This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
File:                     8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json)
Hash identifier:          /4Orq5cxDUDcphf70t+ALuVVkMpJGXWaDWUbvo0/T8k=
Subject key identifier:   B6:7C:83:7C:57:5C:47:2A:CB:A9:AB:76:B0:36:D6:EE:30:A0:2E:6B
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
Manifest number:          FD
Signing time:             Sun 25 Jan 2026 04:25:57 +0000
Manifest this update:     Sun 25 Jan 2026 04:25:57 +0000
Manifest next update:     Sun 01 Feb 2026 04:25:57 +0000
Files and hashes:         1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: uQOHIOPydodCjsasJIzGySAJhb7tOk1cFP08KrKLQG0=)
                          2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk=)
                          3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: +qIyoxy4aGRwH3KPJiIeeGzTmFk3xSC3JgRiA3rxQ1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Jan 25 04:25:57 2026 GMT
            Not After : Feb  1 04:25:57 2026 GMT
        Subject: CN=69759b55-bdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:6f:cf:07:91:14:22:57:56:d3:45:04:42:
                    8d:83:3c:0b:ae:85:6a:b9:68:03:4c:b6:2d:22:ab:
                    33:19:4f:c1:df:9a:25:e2:31:8f:79:40:2d:7b:f5:
                    b2:cd:ab:df:68:7f:bc:5d:15:77:26:9d:0e:00:b4:
                    b4:87:22:fa:80:be:64:3a:64:cf:ae:b5:3b:79:d1:
                    d3:cb:53:79:35:f8:ed:66:71:b5:4e:f6:5f:62:b8:
                    ce:bf:49:b2:fc:57:02:17:88:e8:db:aa:f9:b9:a9:
                    70:f6:24:8a:68:ed:28:fd:3d:2b:cc:31:a7:0a:d9:
                    2a:42:2f:8e:50:51:5a:9b:e9:fd:b9:88:62:de:80:
                    a9:ef:24:8c:42:98:1b:dc:e1:ed:31:d1:08:89:2e:
                    86:88:a0:d4:57:fb:d7:ad:f5:e9:09:75:01:33:88:
                    a3:02:85:ef:b3:9e:6e:5d:e0:c7:c5:21:77:fd:2c:
                    7e:8e:97:65:ea:ee:58:f2:ee:ad:bc:40:c1:5a:c2:
                    ef:b6:36:41:ed:e5:89:ec:16:ae:e6:bb:01:53:a0:
                    38:b7:17:2c:f3:02:c1:c6:ce:2f:56:e9:3f:1b:52:
                    94:4c:53:40:3f:e6:1f:8b:6e:a5:21:d2:d6:f0:df:
                    85:81:3d:53:bf:c5:07:5c:14:e0:8f:c4:9b:ba:8e:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:83:7C:57:5C:47:2A:CB:A9:AB:76:B0:36:D6:EE:30:A0:2E:6B
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:24:3b:46:14:20:a7:8d:19:1e:e5:a5:05:24:52:f3:81:
         fc:88:e1:be:49:59:43:47:99:9d:26:71:df:16:1f:24:e9:94:
         57:b8:4d:f9:18:f0:34:08:f8:fe:f5:28:b4:27:13:b3:45:40:
         b9:8f:db:67:7f:64:8b:df:ca:a4:90:00:2a:66:36:4f:00:50:
         31:dc:84:6d:a4:6b:94:2a:f1:4c:55:0c:db:d8:47:13:57:c6:
         a7:0f:18:11:90:a7:3a:ea:cd:4d:96:97:c4:9c:36:3c:6b:86:
         48:b0:70:ed:4e:6f:00:d8:9e:36:2c:37:68:f5:e2:06:fa:c0:
         20:2b:10:ab:9d:e1:85:5f:10:3f:01:03:f0:1e:7f:69:2a:b6:
         42:5b:b1:a1:49:a8:e5:4e:64:54:a2:c4:6c:38:32:08:f2:4f:
         80:de:c3:8c:ae:04:4b:78:d1:67:1b:66:0b:02:1b:3b:4f:5e:
         f6:20:5e:69:87:8a:a0:9a:12:84:69:8c:ee:4f:78:dd:06:3f:
         69:ca:8d:a1:d2:e1:28:31:25:86:61:e7:17:c0:41:02:72:c7:
         aa:76:42:76:18:86:6e:45:66:d8:23:72:b0:ac:88:ac:a1:61:
         85:70:09:10:88:23:da:fd:3b:52:6b:63:6f:17:c0:c8:e0:f8:
         d0:e6:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:29:46 2026 by rpki-client