This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File:                     1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier:          kh/jy4LfV2/gJzeeh1nVX27iMz11UHnfqDEILOtLDvc=
Subject key identifier:   6B:41:B8:D7:F6:F5:0E:E7:53:60:B0:14:C0:56:07:83:4B:75:A5:3C
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer:       /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial:       0B40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number:          0B39
Signing time:             Sat 24 Jan 2026 18:46:00 +0000
Manifest this update:     Sat 24 Jan 2026 18:46:00 +0000
Manifest next update:     Sat 31 Jan 2026 18:46:00 +0000
Files and hashes:         1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: AzZP4EpAOVyD7taJxXhrdAcSWge9HIujKeD0Xo+Jy+c=)
                          2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: q02Hd4XFE+H9p8qEMOu2AbjA5nPs5WOETsJPUT9HbXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
                          rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2880 (0xb40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
        Validity
            Not Before: Jan 24 18:46:00 2026 GMT
            Not After : Jan 31 18:46:00 2026 GMT
        Subject: CN=69751368-b218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:a5:03:d6:31:f8:82:e0:fa:da:af:2c:9d:
                    dc:11:8c:b0:08:2c:39:47:d7:9d:f8:20:ff:a5:b1:
                    a6:6e:99:61:ce:25:ed:f0:d3:18:c3:7d:8d:61:87:
                    19:c4:d1:9b:07:63:d5:af:9e:dd:2e:8c:81:70:53:
                    13:9d:03:8f:52:74:18:49:dd:f4:80:fd:ce:99:5e:
                    19:53:82:f3:fe:4a:e6:0b:e8:e4:c7:39:c0:b3:b1:
                    da:f3:8b:35:e0:4d:2c:b2:ce:4e:86:f5:55:bc:9d:
                    be:21:5d:18:33:1d:00:86:af:71:ac:9f:c5:ff:46:
                    f6:a8:22:58:ef:d2:39:89:de:cd:0c:74:3c:23:4d:
                    29:a5:58:1c:c0:45:33:60:44:1a:4c:a4:97:92:b1:
                    33:6e:d1:af:e0:d9:83:f6:18:5f:bf:fa:b1:43:f5:
                    f5:6a:34:67:02:89:b8:53:36:93:c2:c8:0f:55:26:
                    5f:59:05:f1:77:5f:fb:be:d3:0e:7f:ea:7b:b0:5d:
                    9b:9a:10:fe:a0:b3:33:93:6f:cd:e2:3a:f8:b6:e3:
                    30:ca:7d:de:7a:d8:db:d4:8f:b7:aa:f1:a9:fb:29:
                    20:a0:3a:2a:5b:fc:77:17:8a:29:d4:ff:6d:f1:b1:
                    d6:87:3e:2b:e5:17:66:df:29:cf:a1:8e:b5:19:fc:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:41:B8:D7:F6:F5:0E:E7:53:60:B0:14:C0:56:07:83:4B:75:A5:3C
            X509v3 Authority Key Identifier:
                keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:4b:c6:7f:c2:75:a7:5b:d4:2a:23:69:bd:33:d4:60:4c:
         07:97:d6:f6:9b:8a:8c:c0:a6:9e:43:55:41:74:13:69:93:79:
         3d:0e:b6:48:9d:55:a5:ef:47:a4:24:7b:47:2a:29:f4:a8:6d:
         cd:64:01:41:bf:c6:11:3f:ad:5d:fa:61:3d:c2:2e:61:f0:3f:
         98:82:9d:d4:f7:23:da:ef:2f:39:71:ae:45:34:41:50:10:f9:
         af:6b:19:3e:76:10:08:57:c8:bd:7d:18:ee:f0:e6:fe:c2:0d:
         14:fc:37:c4:ee:56:d7:29:80:54:cb:83:af:98:10:96:c8:d8:
         81:5e:d9:f1:b8:37:92:38:2d:b8:96:0f:55:32:31:2c:79:73:
         29:7e:cc:58:70:4a:c5:34:95:63:c9:eb:1a:45:be:ce:93:b2:
         c3:0a:05:42:69:19:7b:95:eb:87:26:cb:1b:24:79:cc:07:97:
         80:ff:ef:4d:a7:ec:9f:8a:b5:c5:f1:4c:6e:48:66:81:aa:b6:
         9f:b8:0b:cb:0f:05:b0:df:b5:4e:0d:be:9f:5f:8b:b3:8d:20:
         28:dd:bf:42:d6:27:8f:53:8c:d2:18:f1:47:fa:56:f1:be:d5:
         74:6e:4a:84:34:86:ef:5b:83:5e:d6:0b:2d:fe:f1:a9:39:58:
         68:50:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:03 2026 by rpki-client