This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
File:                     ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft (raw, json)
Hash identifier:          QpzPdhxEyx889XgP0PD/3N5dQStE/LQvNvkjFdmbt7k=
Subject key identifier:   F9:45:C0:B8:69:EF:68:B1:B0:C5:70:DC:22:3B:E1:B7:65:63:AF:DA
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Certificate issuer:       /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
Manifest number:          68
Signing time:             Fri 23 Jan 2026 06:02:45 +0000
Manifest this update:     Fri 23 Jan 2026 06:02:44 +0000
Manifest next update:     Fri 30 Jan 2026 06:02:44 +0000
Files and hashes:         1: ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl (hash: CG08agkWTaJ/wZwKHKyIQgO0ntfEcKgBmoxzYOlpcsI=)
                          2: D616F9C45CB011F09DD6183AC4F9AE02.roa (hash: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
                          rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
        Validity
            Not Before: Jan 23 06:02:44 2026 GMT
            Not After : Jan 30 06:02:44 2026 GMT
        Subject: CN=69730f04-7c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:78:7a:d7:36:61:61:d3:eb:3e:36:6a:64:
                    44:00:d8:52:a5:e7:10:f4:83:d9:14:95:2b:21:0f:
                    03:e6:ef:e3:ef:7f:ae:e0:93:74:6a:fb:b4:4b:f8:
                    4b:6e:67:cf:be:68:fd:d9:1b:cb:65:fb:2b:12:ac:
                    4d:e1:e6:73:94:72:3f:28:8e:3d:4a:8e:66:68:fb:
                    aa:d4:a6:2e:cc:4d:6f:04:24:f8:fa:cd:b3:95:51:
                    cb:91:b3:d7:1f:ee:fe:d5:da:3c:54:c6:e4:05:40:
                    61:3a:ee:a7:38:57:3b:19:2c:8f:62:8e:72:38:6f:
                    5a:bb:4d:4e:8f:b5:3d:35:5b:e2:ae:24:03:28:f7:
                    c5:8b:e3:8e:4d:5d:7a:0a:94:62:af:57:55:22:aa:
                    23:1a:74:ac:ea:63:0e:af:56:9f:22:c1:c5:cd:ff:
                    db:51:fd:4f:0a:24:c2:ef:af:c7:a5:87:f6:9d:13:
                    83:13:f2:fd:61:f4:dd:1c:99:7c:3d:2c:b3:bb:cc:
                    70:60:27:54:68:85:02:5d:61:6d:68:2c:f3:4b:93:
                    28:e9:97:80:11:3e:4e:71:43:fd:39:41:31:69:9d:
                    13:56:a3:4e:9e:12:72:d7:1b:a5:75:c1:70:28:c5:
                    0f:be:f9:d3:ea:e5:25:ef:21:dd:1a:88:c5:ea:45:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:45:C0:B8:69:EF:68:B1:B0:C5:70:DC:22:3B:E1:B7:65:63:AF:DA
            X509v3 Authority Key Identifier:
                keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:3f:39:e0:0a:48:34:dd:33:81:38:d8:7f:41:b7:bf:5c:8f:
         7a:2f:5a:ec:00:e2:b1:78:71:1e:fb:a7:e1:ba:ca:55:3f:11:
         5a:3b:47:3e:0d:ea:ef:e4:0e:36:c2:14:02:a7:0d:7a:cd:6c:
         7c:e8:41:87:0c:a4:c2:38:e5:d5:76:a4:96:ab:67:46:4c:4f:
         33:8e:9e:c0:9c:4b:0d:ca:6c:c1:f4:ab:dc:b4:8a:2b:d2:48:
         7f:1d:4a:30:4d:fb:1e:01:e2:0e:6f:57:fc:47:23:8d:91:ac:
         73:89:cc:99:80:4d:e7:3a:f9:00:21:4a:b2:32:cc:40:99:26:
         43:2c:56:5d:ef:1a:b0:39:b5:fb:27:9f:08:9d:bc:4b:95:ba:
         1c:c6:d4:d7:66:cd:f3:32:bb:70:c4:97:16:db:1a:9f:f1:ed:
         19:54:6f:e0:5f:d2:7c:a1:d5:b5:35:a6:df:39:97:bd:90:4c:
         9e:28:f2:47:e1:51:04:60:8b:75:9e:96:3b:10:98:6d:d6:a5:
         d5:dc:1e:74:01:8b:c1:2f:4c:45:f2:3f:38:e5:14:63:02:a1:
         48:1b:cf:e3:1c:9c:73:e4:72:e6:0a:47:57:c7:8d:8d:84:6c:
         ae:a3:86:5f:c8:44:d4:ec:53:90:96:cb:c7:f6:61:e4:a5:6a:
         f2:86:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:02 2026 by rpki-client