This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
File:                     DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft (raw, json)
Hash identifier:          A4w/qZUyMP+FG5p1Tf4hdk7HQhlUxiqFseAXALWrAOU=
Subject key identifier:   96:F6:41:CB:AB:BA:29:10:18:D0:FE:17:6D:76:4C:66:79:82:D1:04
Authority key identifier: 0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6
Certificate issuer:       /CN=A9157ADC/serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
Manifest number:          02A4
Signing time:             Sun 25 Jan 2026 00:39:52 +0000
Manifest this update:     Sun 25 Jan 2026 00:39:51 +0000
Manifest next update:     Sun 01 Feb 2026 00:39:51 +0000
Files and hashes:         1: DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl (hash: 6eCaJ/vsh4N8LSJc4mtyL513roldS658yUxNUCWxKQY=)
                          2: 88FCD2C62DBA11ED94AFED62C4F9AE02.roa (hash: 0JYQSMYaFvaLhjpHDbKJtAOfDwR2Txci9jlqVoFvh1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157ADC, serialNumber=0C4C17229C6AB67F543FEC9C4D03E5FEE4ED2FF6
        Validity
            Not Before: Jan 25 00:39:51 2026 GMT
            Not After : Feb  1 00:39:51 2026 GMT
        Subject: CN=69756658-cb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:c9:90:85:54:40:1c:30:ee:2e:93:32:72:
                    8a:b1:67:9a:97:cb:1f:b9:4a:96:75:7b:35:54:f1:
                    04:00:45:65:65:21:b4:e4:c2:20:d3:e7:ed:66:d5:
                    4d:7b:43:a0:60:3a:44:b8:c9:50:58:56:3b:56:b1:
                    21:8f:b5:09:9c:1a:97:20:8a:0c:b0:a8:4e:11:e7:
                    c6:ad:e7:a7:23:7d:7f:e9:6d:09:78:05:fe:db:93:
                    cd:7d:a7:69:28:0d:2c:1d:4a:de:98:cf:0f:63:90:
                    45:fd:66:11:5b:76:50:f6:15:e6:46:49:f4:9e:7f:
                    0d:d7:b5:8a:7b:8b:dc:f3:05:fe:fd:53:d5:0a:bc:
                    71:71:5d:23:c1:4e:b1:67:11:5f:aa:a0:00:26:9d:
                    af:98:e1:69:07:45:0d:30:a7:6f:ba:db:72:50:b1:
                    07:8f:15:c4:b6:a3:f9:b1:3a:34:e9:71:c9:de:93:
                    96:d8:13:74:9d:34:d8:3f:0e:6f:10:4d:68:85:54:
                    09:5a:cb:4e:30:f9:33:b4:18:88:d8:98:8c:c8:8b:
                    70:74:e9:71:64:76:c0:54:aa:bf:45:65:1e:07:5b:
                    85:5e:39:51:33:d3:0f:04:04:e6:6e:fd:8a:25:21:
                    ce:0a:7c:16:c5:8f:93:8a:44:41:0b:2f:12:98:2c:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:41:CB:AB:BA:29:10:18:D0:FE:17:6D:76:4C:66:79:82:D1:04
            X509v3 Authority Key Identifier:
