This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          000Zh1x1jGZZnhCkAUDOuITlRk5ZXuUksERJVDv0i8E=
Subject key identifier:   14:E2:B4:9D:1F:AE:BA:34:2E:7B:36:83:71:26:C2:6C:17:46:2F:FF
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          0115
Signing time:             Sun 25 Jan 2026 04:06:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:06:59 +0000
Manifest next update:     Sun 01 Feb 2026 04:06:59 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: ZZTrpo+RbpwdZJXmI11DAa/qidNTm1KsHD0Zj0pSe3E=)
                          2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Jan 25 04:06:59 2026 GMT
            Not After : Feb  1 04:06:59 2026 GMT
        Subject: CN=697596e3-81ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:01:55:13:dd:69:62:7a:18:7c:4c:21:af:
                    93:e8:6e:4b:82:62:71:81:be:93:8f:d4:86:0b:30:
                    44:42:69:db:c4:c6:be:05:f1:86:f5:a3:c7:ab:da:
                    f5:ae:7d:3b:44:3e:33:09:66:2c:ea:e3:0e:1a:2b:
                    08:35:f1:d7:af:18:e5:84:5b:65:13:c3:f2:e8:c2:
                    f4:3e:83:60:ad:ed:7f:8f:e8:11:1e:bf:9a:42:3b:
                    44:07:e7:3c:57:ce:74:e4:8c:f1:ea:1e:c9:fd:07:
                    8f:17:eb:56:77:f3:bd:11:1a:21:b3:8f:7b:39:13:
                    66:13:96:32:35:be:4a:ec:53:83:5e:8a:d1:f5:8e:
                    8e:7e:0b:43:66:c0:a5:08:b2:c5:a0:e3:06:aa:1f:
                    98:70:70:30:00:60:49:cc:95:64:4f:23:6e:d1:d0:
                    eb:b3:08:78:44:55:97:6b:dc:72:e1:1c:cf:2e:13:
                    5e:9c:6c:4d:26:e2:35:06:5d:f9:2a:0a:8d:76:24:
                    1c:b6:7b:bf:98:58:9a:31:d6:14:00:25:09:71:a0:
                    07:6c:d2:e8:a6:4e:6b:f1:e5:9e:2f:e6:c1:11:9a:
                    a7:6e:eb:a7:e9:7e:63:1e:00:af:82:83:fd:0d:4c:
                    2d:cc:d4:d5:d1:0a:c8:87:f5:f8:f7:87:d1:4e:21:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:B4:9D:1F:AE:BA:34:2E:7B:36:83:71:26:C2:6C:17:46:2F:FF
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a6:db:78:4b:94:61:c2:63:da:73:9a:7e:43:0b:7b:6a:96:
         47:85:1c:98:b8:64:6a:b2:c6:e2:f5:b1:21:3b:4a:c7:89:9a:
         75:eb:5e:ac:21:8c:19:9c:86:f9:f5:48:dd:2d:9d:db:78:92:
         4d:36:b4:8c:81:fc:b6:37:12:f1:05:a0:a7:b0:0c:b7:33:65:
         50:59:77:a5:d6:7b:6b:3c:12:87:ee:8c:7b:6f:83:1c:56:ea:
         77:e1:61:d4:f7:ec:03:c0:19:a4:b8:7b:54:71:34:fb:9e:66:
         c3:02:c5:77:cd:c3:0c:58:3d:e4:09:26:35:e6:01:f1:84:fa:
         7d:43:c6:e3:70:13:9d:fe:f9:87:40:08:e8:bd:50:c3:a8:61:
         8f:7a:1b:ca:f7:af:a1:c0:3c:ea:6f:6c:a3:68:a4:1c:85:d7:
         8c:36:e9:9b:bc:da:8c:7f:9d:ad:6f:80:3f:a5:f4:97:40:f7:
         0f:d7:26:5b:74:65:b9:b2:57:b2:e3:09:8f:7f:d3:55:bf:98:
         58:ba:71:93:cf:bc:90:1b:f1:90:d5:e3:7e:9a:5a:f0:95:42:
         e1:d5:9a:a0:a2:a6:fe:6b:c5:39:42:70:83:03:fc:b0:26:b6:
         1b:12:ce:09:d9:ab:b6:8b:31:46:d9:ef:9d:bb:41:55:e3:25:
         05:2c:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:21:10 2026 by rpki-client