This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File:                     PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier:          0+AZORyB4UFfn+/hQy1cUKN9SPcPwDw7P6zaiVPYz8s=
Subject key identifier:   CF:32:C6:2F:2F:86:60:EC:25:D7:F1:72:89:5D:EE:B6:00:49:B5:A8
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer:       /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial:       0832
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number:          082A
Signing time:             Sat 24 Jan 2026 20:15:43 +0000
Manifest this update:     Sat 24 Jan 2026 20:15:42 +0000
Manifest next update:     Sat 31 Jan 2026 20:15:42 +0000
Files and hashes:         1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: Stdh2JRZJwmFCRpYa6Ef2pf9/ItSDZIlFN3lEWHD75Y=)
                          2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
                          rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098 (0x832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
        Validity
            Not Before: Jan 24 20:15:42 2026 GMT
            Not After : Jan 31 20:15:42 2026 GMT
        Subject: CN=6975286f-3113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:a3:8a:6f:64:10:cf:c6:c7:60:af:51:f7:
                    96:be:9a:61:77:93:ee:56:cf:4e:e3:bb:30:e8:57:
                    f7:40:b4:48:b2:c0:de:7b:17:5a:ea:57:ae:cc:7a:
                    98:ef:0f:9d:25:e7:69:f3:01:72:d4:db:21:1b:1f:
                    25:63:30:be:1b:98:4c:db:c5:a8:f7:46:a8:e0:49:
                    f5:bc:83:ce:10:b9:ee:63:7a:0e:45:7b:b5:6f:74:
                    09:7a:77:a5:ba:37:82:e1:d5:11:06:44:9d:b9:43:
                    23:a1:2d:00:f0:56:ea:7a:e7:a4:fa:25:0c:b0:2e:
                    0e:61:62:c9:cd:82:54:57:e6:ea:f3:97:99:f6:1f:
                    c6:04:38:d1:fb:7d:c0:fe:c0:f3:b3:a0:c2:23:37:
                    11:72:03:3a:32:68:e8:16:3c:7c:be:a1:f1:00:2f:
                    f8:bd:26:90:15:b7:a8:a9:aa:0b:b4:26:e3:a4:85:
                    7c:ae:76:31:83:6b:5b:1c:15:3c:9c:62:e0:d1:2d:
                    db:b9:38:7d:b9:cf:5a:64:d9:49:d7:ed:b1:af:61:
                    da:5d:32:58:74:9c:f0:81:95:4e:5e:85:f2:ca:fb:
                    9e:8d:3e:bc:11:a2:c2:3c:d9:cf:17:02:e0:75:27:
                    69:13:b5:20:a4:6f:cc:9c:9a:52:8b:20:f0:6c:5b:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:32:C6:2F:2F:86:60:EC:25:D7:F1:72:89:5D:EE:B6:00:49:B5:A8
            X509v3 Authority Key Identifier:
                keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:83:07:d4:26:04:91:92:50:fb:d7:63:63:e2:ed:0a:74:
         1b:fe:1d:ef:65:35:0d:b1:47:90:76:8f:d1:52:35:f7:8c:6f:
         4d:80:f0:5e:67:e1:73:17:92:7d:2b:a9:d0:59:3d:c1:5f:a7:
         93:4c:31:87:56:b1:ef:ac:95:05:c6:a0:2e:52:08:58:1f:6d:
         d5:14:69:ca:e9:fe:16:1c:78:82:4b:c8:c6:98:ac:90:b3:0e:
         e9:d2:1d:50:6d:0e:fb:52:3c:c5:a4:25:d1:f1:28:09:20:0f:
         4f:70:6e:16:90:ed:df:02:33:d3:d7:70:d0:ef:0f:63:48:28:
         93:9d:67:e9:d0:92:7e:98:5a:93:af:c7:6a:be:e0:4b:73:9c:
         f8:1f:57:12:8b:80:27:37:6e:54:cb:1a:b7:6d:70:0a:a8:1c:
         64:13:36:6a:a2:2f:63:d4:0d:ec:bb:f2:3d:1d:34:d1:16:e1:
         42:5f:5a:7a:c3:31:39:4a:9a:b7:cd:12:83:0b:7a:67:37:7f:
         74:a8:7e:47:08:24:03:7b:1b:68:65:f7:38:43:ea:3d:29:ef:
         40:9b:ae:7d:1b:04:1d:f8:9f:27:f6:a0:80:22:74:bd:61:21:
         aa:4f:3f:69:96:10:e1:e8:38:69:9e:f6:7b:a6:1e:be:db:f5:
         77:71:47:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE
NkNERDVBRUUwHhcNMjYwMTI0MjAxNTQyWhcNMjYwMTMxMjAxNTQyWjAYMRYwFAYD
VQQDDA02OTc1Mjg2Zi0zMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Y6jim9kEM/Gx2CvUfeWvpphd5PuVs9O47sw6Ff3QLRIssDeexda6leuzHqY
7w+dJedp8wFy1NshGx8lYzC+G5hM28Wo90ao4En1vIPOELnuY3oORXu1b3QJenel
ujeC4dURBkSduUMjoS0A8Fbqeuek+iUMsC4OYWLJzYJUV+bq85eZ9h/GBDjR+33A
/sDzs6DCIzcRcgM6MmjoFjx8vqHxAC/4vSaQFbeoqaoLtCbjpIV8rnYxg2tbHBU8
nGLg0S3buTh9uc9aZNlJ1+2xr2HaXTJYdJzwgZVOXoXyyvuejT68EaLCPNnPFwLg
dSdpE7UgpG/MnJpSiyDwbFshNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8yxi8v
hmDsJdfxcold7rYASbWoMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG
ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3
MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtaIMH1CYEkZJQ+9djY+LtCnQb/h3vZTUNsUeQdo/RUjX3jG9NgPBe
Z+FzF5J9K6nQWT3BX6eTTDGHVrHvrJUFxqAuUghYH23VFGnK6f4WHHiCS8jGmKyQ
sw7p0h1QbQ77UjzFpCXR8SgJIA9PcG4WkO3fAjPT13DQ7w9jSCiTnWfp0JJ+mFqT
r8dqvuBLc5z4H1cSi4AnN25Uyxq3bXAKqBxkEzZqoi9j1A3su/I9HTTRFuFCX1p6
wzE5Spq3zRKDC3pnN390qH5HCCQDextoZfc4Q+o9Ke9Am659GwQd+J8n9qCAInS9
YSGqTz9plhDh6DhpnvZ7ph6+2/V3cUfa
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:40 2026 by rpki-client