This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File:                     cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier:          Grn7VhLo0FiIt7HSmPkn/LWdk+9M76qLUmmTg3rbIE4=
Subject key identifier:   19:2E:AC:8B:22:F7:FE:7B:D7:17:6E:29:B0:B0:23:E1:01:5B:93:B6
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0C24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number:          0C11
Signing time:             Sat 24 Jan 2026 18:23:02 +0000
Manifest this update:     Sat 24 Jan 2026 18:23:02 +0000
Manifest next update:     Sat 31 Jan 2026 18:23:02 +0000
Files and hashes:         1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: hga0/OMWFrmvQvPS37ZOk11HipjSbEEYMAPnJ4p5p8M=)
                          2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: Jnuyh/tjlmXzh/W0FC+nfv2/1A+JOUdoR1QdMOg2nAw=)
                          3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: 3kF8zJlwF4UbEFsgd+jLuLFD7uUy5scRolMoxM2c994=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3108 (0xc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Jan 24 18:23:02 2026 GMT
            Not After : Jan 31 18:23:02 2026 GMT
        Subject: CN=69750e06-31e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:9a:e7:00:ab:c7:3d:81:b2:9a:90:f8:59:
                    1f:7d:46:c9:71:0b:ce:2b:99:84:a8:fb:84:42:2a:
                    b6:db:1d:61:96:00:ff:a2:18:17:f7:dc:8c:c8:98:
                    02:5b:91:43:58:52:90:18:26:b4:87:6d:9c:7c:5f:
                    25:5d:79:8d:98:bb:57:de:a6:fc:a7:49:7b:fc:04:
                    58:3d:8c:51:9b:3a:65:e9:75:1b:34:d9:09:f6:eb:
                    d8:df:e5:7b:88:48:01:06:15:44:12:cc:2f:36:42:
                    3a:11:01:d0:54:a0:be:4c:36:29:8a:8c:de:9e:a7:
                    1d:1b:02:91:2d:85:31:d4:b7:be:27:af:8a:0d:da:
                    4b:18:10:8a:22:fa:a5:91:2c:39:2b:72:f7:09:22:
                    c5:60:63:71:1e:74:bd:53:c7:e7:bb:88:dc:96:32:
                    fc:a0:92:83:bd:f3:52:d7:d5:9c:f5:59:6d:6a:0d:
                    90:f7:47:ae:85:cc:75:21:ec:df:ce:25:76:da:e6:
                    14:39:2e:18:1a:c2:b6:df:8b:d1:75:12:98:76:19:
                    33:bd:91:a3:63:b0:8a:a5:42:46:b1:89:94:05:90:
                    3a:a4:2b:c2:00:e3:e3:c2:e0:ed:c0:fb:1a:d4:ce:
                    a8:f6:9e:21:a0:42:cf:9f:ea:2b:d2:96:b0:ff:8d:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2E:AC:8B:22:F7:FE:7B:D7:17:6E:29:B0:B0:23:E1:01:5B:93:B6
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:b0:07:81:f3:95:1c:0c:c1:45:c1:ad:8f:ef:8f:0c:47:
         e0:bc:15:8c:68:7e:ba:5f:62:68:af:8c:2a:27:69:15:61:f5:
         f8:d6:df:d9:9b:22:3d:05:0e:0b:1e:6b:97:17:21:d6:9a:25:
         d2:bc:13:1f:b4:03:91:eb:1f:b7:fb:60:9c:e4:7c:3b:b5:da:
         6d:fa:f0:42:41:8b:4b:c3:64:fa:8e:36:36:78:99:a5:0a:a3:
         2a:6d:58:f8:03:31:a8:2a:ba:69:6b:1c:78:8e:af:90:4f:d2:
         c4:43:92:5c:0e:49:93:07:6d:a8:e3:11:47:58:59:3b:3d:98:
         ec:e4:16:a7:52:75:4f:00:f8:2e:bb:0a:2e:2d:06:e9:12:eb:
         aa:e0:d7:62:41:0b:d3:19:60:14:fa:a9:a7:96:db:ae:e3:14:
         57:00:ba:69:2e:d0:b0:12:c0:0f:69:c0:ef:c2:a7:53:91:a1:
         68:e9:b3:d7:f3:2a:3c:11:11:fe:b0:01:d3:b6:3d:0e:01:f0:
         07:f0:15:4b:7e:fe:6a:84:99:02:f6:36:bc:dc:60:7e:78:d9:
         cd:a3:dd:84:17:86:5e:3e:c4:e0:be:86:25:a2:d0:96:a6:c1:
         4a:8c:df:bf:32:1c:28:83:a4:53:d1:ac:4f:20:12:37:3e:05:
         23:1f:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:58 2026 by rpki-client