                keyid:0C:4C:17:22:9C:6A:B6:7F:54:3F:EC:9C:4D:03:E5:FE:E4:ED:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157ADC/F57589E22DB611ED82159B5EC4F9AE02/DEwXIpxqtn9UP-ycTQPl_uTtL_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:54:3b:da:5b:88:bd:a4:9e:f6:de:bb:fb:83:80:d4:60:
         d2:74:84:9f:0e:d3:5e:10:1d:2d:f0:c0:75:2c:9c:bc:78:08:
         30:f1:7d:24:32:9d:46:a2:a9:d1:a5:77:a6:96:9b:02:c6:78:
         7d:ea:b9:35:37:4d:25:8f:d1:23:ab:63:03:dc:29:6e:10:00:
         6b:bc:94:c5:40:d6:f3:84:30:2f:98:e5:e3:0a:c8:5e:bb:e6:
         4e:63:35:6f:69:41:27:8f:0c:55:7f:4d:29:84:e1:d7:04:31:
         e0:60:d6:fb:3e:85:f7:ab:72:58:0a:91:d5:ed:9a:a3:0a:bc:
         fb:5b:73:5e:57:f3:68:d4:01:b2:43:f1:bf:13:01:6a:09:c9:
         08:22:45:1e:93:b4:74:af:73:77:41:ae:4c:e5:88:4a:5c:f4:
         c8:ce:85:74:67:05:1d:4e:9f:77:e0:c0:b6:80:66:f9:59:95:
         72:d9:6e:d8:f2:35:14:a6:1e:44:b7:86:58:6e:93:cb:ea:44:
         75:83:bc:0b:00:fd:16:0d:5e:69:b5:be:3e:9e:4a:0a:c8:ba:
         d0:c4:13:2c:83:01:a6:38:0b:71:21:8f:0b:c9:d7:d4:88:00:
         ac:9d:2b:37:96:94:0a:77:a0:41:39:55:68:e6:25:42:f2:23:
         08:97:b0:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdBREMxMTAvBgNVBAUTKDBDNEMxNzIyOUM2QUI2N0Y1NDNGRUM5QzREMDNFNUZF
RTRFRDJGRjYwHhcNMjYwMTI1MDAzOTUxWhcNMjYwMjAxMDAzOTUxWjAYMRYwFAYD
VQQDDA02OTc1NjY1OC1jYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxXJkIVUQBww7i6TMnKKsWeal8sfuUqWdXs1VPEEAEVlZSG05MIg0+ftZtVN
e0OgYDpEuMlQWFY7VrEhj7UJnBqXIIoMsKhOEefGreenI31/6W0JeAX+25PNfadp
KA0sHUremM8PY5BF/WYRW3ZQ9hXmRkn0nn8N17WKe4vc8wX+/VPVCrxxcV0jwU6x
ZxFfqqAAJp2vmOFpB0UNMKdvuttyULEHjxXEtqP5sTo06XHJ3pOW2BN0nTTYPw5v
EE1ohVQJWstOMPkztBiI2JiMyItwdOlxZHbAVKq/RWUeB1uFXjlRM9MPBATmbv2K
JSHOCnwWxY+TikRBCy8SmCyD1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb2Qcur
uikQGND+F212TGZ5gtEEMB8GA1UdIwQYMBaAFAxMFyKcarZ/VD/snE0D5f7k7S/2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0FEQy9GNTc1ODlFMjJE
QjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRuOVVQLXljVFFQbF91VHRM
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RFd1hJcHhxdG45VVAteWNUUVBsX3VUdExfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0FEQy9GNTc1ODlFMjJEQjYxMUVEODIxNTlCNUVDNEY5QUUwMi9ERXdYSXB4cXRu
OVVQLXljVFFQbF91VHRMX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfG1Q72luIvaSe9t67+4OA1GDSdISfDtNeEB0t8MB1LJy8eAgw8X0k
Mp1GoqnRpXemlpsCxnh96rk1N00lj9Ejq2MD3CluEABrvJTFQNbzhDAvmOXjCshe
u+ZOYzVvaUEnjwxVf00phOHXBDHgYNb7PoX3q3JYCpHV7ZqjCrz7W3NeV/No1AGy
Q/G/EwFqCckIIkUek7R0r3N3Qa5M5YhKXPTIzoV0ZwUdTp934MC2gGb5WZVy2W7Y
8jUUph5Et4ZYbpPL6kR1g7wLAP0WDV5ptb4+nkoKyLrQxBMsgwGmOAtxIY8LydfU
iACsnSs3lpQKd6BBOVVo5iVC8iMIl7Aw
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:58 2026 by rpki-client