This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
File:                     SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json)
Hash identifier:          U9djLOjf44omzZE+FLpV5BUiW6uPKkiQvajBnMqnXX4=
Subject key identifier:   55:36:DF:0E:C5:C1:FF:88:F0:80:4E:63:2A:46:A4:C0:04:4E:61:C4
Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48
Certificate issuer:       /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
Manifest number:          02A0
Signing time:             Sun 25 Jan 2026 00:40:17 +0000
Manifest this update:     Sun 25 Jan 2026 00:40:16 +0000
Manifest next update:     Sun 01 Feb 2026 00:40:16 +0000
Files and hashes:         1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: SjDun8S1Lt/aOs+0XnndWtqCnslCfw/n+dHwssXGwWA=)
                          2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl
                          rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
        Validity
            Not Before: Jan 25 00:40:16 2026 GMT
            Not After : Feb  1 00:40:16 2026 GMT
        Subject: CN=69756670-8087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:9a:69:5c:50:b1:95:ab:0e:57:58:35:b1:
                    2b:d6:e8:44:8f:ea:4d:34:c3:0c:56:90:82:95:e4:
                    5b:cd:e5:81:e7:96:7b:31:6c:28:84:5d:c5:61:b4:
                    f5:c6:47:1f:f8:7a:77:ed:f8:4f:55:37:e6:6a:26:
                    fd:d3:6b:c3:56:1d:24:21:1c:63:9c:03:48:53:00:
                    08:db:a9:99:08:07:10:d4:62:d0:85:d4:85:9c:de:
                    64:8d:f9:98:c5:06:55:1a:51:91:12:a5:58:e3:2b:
                    c4:99:c1:f3:30:25:25:74:ab:e1:ce:a5:5f:56:3d:
                    2c:c5:ec:52:50:0c:a6:d0:6d:ec:de:94:27:cf:c8:
                    38:98:62:c5:8b:74:31:05:44:cf:00:26:76:ed:a7:
                    b0:b5:a1:ec:5a:39:17:c2:2b:8d:96:05:6e:d6:c0:
                    66:78:11:99:2c:0c:b9:68:fd:8e:43:2a:6a:21:23:
                    4d:bf:24:bd:70:39:60:43:32:ec:54:f4:ff:15:a1:
                    95:0a:ff:c2:7f:f9:d9:35:44:e4:f4:b4:32:01:2b:
                    37:e4:b6:b3:ca:68:7a:11:10:19:07:7a:f4:00:c0:
                    17:9b:18:1b:ff:e9:17:b9:62:93:0a:49:d1:0d:43:
                    8d:6d:e9:16:d9:82:23:25:62:6e:a5:00:69:61:a4:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:36:DF:0E:C5:C1:FF:88:F0:80:4E:63:2A:46:A4:C0:04:4E:61:C4
            X509v3 Authority Key Identifier:
                keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a5:39:05:38:5e:06:db:78:91:1f:29:2d:46:61:f8:5b:15:
         ab:59:10:82:27:d5:ad:55:a3:d8:8f:54:f3:43:8a:ac:2b:97:
         e5:87:72:26:cb:a3:d0:7f:a5:bc:38:2d:96:49:99:5c:4c:d9:
         24:86:ff:21:58:a7:d9:a1:1d:18:91:33:e6:84:1f:d0:e2:08:
         72:f1:4e:62:6a:be:d3:47:a0:31:3f:91:ab:09:85:41:b6:24:
         59:4b:27:4f:91:86:36:4c:67:d0:1f:3b:8e:70:e1:fe:ad:61:
         f5:c4:1b:fe:98:1d:d5:97:6a:bf:45:0b:66:a0:d0:37:66:74:
         36:f1:c2:5d:ca:2e:cb:a6:ac:99:5f:21:3f:2c:06:20:1d:5b:
         68:d1:03:40:68:d6:ff:78:f0:11:ee:a8:7e:ab:4a:20:af:33:
         be:86:b1:c4:2c:5d:7c:36:01:9d:f6:46:f1:30:25:83:67:c1:
         c9:95:ff:7e:8d:5e:7c:89:d9:05:7c:b0:67:6a:6d:ed:d8:2d:
         bd:ee:2b:d6:e4:81:4a:d3:c2:19:a3:14:63:c9:e9:ca:66:ba:
         40:7c:19:88:2a:8a:5c:05:f0:6c:27:1a:c8:28:de:9d:b3:5f:
         9e:da:7a:27:64:1a:60:9e:73:59:d5:50:a8:7e:de:3a:11:b4:
         df:ff:55:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3
RDY5OTMyNDgwHhcNMjYwMTI1MDA0MDE2WhcNMjYwMjAxMDA0MDE2WjAYMRYwFAYD
VQQDDA02OTc1NjY3MC04MDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPKaaVxQsZWrDldYNbEr1uhEj+pNNMMMVpCCleRbzeWB55Z7MWwohF3FYbT1
xkcf+Hp37fhPVTfmaib902vDVh0kIRxjnANIUwAI26mZCAcQ1GLQhdSFnN5kjfmY
xQZVGlGREqVY4yvEmcHzMCUldKvhzqVfVj0sxexSUAym0G3s3pQnz8g4mGLFi3Qx
BUTPACZ27aewtaHsWjkXwiuNlgVu1sBmeBGZLAy5aP2OQypqISNNvyS9cDlgQzLs
VPT/FaGVCv/Cf/nZNUTk9LQyASs35Lazymh6ERAZB3r0AMAXmxgb/+kXuWKTCknR
DUONbekW2YIjJWJupQBpYaRIWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU23w7F
wf+I8IBOYypGpMAETmHEMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG
MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf
ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFpTkFOF4G23iRHyktRmH4WxWrWRCCJ9WtVaPYj1TzQ4qsK5flh3Im
y6PQf6W8OC2WSZlcTNkkhv8hWKfZoR0YkTPmhB/Q4ghy8U5iar7TR6AxP5GrCYVB
tiRZSydPkYY2TGfQHzuOcOH+rWH1xBv+mB3Vl2q/RQtmoNA3ZnQ28cJdyi7LpqyZ
XyE/LAYgHVto0QNAaNb/ePAR7qh+q0ogrzO+hrHELF18NgGd9kbxMCWDZ8HJlf9+
jV58idkFfLBnam3t2C297ivW5IFK08IZoxRjyenKZrpAfBmIKopcBfBsJxrIKN6d
s1+e2nonZBpgnnNZ1VCoft46EbTf/1XN
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:27 2026 by rpki-client