This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
File:                     _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json)
Hash identifier:          y6bjJIrGGLsaZ6Y83qC5fMJQpx2XDpwsywkb51Qk41M=
Subject key identifier:   33:49:8A:90:10:F6:A4:B1:64:50:9B:68:92:6F:88:7E:7D:49:14:39
Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77
Certificate issuer:       /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
Certificate serial:       0BD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
Manifest number:          0BD1
Signing time:             Sat 24 Jan 2026 18:28:02 +0000
Manifest this update:     Sat 24 Jan 2026 18:28:02 +0000
Manifest next update:     Sat 31 Jan 2026 18:28:02 +0000
Files and hashes:         1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: TacXiG7NCKyaP45At0QtSfY+cSPsrm/Co6KfoMIE+k4=)
                          2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: v4jt1ZjQNLJGtpWh7ObVJNt/5KBfDnWWuYACdukBsQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl
                          rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3032 (0xbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77
        Validity
            Not Before: Jan 24 18:28:02 2026 GMT
            Not After : Jan 31 18:28:02 2026 GMT
        Subject: CN=69750f32-c661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:41:5f:90:82:94:d3:86:de:c8:2a:05:f6:
                    df:15:ac:46:28:0f:e2:90:c3:7a:98:68:bb:ba:5d:
                    6e:4b:3b:65:fd:77:05:e6:fe:73:10:c3:00:85:be:
                    54:b4:61:b0:d9:b9:c3:30:ff:28:32:60:cf:2b:a0:
                    e0:81:ee:50:96:a5:d4:b0:4d:53:ba:4a:66:26:d9:
                    83:36:42:dc:7b:5a:48:d6:42:64:9c:a4:1b:a3:70:
                    bd:34:bf:f7:1f:88:8c:c2:be:e5:5e:8f:3a:5c:67:
                    3a:06:61:3f:0a:04:8d:7a:98:76:f5:9f:24:dd:e1:
                    67:ec:53:83:04:ff:fa:e7:30:19:02:0b:04:fc:52:
                    81:39:6e:a6:45:e1:2b:60:7e:58:e8:ac:23:7b:49:
                    dd:2d:f8:57:e2:06:f7:95:44:42:82:a0:dd:35:80:
                    ea:c9:75:6d:4e:f8:d3:23:f9:4e:41:93:f5:b0:70:
                    c6:92:ab:03:c1:ba:da:05:0b:53:4a:54:7f:12:8f:
                    a4:95:76:e2:3b:93:56:6c:bd:e5:b0:d4:3f:ef:05:
                    c0:b5:1b:65:0f:80:a4:35:8c:40:66:04:65:ef:53:
                    a7:37:6d:15:8c:88:00:d6:f1:86:76:e8:39:42:81:
                    22:fa:98:b4:b2:75:99:4d:4c:89:c7:fb:28:3e:17:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:49:8A:90:10:F6:A4:B1:64:50:9B:68:92:6F:88:7E:7D:49:14:39
            X509v3 Authority Key Identifier:
                keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:41:4a:3e:95:6a:1a:c4:e7:29:ba:2c:9e:ba:9a:d4:5a:75:
         e5:6f:44:8c:d4:36:80:ec:30:ea:f3:e5:be:5a:d1:f6:95:b7:
         a8:d6:1b:5e:1f:8b:1a:dc:78:bd:44:b4:34:50:55:d3:b8:9b:
         91:ea:d7:02:5e:f8:33:50:37:79:be:6d:53:bc:c4:d7:29:81:
         63:48:f2:eb:88:be:73:44:53:72:89:03:db:66:6f:0d:c0:78:
         6f:94:4a:ca:9c:ca:5d:65:77:54:5c:0b:62:d6:5c:37:a4:3d:
         f1:31:1c:6e:b5:dd:75:31:d2:6c:e6:ab:53:40:b6:f3:da:98:
         ef:02:ab:cf:1d:b6:b3:03:fa:9c:37:58:4e:1e:5e:e6:71:62:
         14:7e:e4:99:f1:b7:59:70:24:ca:55:92:52:a8:10:f4:8d:72:
         31:b6:82:81:4a:2b:50:d5:73:3a:21:8a:3f:83:e2:7b:b4:42:
         42:84:98:f7:2e:b3:39:ec:2e:b5:4f:4e:c3:da:ff:1d:76:e8:
         8a:c1:f9:32:b1:3a:02:5a:5e:18:15:36:f5:f4:c7:85:98:0b:
         6f:e5:9a:39:7f:97:c9:e5:ea:15:63:fb:c3:54:7d:a3:d1:52:
         17:13:40:99:4e:85:1d:7d:3d:6f:b6:16:8d:68:8d:13:a1:9e:
         9f:ab:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:03:01 2026 by rpki-client