This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File:                     znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier:          AfP52UtZ9rP3xJlthUED8eveH0n29L3AdmSKclotl20=
Subject key identifier:   10:6B:98:16:0A:FB:0E:06:E3:A8:73:5C:BF:85:8E:23:69:66:43:FE
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer:       /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number:          45
Signing time:             Fri 23 Jan 2026 06:21:53 +0000
Manifest this update:     Fri 23 Jan 2026 06:21:52 +0000
Manifest next update:     Fri 30 Jan 2026 06:21:52 +0000
Files and hashes:         1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: 6Y6fPj9NM7f5xHCs9RzILmxiv73WcJzpEdbkrR1s0zE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
        Validity
            Not Before: Jan 23 06:21:52 2026 GMT
            Not After : Jan 30 06:21:52 2026 GMT
        Subject: CN=69731380-39e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:ea:e5:29:8b:7a:16:9d:8c:68:25:82:a4:
                    ae:cf:fd:32:c9:17:b6:98:12:55:9b:54:d6:1b:7e:
                    91:03:8e:80:9b:a3:dc:65:5e:d9:18:e7:a0:06:75:
                    22:21:cb:2a:8e:7b:6e:49:c9:9a:77:d7:b5:d3:93:
                    2d:bf:eb:f3:39:7f:36:2f:69:d8:d9:cb:12:3e:f3:
                    6e:74:1c:48:79:e5:c7:dd:27:b6:bb:cc:c4:16:d4:
                    9c:4e:99:99:1a:7f:90:ce:5d:05:a7:cb:a9:ab:3d:
                    94:f7:18:b2:cd:b3:0f:a3:19:43:5f:59:44:80:b5:
                    40:e7:70:15:51:11:6d:75:8e:34:67:d7:05:70:e1:
                    1d:66:a1:be:c5:bf:4a:47:93:51:75:f5:42:ef:af:
                    90:29:09:5b:66:a1:85:bb:4e:7b:3d:0d:7e:35:90:
                    25:ae:48:fb:dd:95:0b:8f:16:2c:4a:71:0b:53:79:
                    58:67:c7:0c:a4:99:f9:fd:4f:f1:3f:ef:c9:68:8b:
                    99:a6:a3:ad:31:a1:b0:c1:2b:63:a6:cd:33:10:52:
                    bf:3d:57:ad:db:b8:f8:f4:75:26:25:12:ff:d5:8a:
                    b2:fb:da:14:7f:99:7e:53:c2:04:1f:7e:ad:b3:04:
                    55:14:bd:e3:3b:44:d7:80:a0:b1:1c:db:15:94:e6:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:98:16:0A:FB:0E:06:E3:A8:73:5C:BF:85:8E:23:69:66:43:FE
            X509v3 Authority Key Identifier:
                keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:04:35:90:4d:e4:f6:68:ff:1e:35:c8:71:13:38:aa:0f:
         5c:fc:6d:d4:c3:1c:db:30:44:c3:a0:2f:3a:59:da:0c:18:b4:
         35:78:07:6d:c2:b9:1e:ee:8b:b4:80:83:b5:fc:25:10:e0:f9:
         1f:b1:13:c6:f2:93:11:b3:2f:77:45:bb:ec:60:2b:39:77:2c:
         dd:bc:9d:ed:94:85:bd:90:9d:56:f6:f2:b3:b9:e7:ee:59:ce:
         fd:4a:84:ca:d5:d3:76:9d:e3:44:1d:87:26:c7:1e:9b:1f:2b:
         5f:8f:02:f3:a6:9a:2e:14:b9:5c:ae:ed:61:29:a2:d4:72:c8:
         82:4d:4a:f3:b9:be:c7:58:31:ac:36:f2:b6:9c:d6:e5:21:b3:
         f2:67:62:85:3b:92:5f:8f:1c:88:8c:c2:04:17:ce:80:9a:26:
         fb:35:95:4a:6b:de:1e:75:f9:26:41:27:2d:df:d9:08:63:9c:
         27:75:e8:54:58:d3:43:19:c8:c0:af:ac:ef:ba:c8:17:05:bf:
         cf:96:45:fe:38:70:57:64:76:2e:92:eb:4a:04:ba:34:84:20:
         6f:64:93:f7:32:9a:f8:0f:44:d0:47:24:ea:d9:c5:9e:68:d6:
         6a:eb:a1:c0:a0:4d:43:92:11:df:10:dc:67:73:cc:ee:c3:51:
         fa:e6:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:09 2026 by rpki-client