This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
File:                     4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft (raw, json)
Hash identifier:          ttkQ6CumObCZQQLItfqLiL8GRaFuV1X1tGhHO/uAfHk=
Subject key identifier:   03:1D:5F:17:B8:4C:BE:1F:2C:85:6C:AF:37:C3:15:C4:46:25:73:09
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Certificate issuer:       /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
Manifest number:          02EB
Signing time:             Sun 25 Jan 2026 00:28:22 +0000
Manifest this update:     Sun 25 Jan 2026 00:28:21 +0000
Manifest next update:     Sun 01 Feb 2026 00:28:21 +0000
Files and hashes:         1: 4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl (hash: 2PlOorFVqlKKAXGUIqtOXsXK+Rc64oZxPwvY1WsDwks=)
                          2: 2541D62A7F9811ED93508538C4F9AE02.roa (hash: U9zRAtnK+rMFnlnfGAU4KvzYtOXqBm7qFzqLf0N4GqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
                          rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1C1, serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
        Validity
            Not Before: Jan 25 00:28:21 2026 GMT
            Not After : Feb  1 00:28:21 2026 GMT
        Subject: CN=697563a5-f04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:ad:3b:ab:ff:c5:a6:9b:ac:a0:a9:8d:bd:
                    c5:69:46:e0:dc:c8:d7:0c:97:16:c4:8d:59:54:06:
                    89:4b:9f:f2:3b:4d:05:66:93:95:4a:4e:ea:ea:25:
                    dd:41:89:c8:0a:80:59:20:cf:ed:05:8a:38:03:a4:
                    3b:50:93:ee:c4:5b:39:81:b7:aa:a4:4b:bc:71:ad:
                    35:5e:56:f3:4c:48:fa:23:c6:24:f3:2f:7f:ad:a9:
                    4c:c3:7a:38:90:32:77:0c:3e:36:69:c0:1e:b3:24:
                    9c:36:61:bf:cc:e2:68:a3:c2:a5:f4:98:c0:8e:f8:
                    22:37:d1:e6:6f:61:ae:9c:1a:64:b7:a0:8e:c7:71:
                    46:0f:e1:74:05:ea:c4:79:2d:2a:06:6f:5e:be:7b:
                    f7:13:0c:27:9b:19:17:3b:ff:37:d0:94:90:33:32:
                    33:f4:7a:f7:93:48:f6:b1:4d:eb:c7:f6:9d:d6:5f:
                    3e:c0:70:a7:a4:84:69:3d:0f:0e:be:da:7f:f7:34:
                    26:be:eb:df:8f:e3:32:5f:8e:bc:c1:fb:41:8f:90:
                    50:89:e0:e2:0b:e0:bb:17:e5:73:70:bc:04:09:cc:
                    a3:d5:d0:13:6c:7f:73:48:a5:4f:22:5a:55:93:89:
                    ec:70:ec:be:f1:fc:f1:71:05:99:18:d5:73:4c:0e:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1D:5F:17:B8:4C:BE:1F:2C:85:6C:AF:37:C3:15:C4:46:25:73:09
            X509v3 Authority Key Identifier:
                keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:43:5a:64:b5:92:ce:bd:a0:4e:5b:ec:4a:82:7e:1d:23:be:
         41:4e:88:08:e3:cc:c1:8f:8a:67:fb:3e:87:7a:52:42:81:df:
         f9:92:a9:9b:db:55:9a:e0:15:e0:87:92:77:96:42:14:52:4f:
         39:fa:39:4c:05:a1:ba:34:3d:10:fc:04:76:f6:7a:37:37:5c:
         1f:c1:31:6d:87:8a:d2:f4:41:4b:bb:9f:b8:4f:a5:37:bf:af:
         c8:d1:a3:19:91:ab:5f:64:60:c3:36:34:1e:65:03:7b:1d:ef:
         cc:8e:66:a6:49:e1:02:1d:fe:36:66:3e:f5:5a:13:d6:92:88:
         e4:0c:a7:5e:c9:5a:dd:b4:01:b4:2e:4e:fc:61:c3:2f:24:14:
         54:b9:43:25:3a:be:f4:a6:b2:c2:6b:ab:54:bf:3e:dc:4b:49:
         5f:c7:00:7e:69:b3:8e:00:06:9d:2e:1a:c2:eb:ac:e6:cf:5c:
         56:c0:1e:7b:83:4a:7b:01:7f:4c:76:f1:bb:d0:09:11:99:8d:
         ab:32:9a:dd:86:b5:32:29:c3:3d:33:14:6e:6f:bb:c8:5a:2e:
         64:56:91:42:00:90:72:74:51:88:15:96:fd:a6:bb:98:8f:ef:
         ca:01:7e:cb:49:61:0f:b8:3b:2b:4c:7b:77:13:d0:e6:a8:38:
         a1:c2:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:12 2026 by rpki-client