This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File:                     SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier:          w92uYVRS7RWqpDWr0OUxHNzJM64IGwcAOUHOyo+cqVI=
Subject key identifier:   14:D8:7E:25:0D:A7:E0:AD:C2:3D:4B:6B:B7:77:AD:84:87:03:1A:F1
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer:       /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number:          018C
Signing time:             Fri 23 Jan 2026 02:46:38 +0000
Manifest this update:     Fri 23 Jan 2026 02:46:38 +0000
Manifest next update:     Fri 30 Jan 2026 02:46:38 +0000
Files and hashes:         1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: BRfk4cyuY/uePs1g8b8HyTbfxZGpEd9ccnTMzHWwpoQ=)
                          2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: gSbyiinPG5gYtmxzDkLXlJaS8fMB7qq24fnXUL5nPLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
                          rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 02:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659
        Validity
            Not Before: Jan 23 02:46:38 2026 GMT
            Not After : Jan 30 02:46:38 2026 GMT
        Subject: CN=6972e10e-cc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:ee:e6:c3:2b:e1:69:19:b4:79:b0:3c:d4:
                    8d:0b:03:ec:b7:75:27:66:8a:f4:a2:9e:55:82:ce:
                    bf:8a:48:b9:24:4c:54:b5:64:fc:54:c0:84:fd:9b:
                    b2:66:e2:65:b1:38:7b:74:7a:67:c4:03:a9:84:4f:
                    c2:08:cb:0c:3b:31:df:f2:89:07:22:05:ae:c0:23:
                    ed:83:87:5c:92:2b:2e:4c:c5:1c:40:b4:2a:1a:37:
                    5a:6d:39:c8:c0:fa:4d:8f:db:83:89:ab:62:20:51:
                    e6:85:3d:27:22:3c:5f:fb:88:8b:07:3a:67:23:5e:
                    b5:ff:43:c3:67:9a:3f:ff:e5:65:3a:40:68:b0:f8:
                    dc:62:a4:0d:1e:c1:5c:60:7a:49:c8:e4:fe:aa:84:
                    51:9f:2d:3b:f2:ac:9e:7d:cf:95:3e:b2:16:45:e9:
                    f5:dd:76:95:01:0f:ba:0c:01:47:0a:1f:9f:05:93:
                    dd:57:c5:04:65:9f:dd:fd:8d:c1:66:61:c6:8f:5f:
                    71:16:5c:3b:51:ff:9b:b0:e1:7c:c9:b7:e4:21:fb:
                    a6:36:ef:0f:9e:5d:14:42:36:90:4f:9c:4b:ac:cb:
                    01:46:17:1b:91:ff:b5:d5:dc:ca:69:6c:e4:54:8a:
                    ec:98:e4:1a:3e:50:47:b9:8f:95:13:4c:85:e5:e0:
                    93:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D8:7E:25:0D:A7:E0:AD:C2:3D:4B:6B:B7:77:AD:84:87:03:1A:F1
            X509v3 Authority Key Identifier:
                keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f1:cf:68:c8:d5:dc:55:37:97:2f:6a:eb:55:4e:02:97:b7:
         86:44:45:99:0c:7f:88:8a:d1:37:ed:04:dd:4e:2a:2e:c0:2f:
         13:d4:c0:a0:a4:0f:5e:16:e1:bd:82:1c:5d:9b:1e:44:cf:de:
         7b:97:f9:cf:29:6e:1d:0e:6a:71:de:e4:79:6b:dc:41:36:98:
         67:9e:af:40:f0:ba:1d:0f:65:41:5e:be:e5:ae:46:b6:d0:60:
         4c:cd:71:b8:2f:3e:78:85:8c:ff:e5:5a:d6:10:3e:15:d7:85:
         20:89:53:1e:cf:f0:e6:ef:dd:64:22:bd:3a:dc:11:d7:bb:ae:
         99:aa:7e:62:7e:b1:a6:5d:8d:03:11:f8:48:e5:d5:4c:a9:13:
         f5:62:d9:08:6c:3f:27:46:b2:2f:b6:e0:3d:6c:1f:e1:9b:c9:
         2f:1f:d9:86:cd:8b:5d:e5:67:cd:a8:3b:a1:3d:23:b9:f2:79:
         fa:67:f0:73:99:40:37:6e:bd:59:25:c6:c0:20:94:29:bf:31:
         7f:d7:7f:b9:0a:66:50:a4:68:fd:5e:8f:ad:36:46:6a:20:f4:
         5d:a8:ae:2a:8d:ce:5d:e3:19:7c:26:90:c4:2c:57:bd:de:df:
         ce:54:28:31:6f:6a:ac:ce:94:de:04:79:31:43:f7:71:49:8e:
         8b:dc:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:33 2026 by rpki-client