This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
File:                     mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json)
Hash identifier:          TwYGDYdluMJoSiUo+wqwR1iizQFY3xhTpOlLyk0pbdg=
Subject key identifier:   9D:7C:67:5E:D6:EB:E4:06:1B:75:3E:3F:FD:0E:41:97:9A:19:E8:22
Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D
Certificate issuer:       /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
Certificate serial:       100D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
Manifest number:          100D
Signing time:             Sat 24 Jan 2026 17:09:04 +0000
Manifest this update:     Sat 24 Jan 2026 17:09:03 +0000
Manifest next update:     Sat 31 Jan 2026 17:09:03 +0000
Files and hashes:         1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: OiYCfd7GLNrzEaPR1czBUukNYiCNIlXPUW0Wj4kB73A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl
                          rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4109 (0x100d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E777, serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D
        Validity
            Not Before: Jan 24 17:09:03 2026 GMT
            Not After : Jan 31 17:09:03 2026 GMT
        Subject: CN=6974fcaf-d103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:77:12:97:d7:24:1b:58:46:e0:fc:95:06:
                    11:c1:44:7f:7c:55:6c:1e:27:8f:52:d8:34:06:05:
                    6f:73:bf:4a:0e:0d:ff:aa:7c:2c:a5:2a:b8:dd:c3:
                    73:3d:8d:a0:3b:d5:f1:9c:fb:79:f5:1c:a1:cb:e2:
                    f6:61:51:d6:44:4d:32:c1:af:52:72:d6:03:42:7b:
                    8f:a5:71:19:dc:dc:07:8d:bf:b9:71:42:cd:89:27:
                    09:ee:e9:f5:ec:93:d7:02:89:c0:c3:8e:c5:3b:d3:
                    c1:a4:16:19:1b:9a:75:40:f0:44:db:81:26:b2:ce:
                    97:bc:55:02:9d:b2:39:88:5c:d0:c0:ac:52:d3:0e:
                    5c:17:0e:c8:4c:1d:cc:a5:88:25:c8:0c:ce:45:c1:
                    b6:2a:19:04:43:ce:05:8c:82:1b:29:b9:1a:16:20:
                    c1:6e:01:a6:94:c7:d3:7a:86:ba:cf:4b:dd:79:7b:
                    fd:0d:52:74:87:35:98:7d:31:9c:6e:ad:d8:33:2d:
                    22:e2:26:75:ce:51:ec:a3:66:9f:53:ce:16:39:f0:
                    57:fb:e7:10:0d:4c:1c:fb:7f:8c:4a:c9:ed:90:43:
                    d9:4d:a9:2f:64:e1:12:db:ce:19:44:f9:b3:f6:73:
                    d1:4a:c2:70:04:f2:76:1e:cc:67:c7:03:89:f3:95:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7C:67:5E:D6:EB:E4:06:1B:75:3E:3F:FD:0E:41:97:9A:19:E8:22
            X509v3 Authority Key Identifier:
                keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cf:fc:87:c6:e8:6a:4a:68:50:9c:1f:58:e1:24:f0:25:22:
         c7:c0:e6:ea:d3:87:b5:17:06:34:26:e6:e9:ad:97:0c:9b:bd:
         46:48:1e:e9:70:03:a1:2a:26:c9:be:ba:86:0b:5c:e4:cc:27:
         21:10:19:2c:79:65:7f:81:e4:24:00:8c:64:b4:ad:a3:a0:2e:
         79:ff:48:8a:d1:6e:db:ae:3c:a5:d6:af:a2:b8:89:4c:a9:b7:
         2e:39:9a:5f:53:6b:58:30:27:bb:92:b2:ee:39:81:64:ce:84:
         1c:b2:56:92:4a:88:0f:32:50:f2:ee:51:13:7d:49:33:27:1e:
         a5:c1:d0:1f:11:7e:39:22:82:9e:c4:26:12:3f:18:43:a8:8f:
         26:08:78:ea:27:e2:1d:09:1d:2c:15:18:3e:6f:6d:c7:ef:db:
         0b:0c:f0:72:61:c2:d0:fb:2d:1f:9c:b8:f6:6b:30:50:75:f9:
         e1:ea:64:97:9c:6d:94:b7:28:87:7f:4a:03:a3:a2:29:1c:8a:
         9e:42:f4:57:31:99:45:0f:6a:0b:d9:6e:3d:e9:68:e9:cf:42:
         79:d0:ba:da:9d:dd:7c:9c:49:04:50:6b:b3:47:7e:d8:70:aa:
         31:f0:96:fb:03:d8:8f:87:9b:6e:e4:d8:fe:4b:d1:01:b0:64:
         00:f6:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:07:02 2026 by rpki-client