This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File:                     CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier:          hkCZHmtjjO9XcUpV/vsF7clROL8PCgF0DxfVTAPM8b8=
Subject key identifier:   ED:AE:07:9D:DD:23:C2:66:8F:DB:23:59:7D:63:13:29:D2:48:74:64
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer:       /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial:       08D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number:          08CE
Signing time:             Sat 24 Jan 2026 19:49:53 +0000
Manifest this update:     Sat 24 Jan 2026 19:49:52 +0000
Manifest next update:     Sat 31 Jan 2026 19:49:52 +0000
Files and hashes:         1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: 8WVzn1RG25ESF4vV0QuDr4vrxPKNH85vQlWZunr9Yro=)
                          2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: +DtZkxjJJ+EZoGvTSPZPjG2CpgddUnM6RS0QhmWQQPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
                          rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
        Validity
            Not Before: Jan 24 19:49:52 2026 GMT
            Not After : Jan 31 19:49:52 2026 GMT
        Subject: CN=69752260-dbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e6:22:5f:98:09:31:c6:fb:04:d3:8a:4c:60:
                    67:d9:14:ee:7f:55:68:03:94:95:97:20:c4:14:66:
                    44:48:29:93:08:1c:24:b9:30:08:44:4b:88:0e:fc:
                    96:82:57:f0:ae:15:58:4a:01:ac:6c:a5:62:0b:c2:
                    93:11:a1:e4:ce:40:25:8d:39:58:64:f4:23:d0:b4:
                    58:78:c0:04:0e:15:ea:cf:43:8c:39:e9:2e:45:98:
                    df:54:12:63:02:c1:36:d7:62:d8:66:ea:0a:47:2f:
                    07:ab:f7:ee:ab:b7:1b:38:da:d3:c6:51:17:e0:82:
                    3f:32:9e:42:cc:80:c6:53:b0:6b:f5:19:42:bb:b2:
                    2d:30:93:75:f5:e5:19:70:56:40:60:48:d1:92:3e:
                    6c:c2:af:4a:79:e9:17:0b:74:57:5a:7e:c6:7d:4e:
                    55:1b:e0:db:00:63:24:f2:30:17:65:c8:99:34:96:
                    bd:6f:5e:ad:05:5a:a5:2c:ff:b8:b8:21:c0:7f:71:
                    fa:58:e2:5e:ff:66:5e:ed:89:0a:05:d3:82:ad:f0:
                    e2:b0:3f:7a:9c:bd:c6:c2:ea:1c:3a:b4:eb:c5:5c:
                    6e:df:cc:61:2d:0c:a9:5c:63:08:fa:b5:3a:1c:d3:
                    a5:94:91:da:7f:2f:3e:6b:d1:be:75:08:e2:7f:55:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AE:07:9D:DD:23:C2:66:8F:DB:23:59:7D:63:13:29:D2:48:74:64
            X509v3 Authority Key Identifier:
                keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:aa:97:05:50:00:ea:13:72:39:11:90:d0:f3:58:bc:f8:3a:
         1b:c4:ce:ba:2f:bb:8c:b4:06:5f:59:52:5c:06:40:40:05:d4:
         88:fc:0c:a0:5c:91:90:d1:76:36:2d:78:e9:94:32:5d:e3:a1:
         1f:35:5f:7f:7e:a2:d9:29:86:e2:69:9c:1a:ce:dc:c3:37:f0:
         43:a4:b8:20:c1:89:94:4e:9d:c5:a5:8a:71:2d:99:25:56:d8:
         21:d8:90:ac:38:fc:eb:be:f6:78:91:8f:60:74:cc:e1:26:bf:
         d4:c4:bb:82:35:ba:ee:d3:44:31:d7:66:87:bb:27:3c:9f:d1:
         03:7a:86:e6:48:fd:70:ff:05:96:75:58:a4:10:54:12:5f:44:
         26:a2:ec:ac:3a:04:0d:a5:7e:b8:ce:93:0b:bc:18:c5:4a:3e:
         d3:89:af:bd:1f:ed:38:9f:42:ea:50:c8:34:41:80:e2:d2:23:
         44:2b:7d:58:0c:28:a4:5b:4d:35:aa:7f:d2:87:67:41:78:15:
         63:6b:cc:af:45:48:ae:dd:ed:ba:ba:4f:6d:f1:8b:ce:22:ea:
         02:5b:fd:41:f9:1b:1e:3d:6f:24:9a:a4:c2:59:3c:4d:35:4f:
         bb:ae:aa:2a:88:42:0e:08:86:9d:11:66:02:7a:53:07:7e:f6:
         1f:71:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:32 2026 by rpki-client