This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
File:                     K51tfdq8UiVfPM15zup2289DW50.mft (raw, json)
Hash identifier:          tBY4CQMJOQFWZG/FDsqajr6h6sTIsCTr2eEQr+sVLDc=
Subject key identifier:   99:71:E9:B3:2C:C5:24:4C:1B:90:3D:31:9B:FA:F0:C8:6A:45:47:A7
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       0424
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
Manifest number:          041C
Signing time:             Sat 24 Jan 2026 23:33:57 +0000
Manifest this update:     Sat 24 Jan 2026 23:33:57 +0000
Manifest next update:     Sat 31 Jan 2026 23:33:57 +0000
Files and hashes:         1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: HnO0eRDjYmAnktJDLFwJYXTXhVQuqEqKMaapEn5hkEw=)
                          2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: twtkk1WApwH4i+a2+1Hbj/9smQsUe3HWcee2VcpojQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
        Validity
            Not Before: Jan 24 23:33:57 2026 GMT
            Not After : Jan 31 23:33:57 2026 GMT
        Subject: CN=697556e5-71b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:76:59:f9:40:c6:d5:47:21:b2:ba:81:87:
                    d8:0c:a4:2e:c9:2d:b9:95:6d:10:14:3d:0e:ec:db:
                    80:d5:c6:f7:92:89:38:28:a2:02:e4:72:28:36:b6:
                    38:88:b8:26:ab:41:a0:c5:dc:e3:66:f4:1b:88:6f:
                    2d:a8:3f:98:a8:00:a3:2b:dd:49:1f:27:dd:61:a1:
                    5c:6d:bb:ce:d0:8f:11:e2:89:49:9e:5a:f2:d2:a6:
                    86:9c:1b:07:96:97:ab:d2:23:fe:38:29:09:eb:32:
                    17:bb:e0:66:fc:35:3a:b8:87:4b:03:4a:aa:8c:e6:
                    61:b6:84:1f:18:7e:dd:f7:c8:e7:99:47:6b:f6:4a:
                    f6:c9:eb:4a:9e:6a:aa:4e:6f:ea:63:cf:f8:a9:d7:
                    83:6d:8e:84:36:38:78:4b:d0:9f:9b:18:b8:eb:db:
                    c4:1a:6b:c8:5d:02:2d:30:b9:bf:0f:bb:08:45:3f:
                    c6:7f:a6:23:6e:55:15:34:f1:25:42:15:5a:16:8a:
                    ed:3e:3e:e3:84:c9:0c:c9:7c:61:d6:00:5d:0e:d0:
                    f5:7f:65:c6:f2:73:6b:ca:85:23:bc:5d:0d:c5:b3:
                    aa:49:d3:a8:31:9d:49:2e:63:46:99:db:48:91:79:
                    5f:d4:78:2f:40:2e:6e:67:b0:7b:f7:e5:ff:5c:d3:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:71:E9:B3:2C:C5:24:4C:1B:90:3D:31:9B:FA:F0:C8:6A:45:47:A7
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:43:e5:d2:e1:64:1e:9b:e8:bd:4d:c0:6c:65:51:ff:44:db:
         77:9c:49:c4:eb:6a:40:d1:80:3e:87:28:ca:c0:fc:d4:ef:77:
         81:84:1b:ae:a1:8d:d3:09:60:9c:12:e0:fe:22:7e:2b:a5:85:
         a7:29:e9:dc:d3:61:58:9f:78:ee:68:99:79:e7:0a:a9:b3:a4:
         ed:db:f1:12:43:cf:41:11:a5:0b:7f:de:88:77:4d:1c:04:25:
         38:2a:24:7f:fc:f5:53:71:d3:a0:34:85:26:9e:cd:8c:b6:8a:
         fb:d5:a3:80:77:36:76:4b:25:0c:64:36:5c:a9:ac:3f:96:a2:
         ae:c6:f6:15:be:ac:a6:e0:87:45:25:2a:8b:7f:72:d3:a1:fc:
         a4:61:d7:53:4d:62:09:4f:6a:33:8d:ff:da:3c:2a:33:2e:32:
         5e:0e:3e:8e:40:3c:42:f4:bb:34:05:a9:9f:ec:1b:f4:00:9d:
         6f:8c:8e:4e:0f:3c:a4:fd:af:29:d5:dd:65:e2:c6:06:c9:47:
         81:8a:ab:c1:42:37:0b:89:36:1e:81:c8:99:95:a4:5c:79:40:
         7a:96:68:f5:85:e6:ec:f3:d8:fa:a4:fa:20:3c:10:b8:96:0c:
         77:9f:20:8b:b5:f0:dc:48:6c:86:2d:88:a1:21:fa:06:70:19:
         c7:44:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:44:21 2026 by rpki-client