This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
File:                     o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft (raw, json)
Hash identifier:          Uv8n2tLoh3XkBak9hTW7TfUAOdnVUA1sU7hF/e1lSbk=
Subject key identifier:   47:5C:C8:3D:F4:32:42:0B:52:F5:3B:48:8F:9F:23:61:13:90:57:3E
Authority key identifier: A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
Certificate issuer:       /CN=A914E3B7/serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
Manifest number:          21
Signing time:             Sat 24 Jan 2026 15:02:29 +0000
Manifest this update:     Sat 24 Jan 2026 15:02:29 +0000
Manifest next update:     Sat 31 Jan 2026 15:02:29 +0000
Files and hashes:         1: o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl (hash: AeS5OGNnGQoiq+jbRX/L0ax+3vulFBqtSaNeFtPpa9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl
                          rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3B7, serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
        Validity
            Not Before: Jan 24 15:02:29 2026 GMT
            Not After : Jan 31 15:02:29 2026 GMT
        Subject: CN=6974df05-27c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:f7:ef:42:35:0a:02:4f:ff:6e:e7:21:dc:
                    97:03:31:c8:d3:7b:62:69:c5:ca:d2:eb:ff:fd:2a:
                    fe:d0:cb:17:87:3f:23:26:e3:64:6c:9b:c4:82:94:
                    93:f4:c4:6a:14:23:1e:8a:bf:28:c1:41:fb:47:c6:
                    cd:5e:ee:29:97:4b:c8:10:ef:3c:f4:d2:2f:db:da:
                    a5:6b:59:d1:b5:d0:0d:33:4b:8a:3a:eb:5c:11:d2:
                    04:72:a1:8b:d8:5f:32:fc:9f:62:b4:41:13:09:7e:
                    b6:ca:6a:8d:f2:bb:95:20:db:aa:c4:af:b6:82:2b:
                    30:54:fb:7b:de:06:d1:53:50:59:77:50:47:20:5d:
                    24:c2:c7:5c:fa:cf:c7:b5:25:f4:b9:dd:40:ec:72:
                    69:58:50:d0:6b:2f:73:69:44:af:e6:56:32:6c:a9:
                    d0:54:5f:9f:ec:03:80:c8:e2:c8:83:58:25:08:25:
                    34:92:99:5d:d1:c5:3a:12:6c:0a:d0:85:92:90:58:
                    7b:96:cc:58:b0:b6:06:64:f4:33:f2:97:bf:0c:ad:
                    dc:06:6e:94:43:f1:8c:4e:5d:d8:7f:b5:93:fc:ab:
                    48:60:32:3a:e3:88:89:da:8c:63:1c:e0:16:b5:ad:
                    8a:67:28:65:2b:e3:2e:5a:03:77:f6:15:70:cb:d5:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:C8:3D:F4:32:42:0B:52:F5:3B:48:8F:9F:23:61:13:90:57:3E
            X509v3 Authority Key Identifier:
                keyid:A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:69:21:b5:d7:f8:14:e3:b1:16:87:f5:96:e6:dd:30:01:
         9f:6d:6f:87:34:74:7e:d2:df:aa:b2:dc:96:55:e2:85:94:7f:
         ca:45:a0:34:cd:97:2d:7d:d5:3c:f8:66:83:51:b1:1b:a2:56:
         20:d0:b1:e6:f6:65:6b:5a:a8:ed:cd:37:f3:b4:85:c2:cd:60:
         5a:af:fb:6b:2f:1c:30:2d:da:cf:fa:da:63:56:f1:b6:39:6b:
         dd:65:37:87:14:ca:d6:0d:94:26:82:b2:fd:74:c9:06:61:ab:
         cf:e9:ca:05:f2:ea:14:97:f8:e2:38:c6:93:fc:74:e2:fa:37:
         52:72:da:e5:53:c6:79:71:22:ed:51:20:4d:5e:50:cd:a7:14:
         6d:4a:44:6f:76:f2:c7:a7:d7:a9:18:60:3a:b0:86:7c:92:a7:
         3f:13:75:20:74:47:86:b0:4a:4d:6c:20:9c:5d:81:54:f8:44:
         eb:d3:83:c1:ac:7c:48:95:87:1b:a0:c3:6e:21:cd:3b:d6:c7:
         7e:91:2d:c4:c4:ba:ad:7a:6d:7b:71:b3:ae:90:fb:84:81:89:
         fb:2a:3e:25:e1:37:65:e0:5b:10:f8:f2:cb:3b:75:1a:c9:08:
         b8:1e:8c:b4:35:46:bc:b0:f6:7c:da:8e:d5:4e:17:94:a9:57:
         85:97:95:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:35 2026 by rpki-client