This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File:                     AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier:          r3tRkm0x306K5/OKUm9bDUMjlq+EHfGujmripS6C1kk=
Subject key identifier:   C7:61:CE:A4:06:D0:4F:5D:5E:2B:54:05:4B:1F:07:57:CD:E7:FA:EF
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer:       /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number:          0280
Signing time:             Sun 25 Jan 2026 00:44:25 +0000
Manifest this update:     Sun 25 Jan 2026 00:44:25 +0000
Manifest next update:     Sun 01 Feb 2026 00:44:25 +0000
Files and hashes:         1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: J8XcHrQKs0Cf7qqv+Z0qUKSKx1FEY2YKV/nzzenXPC0=)
                          2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: R3jRDvm0E8vyU2n+jY+lrRNs85d0z5lzmVh9QqpC5jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
                          rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
        Validity
            Not Before: Jan 25 00:44:25 2026 GMT
            Not After : Feb  1 00:44:25 2026 GMT
        Subject: CN=69756769-d5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:e0:5e:da:b9:80:48:95:62:70:19:44:4f:
                    7b:62:54:6a:f8:c1:18:51:67:a8:08:61:ad:07:d6:
                    ae:6a:6b:fa:e9:b5:81:2c:f1:f2:db:7b:2d:ca:d7:
                    0c:b5:9a:82:6f:1c:c0:81:c9:16:ad:09:7b:be:95:
                    c0:54:36:2b:85:f5:94:d6:95:f6:57:7d:0e:d7:f2:
                    2b:42:09:9a:81:fe:ed:2f:2f:99:f1:26:7e:0d:7d:
                    2b:ea:84:95:6f:fb:18:3e:ad:cc:ff:66:d0:37:75:
                    5e:8a:78:52:d7:df:76:53:aa:60:b9:4c:b8:31:0f:
                    b8:6c:a6:4d:e0:36:e1:a7:91:1e:22:3e:65:fe:ea:
                    1f:cd:62:63:f6:e5:b3:60:0c:2e:9f:9d:07:fd:17:
                    8e:e0:5c:fe:64:8a:4d:5d:c5:12:32:cb:75:5e:bf:
                    58:9c:ff:26:d3:cf:e5:f1:85:d0:3c:92:55:44:0c:
                    c7:e3:08:63:28:94:1c:b0:b0:8c:e8:b4:72:01:05:
                    7a:51:f8:14:e6:f1:60:57:e7:df:d5:ae:21:98:c4:
                    7e:40:c5:be:41:15:66:ab:32:18:e8:68:7a:1e:cc:
                    6d:5c:06:b9:94:b8:91:a8:c7:5f:97:48:fc:c5:a6:
                    fd:c6:5b:28:a5:bc:e5:f1:c4:e0:ae:1d:dc:3b:f5:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:61:CE:A4:06:D0:4F:5D:5E:2B:54:05:4B:1F:07:57:CD:E7:FA:EF
            X509v3 Authority Key Identifier:
                keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:df:21:db:f7:32:06:dc:ce:9e:f6:aa:d7:da:d8:68:9a:d8:
         87:8a:10:50:8e:99:2d:b5:b3:40:b3:86:31:b8:1b:4d:40:4e:
         79:f7:95:98:dd:09:fa:bc:78:10:a8:29:8e:32:32:d7:21:2c:
         ea:54:2c:b8:28:13:ff:da:73:71:a8:88:e3:4a:48:d6:02:50:
         07:31:b0:a5:57:dc:c9:12:69:06:d4:3f:19:7c:18:2f:c5:95:
         35:05:74:9e:8f:74:88:ca:18:2b:e0:0f:91:7e:0c:1c:05:50:
         b4:5f:de:9b:4c:87:ac:02:8c:80:09:a3:e5:67:c6:ee:f4:cd:
         11:a0:fb:fe:c8:2a:8a:1e:0b:f7:f4:18:dc:59:73:2c:9e:2c:
         aa:8b:38:03:ac:74:62:ac:d8:2a:40:3c:0b:31:c6:ad:b9:d1:
         08:c8:e9:47:91:c3:12:50:01:30:6b:6a:ca:17:81:65:82:d5:
         41:8b:91:37:9b:79:cc:b5:2b:e9:bb:94:ab:55:6d:78:ad:6d:
         87:9e:8d:0b:07:ef:9c:d1:f9:f4:9e:99:7a:1a:d3:74:e8:70:
         1a:24:9c:84:e7:c8:fb:0e:71:38:3d:29:55:bd:90:19:0e:ff:
         46:ee:9d:56:1b:ad:6a:ff:3e:76:ca:e9:86:3b:08:96:bc:20:
         6d:62:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:01:44 2026 by rpki-client