This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File:                     -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier:          rext+2DjihLgALTD5zXG49eWPwzuo7vcNcVYv22ZdaQ=
Subject key identifier:   53:EF:2C:65:C7:66:BD:7B:1B:2C:FE:EA:CD:A3:A5:29:3F:52:BD:F2
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer:       /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number:          01E8
Signing time:             Sun 25 Jan 2026 01:55:35 +0000
Manifest this update:     Sun 25 Jan 2026 01:55:34 +0000
Manifest next update:     Sun 01 Feb 2026 01:55:34 +0000
Files and hashes:         1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: m1n+E7kjxifhh3zw900zE7Fbvsd8N6kDb4Tha55Cn1E=)
                          2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
                          rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
        Validity
            Not Before: Jan 25 01:55:34 2026 GMT
            Not After : Feb  1 01:55:34 2026 GMT
        Subject: CN=69757816-12d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:46:73:86:33:63:42:5e:98:b6:f0:f8:1b:
                    23:cc:0a:f6:14:22:c2:ae:ee:8b:b7:4b:1b:bf:5c:
                    8b:35:6a:b6:b4:d8:0d:80:f7:0c:d4:d0:54:2b:bb:
                    27:52:3b:46:2d:66:4f:f7:09:d4:26:ae:4c:be:97:
                    6d:ee:36:be:1b:ac:21:fc:ce:d2:fa:8b:f7:0a:7c:
                    c2:5b:7d:cf:33:88:15:c4:44:2a:ba:cf:f2:73:96:
                    53:4a:84:03:d0:55:0e:37:f9:27:ef:65:ff:ae:08:
                    34:a6:e0:f9:54:eb:03:5e:b2:c4:99:3d:45:cd:96:
                    89:5f:77:ba:54:76:b5:43:4e:65:ee:22:f5:ef:e7:
                    e4:91:36:cb:51:78:ea:7c:e3:81:b8:93:0c:3c:95:
                    a9:03:fb:a5:3b:6c:f8:22:41:91:20:cb:4c:fe:4c:
                    b6:4f:d3:fe:db:7e:17:aa:ea:3a:3a:4e:3a:f1:0f:
                    d1:40:c1:8c:ed:28:e1:80:41:5d:ad:85:97:75:ae:
                    44:cc:f1:99:89:af:1b:a2:f8:4d:74:e8:a5:4d:9a:
                    1f:77:71:1f:4e:39:89:fd:c7:de:f2:9f:24:26:fd:
                    9b:0c:9f:1e:f0:a6:83:29:c7:62:59:d9:77:34:23:
                    29:f9:63:36:30:2c:cd:57:41:7c:a8:ea:2c:77:00:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:2C:65:C7:66:BD:7B:1B:2C:FE:EA:CD:A3:A5:29:3F:52:BD:F2
            X509v3 Authority Key Identifier:
                keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:52:9e:28:9b:29:46:ce:49:d3:59:e8:a3:a7:bc:f0:d7:e5:
         90:b4:88:4d:db:9c:d2:a1:6a:d8:c5:f5:f2:03:5e:28:d1:8a:
         26:f4:69:f8:d9:67:ce:5b:ce:e0:02:cc:65:9f:cf:be:49:11:
         18:81:5a:76:1c:c0:87:d9:7e:f0:2d:11:fb:95:63:e0:3f:26:
         ea:83:ea:4c:13:1a:e5:90:b3:4c:90:89:3e:9d:a0:5e:ec:dd:
         37:37:bf:bb:4a:1d:17:16:bf:43:e9:32:8f:84:05:35:5d:34:
         b5:de:b0:72:6a:e6:72:b5:85:04:d2:ae:10:8e:dc:35:81:14:
         89:1f:9c:a0:f9:a4:af:92:b8:61:b5:f3:29:37:bf:eb:ed:a3:
         4d:39:16:87:0b:ef:44:46:c3:73:70:7c:a6:56:9e:46:90:ae:
         7a:45:84:26:35:82:50:2c:f0:01:96:32:7f:ed:c8:ea:29:ae:
         d4:b2:fc:72:87:9f:e5:19:48:dc:78:32:45:a4:b3:63:33:df:
         ab:2b:84:23:a8:fa:64:d7:ca:04:a2:3c:20:ae:78:5b:5c:80:
         af:f1:84:ea:96:f7:fa:63:62:2e:32:ea:cf:80:91:49:ff:64:
         30:10:fb:68:0a:6e:0a:bc:51:31:cb:09:34:88:0a:94:eb:e4:
         c2:c0:6f:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG
ODBFNTJGREYwHhcNMjYwMTI1MDE1NTM0WhcNMjYwMjAxMDE1NTM0WjAYMRYwFAYD
VQQDDA02OTc1NzgxNi0xMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusNGc4YzY0JemLbw+BsjzAr2FCLCru6Lt0sbv1yLNWq2tNgNgPcM1NBUK7sn
UjtGLWZP9wnUJq5Mvpdt7ja+G6wh/M7S+ov3CnzCW33PM4gVxEQqus/yc5ZTSoQD
0FUON/kn72X/rgg0puD5VOsDXrLEmT1FzZaJX3e6VHa1Q05l7iL17+fkkTbLUXjq
fOOBuJMMPJWpA/ulO2z4IkGRIMtM/ky2T9P+234Xquo6Ok468Q/RQMGM7SjhgEFd
rYWXda5EzPGZia8bovhNdOilTZofd3EfTjmJ/cfe8p8kJv2bDJ8e8KaDKcdiWdl3
NCMp+WM2MCzNV0F8qOosdwAH6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPvLGXH
Zr17Gyz+6s2jpSk/Ur3yMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB
QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o
TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2Up4omylGzknTWeijp7zw1+WQtIhN25zSoWrYxfXyA14o0Yom9Gn4
2WfOW87gAsxln8++SREYgVp2HMCH2X7wLRH7lWPgPybqg+pMExrlkLNMkIk+naBe
7N03N7+7Sh0XFr9D6TKPhAU1XTS13rByauZytYUE0q4Qjtw1gRSJH5yg+aSvkrhh
tfMpN7/r7aNNORaHC+9ERsNzcHymVp5GkK56RYQmNYJQLPABljJ/7cjqKa7Usvxy
h5/lGUjceDJFpLNjM9+rK4QjqPpk18oEojwgrnhbXICv8YTqlvf6Y2IuMurPgJFJ
/2QwEPtoCm4KvFExywk0iAqU6+TCwG8v
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:57 2026 by rpki-client