This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
File:                     sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json)
Hash identifier:          6eH0QkC4IpqXjJ5dxErKmTTMeviGN9SQwsb9XnXJlYE=
Subject key identifier:   8C:AC:8C:95:BD:05:FF:D5:79:5A:95:C7:C8:9D:D2:D1:DD:F6:9F:8B
Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD
Certificate issuer:       /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
Manifest number:          0185
Signing time:             Sun 25 Jan 2026 02:54:50 +0000
Manifest this update:     Sun 25 Jan 2026 02:54:50 +0000
Manifest next update:     Sun 01 Feb 2026 02:54:50 +0000
Files and hashes:         1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: qjYL03VVZ2IlHwqPrdTf/ZdGxJYEfMWo3eimV08Rslk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl
                          rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD
        Validity
            Not Before: Jan 25 02:54:50 2026 GMT
            Not After : Feb  1 02:54:50 2026 GMT
        Subject: CN=697585fa-c442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:4d:4a:56:af:ae:12:6c:c8:a6:69:71:41:
                    16:9e:fc:48:9b:4f:60:6e:a8:ae:9d:59:fb:aa:5f:
                    19:33:92:ee:06:d8:0e:0c:eb:f5:a9:2c:b5:8b:dd:
                    37:e3:6d:17:da:40:f6:44:a7:e4:7a:82:30:32:a9:
                    a9:06:87:a5:16:57:d6:62:9d:70:1e:89:50:b5:7d:
                    a0:47:56:db:a4:3d:30:fe:35:98:94:d1:cf:d4:8c:
                    fd:96:65:ec:70:c8:5e:17:a9:4a:8d:4e:e1:d2:e8:
                    37:43:94:0b:a9:10:8e:aa:5f:14:8c:50:db:3f:41:
                    30:1b:ea:62:40:61:25:85:1f:25:30:7d:ba:c1:04:
                    f0:3a:cb:cc:0b:4d:56:a0:fe:27:43:92:47:6d:ec:
                    3b:98:25:92:8e:7d:b6:0d:ea:96:b4:f3:38:88:d9:
                    c0:b5:17:03:cf:9e:f5:d2:7a:58:15:3d:1b:ae:56:
                    66:f5:2e:49:83:b6:aa:a5:48:12:f7:18:04:cd:72:
                    ad:6f:a9:e6:c1:34:19:8f:a2:2d:69:af:61:dd:78:
                    28:dc:05:cc:02:36:8c:7e:2f:e4:bf:ce:4c:51:7f:
                    61:f5:71:bd:de:bc:5f:80:2b:e2:95:f0:63:2a:ca:
                    98:2c:0a:8f:1e:f8:77:a4:1d:77:ac:a8:ca:f1:8f:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:8C:95:BD:05:FF:D5:79:5A:95:C7:C8:9D:D2:D1:DD:F6:9F:8B
            X509v3 Authority Key Identifier:
                keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:66:42:12:14:72:d1:91:11:12:b6:5b:60:30:73:2d:2b:
         1a:b2:d4:d2:18:34:f1:f7:2b:9c:ab:5b:3b:f4:36:69:54:09:
         44:05:fb:8c:93:02:2f:10:39:67:e8:65:7f:d5:68:6c:73:41:
         ba:26:bd:be:a6:40:ec:2d:20:52:2d:25:bb:4e:06:70:00:bb:
         3b:77:fb:96:77:4d:29:f8:8b:ff:5b:80:c0:ce:9d:34:d4:19:
         44:57:2c:dc:1f:9a:60:22:32:80:85:36:34:84:94:b3:c9:ec:
         7a:30:d0:a1:5b:b7:be:67:03:64:90:8a:36:f7:b5:17:ba:21:
         2c:95:27:72:29:f4:e4:8a:ee:93:ef:fc:b0:b1:cc:e6:f1:7d:
         94:98:f7:8f:ce:93:97:98:c1:3d:26:eb:36:ba:8a:26:6f:96:
         97:43:af:8b:1b:a8:38:ab:44:15:bf:44:a1:fb:dd:c4:1b:fd:
         ae:27:72:29:f1:e6:b1:7b:9b:02:03:65:7e:f6:9b:0d:a6:00:
         0c:7e:f6:d3:59:87:9d:a7:7f:bc:7d:a2:82:15:a5:06:f9:a0:
         90:02:83:3d:08:2b:b3:ff:78:dd:b0:e4:4c:dc:88:a1:0c:90:
         44:f9:94:58:4f:89:51:4a:62:99:be:84:fe:eb:bb:cd:a8:e0:
         e7:62:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:01 2026 by rpki-client