This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
File:                     Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json)
Hash identifier:          Xr0yOaGUZgyT7R7SQ4fH9A45HaqEZLCu7IoqbckB0u4=
Subject key identifier:   1A:BD:BB:FF:20:B6:CE:05:01:87:F3:4B:8A:ED:A9:F0:F8:CD:36:E8
Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47
Certificate issuer:       /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
Certificate serial:       0CFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
Manifest number:          0CF7
Signing time:             Sat 24 Jan 2026 17:45:17 +0000
Manifest this update:     Sat 24 Jan 2026 17:45:16 +0000
Manifest next update:     Sat 31 Jan 2026 17:45:16 +0000
Files and hashes:         1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: t/YZJ3B1Bnno4+TWeFD3aj+yyxfsy8YkuajGMuUa+bU=)
                          2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl
                          rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247
        Validity
            Not Before: Jan 24 17:45:16 2026 GMT
            Not After : Jan 31 17:45:16 2026 GMT
        Subject: CN=6975052d-21a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:0b:40:d7:5c:7c:ae:26:46:81:d3:d6:6b:
                    09:09:72:4f:95:16:ca:36:6c:01:19:f4:7b:f2:25:
                    d7:52:f0:67:08:da:da:78:0d:5f:86:45:0a:3c:a5:
                    47:7f:a3:41:de:32:d1:64:e4:22:df:28:6b:2f:c3:
                    e7:45:f9:82:36:2b:cf:11:b1:3a:18:c2:a4:5b:6d:
                    ca:e3:2f:75:33:a6:13:b4:77:1a:1b:28:69:d5:ea:
                    6d:60:00:fd:d5:0d:e4:57:e1:6c:e6:63:f5:9d:1e:
                    55:72:29:b5:21:38:7c:f2:ad:1d:15:f5:29:3b:db:
                    18:aa:46:ea:70:94:c4:77:8e:89:0d:c5:bb:5b:67:
                    c8:a5:e5:6b:b6:0c:8e:ba:b0:7e:de:65:72:3b:e8:
                    2e:a1:ca:29:2a:df:a2:71:43:dd:07:40:dc:95:14:
                    cc:64:d0:06:6d:9f:fc:97:b0:c9:7b:52:38:54:c7:
                    16:f0:5e:f7:47:b3:ff:a4:47:e8:f6:38:76:82:f5:
                    2e:51:fa:e9:26:f7:8a:5f:d0:a2:06:03:19:4b:a3:
                    9c:34:5c:2f:80:8c:d6:2a:50:de:20:87:07:78:de:
                    12:42:35:05:9d:64:9a:26:0b:0e:03:ef:74:ea:22:
                    c7:86:90:5c:b9:63:4f:73:ab:60:ee:13:67:5a:e5:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:BB:FF:20:B6:CE:05:01:87:F3:4B:8A:ED:A9:F0:F8:CD:36:E8
            X509v3 Authority Key Identifier:
                keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:1d:51:b2:4d:0c:3b:5e:e6:db:18:56:32:a2:f3:e7:b1:
         20:ba:e2:28:1c:db:c8:fb:a4:06:97:be:07:59:75:65:87:0f:
         13:46:e1:0d:c3:1b:8f:44:51:7b:ba:a6:c3:72:36:ab:cf:ab:
         25:be:b6:41:d0:8c:de:9e:d4:0e:32:f9:6c:ce:8c:60:b5:1e:
         13:72:dc:08:2c:b8:e3:41:b5:76:bf:43:b2:81:b8:bb:b1:44:
         55:2f:14:7f:8a:66:e3:04:92:dd:6f:13:ab:5e:7a:60:b8:29:
         9e:17:08:4a:1c:6a:15:e7:d1:45:20:3a:34:7f:09:ca:86:86:
         4c:79:55:dc:c1:fe:76:1e:95:e6:70:c9:fb:da:17:c3:7c:8d:
         4c:32:60:78:12:53:8c:3a:4e:b5:4a:71:a3:20:c1:0d:96:62:
         fb:52:75:ed:e2:19:f4:c7:33:63:37:e5:d1:b6:dd:1b:ac:03:
         3a:65:84:4a:f4:95:56:2b:c9:98:e5:0e:0f:4f:23:cd:89:40:
         84:c5:65:dc:a4:0e:1a:f4:cb:61:6d:5d:68:bb:51:5e:b6:fe:
         2d:fd:75:b1:9e:ad:f8:33:26:d3:02:eb:0e:70:98:f0:6d:39:
         98:78:49:ed:11:bf:df:55:f6:75:15:c6:55:14:14:34:7e:b6:
         1b:6e:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:22 2026 by rpki-client