This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File:                     dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier:          HDh5WxTjwkPs9HaRwEUDHMegUMihpLu/HQ0ksG4mBQU=
Subject key identifier:   A5:43:1A:6B:CC:4B:DA:6E:09:03:48:BA:35:88:CA:81:33:7D:03:78
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer:       /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number:          29
Signing time:             Sun 25 Jan 2026 06:53:13 +0000
Manifest this update:     Sun 25 Jan 2026 06:53:13 +0000
Manifest next update:     Sun 01 Feb 2026 06:53:13 +0000
Files and hashes:         1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: rucMq4MbsWdORb20tAHLh/HnLC8Zd7QBFhPsCfxrCDc=)
                          2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: NEVcv1T1D9u5LyZ1/NMZvoEsyEcog9SLjj/OAI9mCyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
                          rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
        Validity
            Not Before: Jan 25 06:53:13 2026 GMT
            Not After : Feb  1 06:53:13 2026 GMT
        Subject: CN=6975bdd9-7772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:c7:b2:11:fe:ac:24:36:7e:1d:73:c2:5e:
                    3c:48:06:4a:d0:59:21:74:2b:04:2d:91:82:35:20:
                    07:19:ad:42:aa:e6:87:bc:3f:b5:9e:c9:05:1f:45:
                    af:18:61:ed:2f:f7:d2:57:9a:6e:68:77:80:db:62:
                    d1:c1:02:a1:37:23:56:97:05:2b:15:8c:88:d0:e8:
                    67:18:5a:08:13:8f:6d:dc:8c:cf:06:31:42:57:ea:
                    d9:68:c8:7f:06:2e:c9:28:b1:03:f1:ce:cc:7a:fe:
                    05:74:06:90:7f:45:7e:7c:e9:7e:73:55:33:86:29:
                    c0:b1:58:89:25:ae:15:b5:61:00:27:df:28:bd:15:
                    6b:30:9d:84:2e:94:6d:c3:ef:b5:f8:69:a1:8d:f1:
                    da:b1:be:ed:0f:97:fa:1a:63:35:26:8a:43:8c:69:
                    b6:97:e8:1b:fd:79:87:8f:15:54:14:6f:54:ae:3e:
                    f5:02:d1:5c:33:dc:4b:6d:45:a8:68:8e:51:3f:59:
                    e5:7f:c1:52:12:2e:1b:cd:e1:21:9e:e8:81:86:d0:
                    4f:2a:60:a5:aa:39:44:60:1f:b7:be:4b:60:00:39:
                    14:ee:06:6e:ba:cc:ec:d9:4d:48:2b:f4:e0:1a:32:
                    a9:29:c0:88:93:9c:d5:2d:33:5b:0e:f1:4d:75:58:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:43:1A:6B:CC:4B:DA:6E:09:03:48:BA:35:88:CA:81:33:7D:03:78
            X509v3 Authority Key Identifier:
                keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:85:4c:8c:48:f5:eb:60:75:85:95:c6:34:b9:4f:f7:b0:54:
         b1:65:0b:48:23:2e:be:b0:0f:5e:d5:39:d7:b3:05:7d:ec:70:
         95:b9:9e:04:49:2c:45:00:54:aa:00:24:20:a8:33:c4:53:10:
         79:22:bb:3f:c8:db:d9:1f:7e:04:d5:da:cf:0a:81:62:f6:9f:
         9a:8d:af:5d:d2:cb:dd:93:19:4a:ae:e9:fc:51:4a:64:16:ae:
         4c:80:cc:81:fc:a6:dd:63:29:47:52:5b:eb:2d:ab:79:6c:21:
         31:90:02:0f:17:43:0d:b9:cf:6e:e3:39:2c:77:71:b7:e9:a5:
         33:bc:59:0a:cd:58:3f:b7:4f:7a:4b:e7:bb:fb:94:7e:e2:4d:
         2d:b7:c9:ab:2d:1a:cf:61:f9:71:01:2f:54:25:2a:30:1a:d1:
         12:8b:22:66:9c:3f:e4:52:88:66:67:66:70:dd:2b:98:f4:88:
         0b:d8:29:02:33:fb:46:35:c3:34:dd:83:1e:ba:cb:a4:73:4d:
         2b:17:71:9f:f4:59:d7:0b:88:4c:6c:be:e3:d3:b7:5a:f8:7f:
         78:f9:3b:8c:7f:15:34:60:9a:eb:36:2a:dd:6a:ad:32:08:e4:
         20:69:d9:fe:99:76:6e:b6:f6:7d:3b:18:fd:e3:97:2d:3d:7c:
         6b:31:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:05 2026 by rpki-client