This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          F33AqGj5L7prHyps2ugMrDUAecnVKJVgIOi8RwcmMZ4=
Subject key identifier:   7E:7A:14:99:58:81:78:F5:E7:86:2A:2D:86:0C:EB:33:99:D4:6E:DD
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0AD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0AC7
Signing time:             Sat 24 Jan 2026 18:58:41 +0000
Manifest this update:     Sat 24 Jan 2026 18:58:40 +0000
Manifest next update:     Sat 31 Jan 2026 18:58:40 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: Y8UuNjv4zQfBo/dR56sYJn63escW7FM4eUi/8odBpgw=)
                          2: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: lqCVN/RdBlCCTJpxacPdT4SGQm9YuvVTkcWZpCdTrhc=)
                          3: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: R4xHtrMxN1c5iDWMnVRL8nAiEpy4Y4o7VWQJMa2QgSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Jan 24 18:58:40 2026 GMT
            Not After : Jan 31 18:58:40 2026 GMT
        Subject: CN=69751660-dd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:11:1f:6a:0b:b6:29:f9:0e:22:55:a0:89:e2:
                    0a:ea:d5:74:71:47:03:99:b1:5a:a7:23:c7:95:8d:
                    8c:ee:11:ce:8f:3d:41:eb:00:ee:ad:21:6c:c7:6e:
                    84:d6:2e:81:b4:0e:05:7f:7b:9e:a0:3d:3d:f8:2b:
                    af:14:3a:18:76:cb:a3:be:47:5d:2d:0e:c0:5e:25:
                    2c:65:1f:14:24:7d:df:d7:e6:41:79:02:73:49:71:
                    90:63:65:01:97:77:26:c4:73:2a:ee:c1:ea:64:c0:
                    56:2f:72:6c:3f:f3:45:02:32:0c:61:66:0e:9c:00:
                    d8:6d:aa:5c:cf:cf:68:98:f8:67:9e:c7:cd:2f:05:
                    c4:41:5d:3e:79:78:bd:8a:86:d3:c3:0c:35:1f:45:
                    4e:78:93:d1:20:32:c1:0c:ef:31:3b:7d:83:dd:67:
                    fd:0b:48:f8:40:c8:d7:f2:18:37:25:14:f0:96:33:
                    2e:db:52:1b:41:af:91:f6:db:30:b0:ee:3d:8e:fc:
                    b9:0d:9f:0d:36:29:33:b0:ca:fe:0d:74:76:f2:9c:
                    71:9b:39:ef:46:10:2e:f7:77:91:c2:50:51:05:fd:
                    44:ad:5a:7e:43:d6:5b:bf:2e:b6:3b:89:78:76:04:
                    fd:e8:85:5d:67:43:84:02:a8:10:08:6b:69:48:1f:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:14:99:58:81:78:F5:E7:86:2A:2D:86:0C:EB:33:99:D4:6E:DD
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:c8:0d:02:e5:07:29:15:83:cb:3b:bf:7b:ae:17:4a:ed:
         69:83:ab:82:e0:42:31:7a:9c:cd:1b:ef:43:f5:4c:5e:aa:af:
         ed:39:ac:c6:b0:b7:74:a2:83:35:ea:c7:2d:ae:0c:2a:9e:18:
         b0:b0:66:1c:a6:9b:cb:64:94:4e:95:fc:54:4a:bd:ac:2e:8b:
         16:8a:6b:28:f4:b6:7d:ab:6a:41:d9:cf:0e:68:0e:4b:05:02:
         68:3d:03:3e:ca:28:e6:98:9b:8c:32:d2:4a:29:b1:82:ac:1e:
         04:7a:3d:01:f0:90:5d:26:4c:e1:45:7d:4c:59:7d:6b:6b:23:
         e6:08:d5:d9:56:29:9e:32:6d:c4:f1:76:4b:82:14:ed:ac:b2:
         2d:62:a1:dd:01:4b:86:af:6d:31:89:51:65:17:e4:5f:31:e4:
         a5:84:fc:d8:ee:cd:54:5e:0c:4d:b3:a1:c5:72:4b:4b:79:4b:
         8d:89:e1:91:c9:66:fd:3b:d1:78:8d:a3:5e:49:8d:03:3f:c5:
         e7:5c:6d:07:e7:36:38:f2:78:46:fa:e7:4f:26:c0:b6:fa:c6:
         b9:b5:2d:ab:9b:34:38:c5:d1:af:d5:a6:92:b3:a1:48:9a:bf:
         ec:85:12:f7:66:75:0a:f7:1b:10:38:98:0f:d8:14:01:83:8c:
         ae:0a:f8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:24 2026 by rpki-client