This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
File:                     2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft (raw, json)
Hash identifier:          vwSgMq+GkFleruNdlQbqAo8NJEfM9W+r7LQOOvds9Ww=
Subject key identifier:   CA:02:42:C7:B4:C7:4B:5D:0E:8F:24:17:C8:36:71:A7:B8:C7:0B:CB
Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6
Certificate issuer:       /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
Manifest number:          18
Signing time:             Fri 23 Jan 2026 07:01:35 +0000
Manifest this update:     Fri 23 Jan 2026 07:01:34 +0000
Manifest next update:     Fri 30 Jan 2026 07:01:34 +0000
Files and hashes:         1: 2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl (hash: d2+f7hZvXZDsVlSLy+ekZ1wSGT9C+DoGX5RE2GFsc4M=)
                          2: 0FE42DACE16811F0AD117D783A6F56BC.roa (hash: JsUVmDenlNRs0tfS9whRc7Jzv4Yo+z4hCHKowYgJ6Tk=)
                          3: 21EF23B2E16811F0AE4839883A6F56BC.roa (hash: IplB0gM9Uuw4HNboDvbREthelLfiR2zwPB1/OskSGfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl
                          rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6
        Validity
            Not Before: Jan 23 07:01:34 2026 GMT
            Not After : Jan 30 07:01:34 2026 GMT
        Subject: CN=69731ccf-dd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:a5:41:d8:ee:c5:9f:1e:5e:fe:5f:cd:37:
                    23:85:e5:af:42:76:f4:30:2d:3a:80:d5:28:f9:b0:
                    a9:6b:c6:06:02:95:40:7c:13:a7:1b:e2:d7:cb:87:
                    3f:1d:07:04:6d:f0:0e:6d:27:5d:23:6f:1e:f6:a9:
                    ee:65:a4:53:6a:98:47:42:1f:0c:ce:d7:e6:6a:35:
                    e7:8d:f4:29:f5:2b:c5:cc:0a:a9:0e:e2:c9:75:45:
                    9a:f6:bc:0b:cc:0b:a3:92:56:6d:41:6b:89:55:82:
                    b2:14:9e:66:f1:60:63:04:90:fa:24:23:de:ce:73:
                    f1:27:be:bb:e9:2a:41:70:4d:43:77:d6:e3:fa:56:
                    cb:97:81:e3:d4:02:d8:28:40:bb:3d:6d:84:9b:79:
                    6b:8f:b7:ab:23:9e:0f:c2:79:65:2e:3a:bf:dd:d1:
                    8f:ad:31:bc:7d:f9:4b:b9:47:ab:36:a4:c6:45:87:
                    39:c1:21:7f:8e:2d:e0:de:61:c8:52:f3:7a:da:56:
                    83:ed:21:50:b6:6d:42:28:23:0a:cc:39:77:7f:f9:
                    88:51:4b:d3:f3:d4:09:47:fa:36:27:cd:cc:0d:e7:
                    6e:eb:ef:8a:aa:ac:12:e3:a1:b3:ab:07:7b:a8:f0:
                    ee:7c:61:51:9b:ca:f2:a5:e7:d8:49:84:1e:a8:71:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:42:C7:B4:C7:4B:5D:0E:8F:24:17:C8:36:71:A7:B8:C7:0B:CB
            X509v3 Authority Key Identifier:
                keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:c8:cb:d1:07:f1:2e:3f:48:7f:87:0a:65:d7:e5:c4:f8:
         87:15:d4:08:ba:54:8f:66:f5:4b:a0:35:31:bf:8d:33:f7:d3:
         1b:48:ca:d7:bc:43:68:65:0a:fa:5a:d7:6e:f1:97:30:34:54:
         6e:c6:34:48:6e:10:e7:c9:fb:27:c1:28:e3:34:3c:d2:f1:da:
         83:6c:b1:7e:18:cf:71:9c:62:3a:22:86:11:1e:ad:cd:6f:94:
         4e:f3:df:7c:bc:60:05:d5:47:e5:f4:cc:73:67:2d:71:19:cd:
         30:f7:b9:10:15:66:c7:3d:1d:5a:1a:a9:8e:9e:e5:1b:b3:a5:
         f8:10:43:1e:2f:d9:35:42:a3:ae:b3:52:1f:11:25:24:e2:1a:
         c1:3d:1f:a9:07:71:76:33:ff:cb:6c:a3:2e:1d:57:c2:bf:87:
         d5:3e:9a:b6:2c:72:f6:4d:57:00:b6:7f:65:bf:04:bb:d8:06:
         db:33:49:6c:8a:f4:3b:c9:3b:47:e8:2d:cd:ca:6a:17:12:55:
         d3:c0:43:ea:86:75:b6:ce:a1:39:30:06:bd:0d:d1:db:05:66:
         3b:f6:d0:33:5e:c6:39:5e:3d:1b:c9:72:15:b6:a6:d6:81:93:
         09:b9:d9:a9:7b:12:40:77:3a:db:71:ad:f7:0c:10:29:e3:ae:
         38:45:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:56:06 2026 by rpki-client