This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File:                     P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier:          5THaRrgogC5kkLyPRHPrBi9KhlEigNqgmKEr5oq7ODE=
Subject key identifier:   23:4E:C4:B3:11:BE:A3:C5:E6:99:62:2B:24:1F:A1:E4:E3:2B:6A:58
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer:       /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial:       0658
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number:          0653
Signing time:             Sat 24 Jan 2026 21:53:37 +0000
Manifest this update:     Sat 24 Jan 2026 21:53:37 +0000
Manifest next update:     Sat 31 Jan 2026 21:53:37 +0000
Files and hashes:         1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: T+ANtDf4M1kbhdrsdlw43ovHGKF/efQRiNSQvapNxN0=)
                          2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
                          rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
        Validity
            Not Before: Jan 24 21:53:37 2026 GMT
            Not After : Jan 31 21:53:37 2026 GMT
        Subject: CN=69753f61-f7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:c9:4f:e6:de:b7:2e:76:15:bb:06:6b:0d:
                    ba:c4:db:5b:ba:46:13:59:a2:87:16:c7:48:94:de:
                    48:bd:b7:81:7c:1c:1b:db:52:a9:dc:6e:61:3c:73:
                    b5:65:81:60:c5:b0:06:60:42:0f:b3:ff:95:f9:20:
                    93:57:d4:a3:f2:a2:f4:a9:be:47:52:5f:17:72:1f:
                    f8:6e:b8:ef:48:44:12:8e:14:9b:2c:ad:8f:83:fa:
                    ed:28:50:c4:0d:1a:ad:f3:1a:7d:e6:ce:8e:6a:cb:
                    3b:18:75:26:23:d7:44:c2:24:8a:ca:2f:fa:6f:f5:
                    e5:51:20:96:1d:4d:93:19:b1:20:58:05:0d:32:cb:
                    78:4a:20:e3:ce:03:c6:7d:ec:be:64:3f:ed:ef:85:
                    f2:f0:59:4f:07:dd:8f:bb:2b:d8:ca:52:b6:80:92:
                    2b:08:5e:ed:9a:36:e0:d7:47:ca:06:a5:a4:b7:09:
                    81:34:04:1f:dc:55:c2:d5:4c:ce:e9:6b:1f:31:56:
                    b5:76:ba:85:20:3d:26:c9:c4:78:c0:67:02:2c:df:
                    e8:20:a7:54:64:bd:36:95:44:97:e3:ef:b5:13:58:
                    6a:27:bc:b6:73:fa:d7:6d:93:40:4e:03:34:f2:09:
                    16:af:db:2a:22:b9:20:0d:19:3f:d2:ea:21:44:81:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:C4:B3:11:BE:A3:C5:E6:99:62:2B:24:1F:A1:E4:E3:2B:6A:58
            X509v3 Authority Key Identifier:
                keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:23:f5:e4:f3:55:14:4d:62:ad:40:5f:ed:13:51:c9:e9:
         1a:ff:65:0e:e0:65:76:11:2a:2a:93:c9:32:ae:6d:49:07:d4:
         5c:d4:6f:fe:ea:36:93:cc:d5:ff:ab:b5:2c:71:9c:5f:f2:e7:
         a1:ec:ad:9c:18:48:41:43:18:9a:4e:40:d0:31:31:d0:4c:b9:
         20:d3:ef:17:e2:03:26:82:25:b6:44:a2:c3:9f:b0:c1:d0:4d:
         6d:f4:a8:12:96:44:19:fe:0a:3a:81:51:5f:69:4e:e5:84:d3:
         35:25:22:66:f0:7d:8b:38:f5:50:72:db:4d:55:67:6d:9c:9b:
         2c:ea:32:98:1c:f5:13:b7:fc:f8:ef:4e:98:98:ed:93:94:b4:
         56:06:3d:71:ee:30:b6:ba:38:60:6d:86:9a:72:b1:a3:4e:a6:
         ba:21:a7:0c:89:08:25:da:4e:fd:de:e6:da:04:65:bc:40:af:
         bf:76:6c:6d:d8:99:b4:22:24:31:93:16:28:f5:6f:bf:d7:77:
         25:97:1a:49:16:88:94:5c:fc:ba:92:cd:e5:aa:66:37:2c:e2:
         ff:cc:10:23:ba:e5:cb:bc:cf:38:58:bc:fc:38:06:5c:d2:6c:
         44:a6:a2:e6:27:f5:ef:e6:79:f2:f5:67:a7:a4:79:f5:2c:d8:
         c8:b5:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:57 2026 by rpki-client