This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File:                     18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier:          nZRZzq7w3NefHyVyCCD3Eh3LNUpYlgvrdOgW3Wu0/KA=
Subject key identifier:   E4:A4:EE:EF:47:15:4A:8A:21:83:2A:56:9A:D3:04:6C:1B:C7:BA:7D
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer:       /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial:       03BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number:          03A8
Signing time:             Sat 24 Jan 2026 16:07:09 +0000
Manifest this update:     Sat 24 Jan 2026 16:07:09 +0000
Manifest next update:     Sat 31 Jan 2026 16:07:09 +0000
Files and hashes:         1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: vynQp0azNUfeb+05JW/aF2VXLG/+ygisrfJpjgxFb6o=)
                          2: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: rRV3ULmc3s28UHX3IfHIa+Sp5XP4XAzVw9QLu0Fytsg=)
                          3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 03Y5aZgZbiR8AXRbH0v7oX9h0nIRsdQvo8UEKJF+mQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
        Validity
            Not Before: Jan 24 16:07:09 2026 GMT
            Not After : Jan 31 16:07:09 2026 GMT
        Subject: CN=6974ee2d-df9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:f1:6a:d7:6b:0c:7e:ba:de:f4:6d:dc:fb:
                    71:34:57:1b:2d:5b:c6:1c:96:5c:05:f6:53:66:a3:
                    a6:e9:08:93:1f:e0:6b:8d:a8:0f:a6:b9:1d:cf:4b:
                    12:50:fd:ea:46:35:c2:59:55:34:85:10:aa:14:3f:
                    c9:2e:1d:98:b1:11:94:17:47:7e:2c:53:70:f2:db:
                    cc:7f:b2:b7:45:8c:47:da:f9:80:4c:3f:ba:54:47:
                    0b:cd:ba:00:4f:ea:87:09:13:c0:23:37:1d:36:eb:
                    eb:59:b7:1f:2d:8b:e5:8b:2c:64:5c:e4:bc:18:0e:
                    eb:c9:41:d6:e9:34:f3:46:cf:a9:d0:7b:ef:7d:f5:
                    4b:7b:2b:d2:79:79:98:4f:50:ee:7f:f3:69:4f:14:
                    44:6f:7e:0a:da:e3:3d:09:94:aa:1a:5e:aa:63:bb:
                    9f:da:83:04:91:df:68:73:fd:28:b3:e7:cc:d6:c2:
                    f5:5d:a2:03:d7:cf:e0:01:a0:27:5d:f0:39:bd:30:
                    3c:1a:d7:8f:69:bf:8c:a3:7b:15:2c:33:b3:de:96:
                    15:5d:4e:6d:7c:16:90:7e:c6:da:5b:d9:c7:c2:05:
                    da:f1:42:ba:a1:34:4d:97:0f:8d:e4:f9:7f:95:06:
                    03:2d:10:a1:b8:b4:b0:8c:1b:68:b2:83:55:3a:5b:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A4:EE:EF:47:15:4A:8A:21:83:2A:56:9A:D3:04:6C:1B:C7:BA:7D
            X509v3 Authority Key Identifier:
                keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:c7:ef:08:fe:f6:27:67:49:4d:a3:d2:6a:84:f5:e6:df:
         2b:53:5c:40:57:4e:01:63:34:d5:31:d5:14:3e:6b:f0:59:a2:
         be:50:bd:c5:77:a8:1a:f4:85:a8:ef:72:03:46:a8:a1:74:65:
         f1:38:a5:ba:b2:66:09:00:fe:c8:19:0a:d8:f7:e2:7d:04:8b:
         98:98:c5:62:5e:8d:0f:91:d3:42:66:8d:17:35:21:3a:97:50:
         94:dd:9a:48:38:3a:1e:a5:94:6c:aa:54:fb:e1:6a:64:50:78:
         ca:5f:6c:4a:28:ed:b0:2e:8f:03:40:76:fb:45:4f:1c:db:a1:
         1c:2a:09:92:3c:18:ea:8a:e7:35:80:e9:30:f0:ed:36:87:1b:
         5f:0f:0d:ca:2f:b9:68:e3:da:e0:ee:34:51:d9:ef:8a:d6:0e:
         3f:a7:fe:e7:e6:14:d9:f4:6b:71:a7:ba:a9:40:13:1d:ef:27:
         28:c1:3d:6c:8a:8e:72:6c:2c:5d:a2:d6:9e:4d:8b:fc:12:f3:
         f6:0f:19:ad:40:a4:73:f1:3c:5e:cc:44:c0:12:87:81:ba:7e:
         27:12:29:f5:ad:49:b8:eb:f4:1e:56:62:9e:2f:e7:a4:73:66:
         80:62:e6:7e:a3:95:b5:6e:ee:f7:48:e2:f9:04:9e:28:f7:f1:
         03:6d:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:12 2026 by rpki-client