5e:05:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:36 2026 by rpki-client