This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
File:                     fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json)
Hash identifier:          gp58y8NfQWOH0gt1A9WEra/cxQkfg7UUNCQy89yZ8cA=
Subject key identifier:   AA:9F:31:09:7A:DB:B4:1B:B5:29:0E:E2:27:F5:11:E2:D4:0C:35:55
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0CCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
Manifest number:          0CC2
Signing time:             Sat 24 Jan 2026 17:52:27 +0000
Manifest this update:     Sat 24 Jan 2026 17:52:27 +0000
Manifest next update:     Sat 31 Jan 2026 17:52:27 +0000
Files and hashes:         1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: /hkBcnRzNFBNL+CZ93YdXlOVEaaxNQVvhYeh+bTcreg=)
                          2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: QKvT/NXLjM1zgrExrepY0NIOpuLuOZvI/cmhC3FJr94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3274 (0xcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: Jan 24 17:52:27 2026 GMT
            Not After : Jan 31 17:52:27 2026 GMT
        Subject: CN=697506db-08ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:57:aa:48:c4:19:d2:80:81:d5:af:24:f4:d7:
                    05:38:9a:de:87:2e:fd:be:a5:03:a0:2e:3c:8f:09:
                    3f:5e:9b:4a:ae:18:c5:6f:3a:84:aa:3a:4e:6d:8a:
                    fc:fb:5e:3f:af:e3:db:54:19:43:fa:3c:91:7a:29:
                    86:59:6a:98:5b:89:26:ea:e7:21:93:a1:de:11:b6:
                    1c:e3:bd:80:c5:0e:27:fb:bc:55:21:2a:53:ba:22:
                    54:e3:c0:8c:ae:f0:f8:13:33:ff:69:11:b6:53:e3:
                    92:42:af:b5:17:14:83:9a:ef:f2:32:17:7d:e5:11:
                    44:58:83:f5:81:36:0c:35:f9:b4:c8:d4:0a:f4:07:
                    24:c3:dc:e8:e5:4f:7a:a8:ed:c7:51:b1:c3:3d:90:
                    98:f4:b1:68:bc:44:9e:c4:df:1b:b6:3c:ea:12:2b:
                    c9:65:bf:1b:10:54:25:b1:38:c5:bf:cc:aa:95:06:
                    8d:ca:23:00:6d:14:e3:52:ea:df:34:06:a1:c7:bb:
                    65:cb:43:98:ba:b9:df:ee:75:b3:4b:f6:c5:3b:d1:
                    07:c2:bc:35:2f:db:bb:1e:12:93:70:5d:fe:43:40:
                    4d:62:35:98:dc:c2:9a:d7:ad:af:74:5c:38:7f:8c:
                    ec:0c:12:0d:64:78:cd:8c:6a:80:08:55:00:7e:81:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:31:09:7A:DB:B4:1B:B5:29:0E:E2:27:F5:11:E2:D4:0C:35:55
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:fd:85:a3:1e:98:42:73:41:ad:67:47:54:59:25:ed:be:
         44:32:9e:38:8e:00:52:8e:79:eb:72:4f:68:ff:42:17:32:ba:
         d3:f5:72:65:31:de:5c:fa:97:ba:83:81:df:e7:3e:00:e5:7a:
         76:4c:7b:f0:2d:98:c6:0a:d7:2e:2c:20:49:e2:d4:14:9c:03:
         6f:c4:3e:7e:f6:be:06:62:72:f4:eb:4b:79:b2:d6:dd:72:e8:
         1f:13:8b:82:57:5b:68:c4:a1:01:99:57:4a:39:21:37:4b:29:
         a7:53:bb:80:a6:ce:9e:f3:d7:59:c6:e3:a6:32:f3:3c:33:7c:
         b9:26:c0:f5:29:1a:c4:74:fc:37:68:27:45:33:b9:4d:d6:94:
         91:95:9b:a5:98:6a:7c:fa:26:66:7a:3f:e7:f5:18:96:fb:e9:
         f6:56:5e:a9:4f:48:c3:09:43:9e:5a:b4:3a:3b:45:08:1b:0a:
         5c:09:95:b6:63:c8:96:51:44:f1:e7:5c:81:5d:cf:0c:df:64:
         b8:52:c4:1a:b5:d0:fe:55:f7:6d:1c:dc:ae:48:38:44:73:67:
         67:aa:9b:50:f1:55:38:7f:c5:46:aa:ba:86:44:8f:8d:7b:c4:
         77:35:c1:98:19:69:25:ea:6e:3e:28:3b:55:cc:54:f8:ae:ba:
         f2:b5:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:47 2026 by rpki-client