This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
File:                     5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json)
Hash identifier:          WY4VSx3J7NyeEC6/8t/q13K4NQNQ675GyK9JYYC2Smk=
Subject key identifier:   B4:93:5C:B3:01:92:A0:19:29:3A:1D:EE:3B:8A:F2:E3:1C:D4:43:8E
Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1
Certificate issuer:       /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1
Certificate serial:       34FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
Manifest number:          34FE
Signing time:             Sat 24 Jan 2026 14:37:11 +0000
Manifest this update:     Sat 24 Jan 2026 14:37:11 +0000
Manifest next update:     Sat 31 Jan 2026 14:37:11 +0000
Files and hashes:         1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: HhKGKC3lHI8gaTLfG7X8knIlwg11fXKt+UI9dS7+cdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl
                          rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13566 (0x34fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1
        Validity
            Not Before: Jan 24 14:37:11 2026 GMT
            Not After : Jan 31 14:37:11 2026 GMT
        Subject: CN=6974d917-639f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:30:21:a6:de:94:32:f8:0b:b9:4c:3a:e7:96:
                    04:25:c7:af:6f:43:e0:d7:12:b9:a9:f1:ef:6b:b7:
                    18:59:e4:34:9a:43:7b:28:f4:5b:af:c1:ad:03:33:
                    6b:fd:93:f5:c2:8e:02:5d:ec:ec:cc:79:fc:95:4f:
                    44:b4:53:3f:e3:f9:b9:91:be:37:c8:6d:bb:d1:b6:
                    42:bb:25:cc:0e:67:cc:7b:53:d8:96:b9:ea:1f:50:
                    1f:5c:7a:39:78:79:79:98:9c:71:fd:c0:14:12:cd:
                    ec:df:65:4a:1f:9d:e3:56:c7:d4:28:2f:ef:1c:bb:
                    7b:62:4e:d3:16:fa:3f:c4:e8:ce:e5:aa:87:6c:8e:
                    9b:f1:bd:6a:2c:77:cb:9b:67:a8:7b:8d:27:f9:40:
                    12:e9:f1:01:3b:db:10:20:d9:ca:9a:bd:5b:bc:0a:
                    a9:ab:3c:d1:e0:75:b0:c2:26:19:2d:b1:d6:59:32:
                    35:48:bf:90:fd:a8:93:7e:8e:f9:11:46:46:6a:50:
                    ec:c3:e6:aa:83:9f:88:83:d2:05:11:f7:47:60:f1:
                    7d:2e:54:f3:46:be:10:4b:5c:14:82:28:2e:01:99:
                    5a:cd:2b:20:a5:ef:01:fe:d4:45:9f:dd:ca:2a:65:
                    1c:ba:38:ec:4a:5c:46:8c:05:a8:57:ed:27:79:44:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:5C:B3:01:92:A0:19:29:3A:1D:EE:3B:8A:F2:E3:1C:D4:43:8E
            X509v3 Authority Key Identifier:
                keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f1:fd:46:7d:dc:d0:4f:2e:a3:dc:15:e6:2b:35:ab:f7:47:
         c2:8b:9f:af:92:b7:84:22:3b:b1:90:72:91:1a:ee:83:05:b5:
         88:00:4e:44:bd:fd:60:9f:f2:b9:c1:b5:82:49:ec:a2:aa:c0:
         fa:f4:62:8f:9c:8f:69:4f:94:a8:8e:72:aa:93:95:af:19:f9:
         4e:2b:59:15:88:a1:c1:b3:fd:5c:96:a8:a6:43:cf:6e:4d:b9:
         b1:16:d6:a0:00:7c:60:85:b1:1e:cb:c5:9a:6d:0b:5b:d9:2e:
         a3:85:ff:9c:aa:68:f9:d5:51:7e:c0:bb:fd:cf:8b:45:4d:b8:
         89:85:dd:57:eb:37:ce:78:09:01:82:91:0b:bd:db:9f:bb:db:
         59:16:0e:b6:ac:80:62:27:a7:12:0e:23:7f:7e:e6:bd:a4:9d:
         9a:27:3c:d8:dd:c3:1a:6d:78:8b:2f:22:01:5c:3f:45:48:3b:
         d7:60:0b:1b:32:e8:3a:7e:ed:f8:6a:40:14:57:c4:18:ee:b1:
         7b:19:b0:8d:94:12:f1:21:fd:bf:b5:16:11:36:fb:a5:16:6f:
         34:fa:c2:10:28:4b:61:a8:dc:0f:d0:9c:c6:28:cb:05:8b:1a:
         d1:d1:8f:92:af:e0:6f:eb:45:6e:ce:fb:00:22:74:c1:dd:96:
         78:1f:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:32 2026 by rpki-client