This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
File:                     2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json)
Hash identifier:          r+pwn4T/CAaV7JyiW20GgigymX5FQr2yeKBE6R7QD4E=
Subject key identifier:   70:D8:86:3C:71:B8:ED:08:5E:52:F4:08:10:A3:5E:6B:FC:DE:A9:21
Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
Certificate issuer:       /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
Manifest number:          BD
Signing time:             Sun 25 Jan 2026 05:09:51 +0000
Manifest this update:     Sun 25 Jan 2026 05:09:51 +0000
Manifest next update:     Sun 01 Feb 2026 05:09:51 +0000
Files and hashes:         1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: 4UUyiTgws8Q4p02RkNkB8myGx+Lz0G3e6p4RFi0oErE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
                          rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
        Validity
            Not Before: Jan 25 05:09:51 2026 GMT
            Not After : Feb  1 05:09:51 2026 GMT
        Subject: CN=6975a59f-67d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:57:45:47:57:b6:24:66:85:d8:e0:35:f5:
                    39:bc:e6:04:5b:99:a0:ff:ee:16:a9:66:f7:55:34:
                    77:d8:22:18:a2:04:a1:92:75:65:da:5e:0a:54:55:
                    5c:a5:36:15:44:29:56:38:94:dd:ea:14:bc:15:dc:
                    ca:06:de:b8:74:c3:24:82:ef:b0:63:0b:49:00:59:
                    69:16:6d:6b:27:68:a5:c2:fb:43:47:e5:8f:1a:05:
                    fa:8a:8f:9e:f8:41:9c:4e:26:7b:ab:2f:ec:c2:98:
                    ee:7b:63:6c:47:43:df:08:4f:cb:cc:e8:e0:65:92:
                    e1:49:f4:96:67:e5:9d:35:ad:dd:91:69:63:3d:75:
                    cb:75:ea:7c:13:6d:8d:31:75:3f:32:b5:21:1f:c2:
                    55:ca:f4:e3:df:25:0f:d2:50:73:ed:4c:c7:11:ec:
                    70:08:50:50:74:56:de:12:61:6b:15:28:04:d5:9c:
                    87:a0:1a:f7:b6:5c:7e:62:99:b8:d6:99:75:69:f6:
                    0e:7f:fd:6b:07:77:0d:0f:29:ce:7f:ce:d2:a0:fd:
                    b4:11:e1:da:cc:ba:9e:bd:e3:69:94:8e:09:a1:5f:
                    e9:a3:61:ff:2b:9d:5f:24:c1:38:96:f0:0d:7e:3a:
                    5d:e3:2e:8c:7b:bf:ad:a4:5e:60:51:77:e6:e1:67:
                    6b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D8:86:3C:71:B8:ED:08:5E:52:F4:08:10:A3:5E:6B:FC:DE:A9:21
            X509v3 Authority Key Identifier:
                keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:11:73:9b:c7:86:48:dc:3e:82:88:d8:4a:2a:73:40:fe:45:
         40:db:cb:02:bc:90:75:23:b2:cc:9c:d7:76:0c:95:e0:2c:c8:
         a4:06:d3:68:d0:d4:b3:68:07:7b:fb:fc:be:c8:fa:0f:9c:d2:
         8b:2a:42:a9:0b:f5:ac:45:cb:96:ec:55:a9:a5:68:cd:f3:f8:
         3e:1f:b6:b4:68:ac:b5:d1:ab:a4:c5:82:d1:2d:5c:9e:18:f1:
         83:ff:75:21:43:9c:9a:d1:30:c7:82:c4:82:3f:11:bb:87:61:
         51:a9:a6:30:4e:99:64:d7:91:e0:c0:2b:58:cf:c3:63:c2:6b:
         b8:c1:4c:13:05:c4:44:85:00:d2:ac:c4:fc:54:56:59:86:a1:
         19:16:bc:90:0b:30:ba:93:7a:4f:ea:1f:d4:2e:19:ce:8e:88:
         f0:70:dc:3d:e1:03:0b:46:19:3a:9d:86:c7:8e:71:de:37:2b:
         24:c8:36:c0:ac:14:74:69:29:b8:5c:d5:f9:a5:2b:f6:43:bc:
         d5:88:ed:3d:55:a5:3e:26:79:8b:ae:e9:58:98:51:cf:97:9d:
         ae:ad:e8:df:a0:13:98:ea:d6:43:8e:98:ed:fe:62:c2:65:b3:
         ca:35:96:f6:56:c5:78:1d:fc:c3:fe:5d:56:8b:00:06:48:0e:
         2c:e8:97:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY4NzAxMTAvBgNVBAUTKEQ4M0JEQzRGQUNDRDlEQjdBMEJDNDZCNDI0NEVBMzEw
NzA2MDRCOTcwHhcNMjYwMTI1MDUwOTUxWhcNMjYwMjAxMDUwOTUxWjAYMRYwFAYD
VQQDDA02OTc1YTU5Zi02N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNhXRUdXtiRmhdjgNfU5vOYEW5mg/+4WqWb3VTR32CIYogShknVl2l4KVFVc
pTYVRClWOJTd6hS8FdzKBt64dMMkgu+wYwtJAFlpFm1rJ2ilwvtDR+WPGgX6io+e
+EGcTiZ7qy/swpjue2NsR0PfCE/LzOjgZZLhSfSWZ+WdNa3dkWljPXXLdep8E22N
MXU/MrUhH8JVyvTj3yUP0lBz7UzHEexwCFBQdFbeEmFrFSgE1ZyHoBr3tlx+Ypm4
1pl1afYOf/1rB3cNDynOf87SoP20EeHazLqeveNplI4JoV/po2H/K51fJME4lvAN
fjpd4y6Me7+tpF5gUXfm4WdrbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDYhjxx
uO0IXlL0CBCjXmv83qkhMB8GA1UdIwQYMBaAFNg73E+szZ23oLxGtCROoxBwYEuX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Rjg3MC9EMkUyNEM5OEQ3
RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi8yRHZjVDZ6Tm5iZWd2RWEwSkU2akVIQmdT
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJEdmNUNnpObmJlZ3ZFYTBKRTZqRUhCZ1M1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Rjg3MC9EMkUyNEM5OEQ3RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi8yRHZjVDZ6Tm5i
ZWd2RWEwSkU2akVIQmdTNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVEXObx4ZI3D6CiNhKKnNA/kVA28sCvJB1I7LMnNd2DJXgLMikBtNo
0NSzaAd7+/y+yPoPnNKLKkKpC/WsRcuW7FWppWjN8/g+H7a0aKy10aukxYLRLVye
GPGD/3UhQ5ya0TDHgsSCPxG7h2FRqaYwTplk15HgwCtYz8Njwmu4wUwTBcREhQDS
rMT8VFZZhqEZFryQCzC6k3pP6h/ULhnOjojwcNw94QMLRhk6nYbHjnHeNyskyDbA
rBR0aSm4XNX5pSv2Q7zViO09VaU+JnmLrulYmFHPl52urejfoBOY6tZDjpjt/mLC
ZbPKNZb2VsV4HfzD/l1WiwAGSA4s6Jd3
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:27:22 2026 by rpki-client