This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File:                     8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier:          lz6r0cqlFmsOh/R6XbxaN44GJvJOPUGHZMT+rNOeKIc=
Subject key identifier:   00:7E:82:2A:2A:CC:2C:9F:A3:73:6E:4A:08:0F:78:0C:95:52:13:E5
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer:       /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number:          0126
Signing time:             Sun 25 Jan 2026 03:53:44 +0000
Manifest this update:     Sun 25 Jan 2026 03:53:44 +0000
Manifest next update:     Sun 01 Feb 2026 03:53:44 +0000
Files and hashes:         1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: Xsf3sakgMoXhXuf8nTXL8jydmQyCNIrdyKAqtt3AZ7w=)
                          2: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=)
                          3: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: P4Mm2VNQngkGMc8lCO6eHVGOp7Fy5SVP9GQX/B339mE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
        Validity
            Not Before: Jan 25 03:53:44 2026 GMT
            Not After : Feb  1 03:53:44 2026 GMT
        Subject: CN=697593c8-94a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:45:cf:df:4e:b7:48:75:5e:91:2f:21:66:
                    e5:77:b8:94:32:a3:fe:cf:00:88:dd:cd:8a:56:6f:
                    26:5d:e9:f1:16:a0:da:f0:54:d6:26:7b:17:e8:f4:
                    1d:4c:f4:c8:06:65:77:4e:55:fa:2a:98:5d:94:5f:
                    b2:69:b6:a4:93:9d:b4:80:76:ce:be:be:3f:43:80:
                    aa:0f:e8:b6:7e:d6:43:ba:0a:56:ba:17:1b:88:4e:
                    16:b3:9f:bb:1b:2a:2b:12:a0:ce:49:43:9f:17:38:
                    8e:b7:4e:03:3b:b0:df:29:1e:45:29:6c:45:2d:e2:
                    0a:a4:5d:d1:62:07:50:4a:f0:ee:bf:6d:80:3b:3b:
                    11:45:a9:62:ec:d0:5e:11:be:29:46:bc:b7:da:a0:
                    1c:76:18:ac:80:48:a7:f5:ac:11:10:63:8a:c4:8b:
                    56:9e:93:bf:0c:fe:59:0f:cf:2f:67:cd:e9:8b:eb:
                    58:a7:18:7c:78:ee:3e:b5:82:21:85:73:2e:30:9c:
                    6e:6d:6a:95:8c:06:cc:fa:82:10:af:03:ff:7d:93:
                    80:5f:83:b7:ee:10:a3:a7:65:06:b3:43:97:76:7a:
                    30:b2:02:c2:c2:85:9a:49:21:23:f2:ca:54:3b:0f:
                    28:f0:0a:26:96:67:d4:4c:eb:37:db:bd:2b:76:f5:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:82:2A:2A:CC:2C:9F:A3:73:6E:4A:08:0F:78:0C:95:52:13:E5
            X509v3 Authority Key Identifier:
                keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:d2:a9:96:2d:3e:d7:69:8d:3b:f3:02:61:24:58:54:c8:
         0e:c1:1f:b0:4e:10:f5:ef:bd:db:c8:4d:4e:0c:76:6d:b8:d5:
         fa:20:55:b3:d3:21:bf:b4:08:ba:d1:fa:35:25:f4:73:b4:47:
         81:be:7d:08:f0:00:bd:9c:3c:51:7b:5f:79:30:41:fb:8c:92:
         16:ec:05:6c:37:87:9b:7b:34:d2:09:72:3f:7e:bc:d7:dc:cc:
         06:76:7a:91:84:de:35:a4:5f:3f:f7:6a:62:ca:83:0f:d7:a1:
         da:2c:8e:2c:d7:c4:b0:db:3e:ba:e1:d6:da:02:1b:68:c0:6c:
         f4:59:a4:90:44:ee:18:0f:92:94:b7:90:fc:33:7a:30:af:87:
         02:16:50:ed:a7:2b:ac:91:14:7c:c0:10:27:c8:35:0e:a6:d7:
         99:0c:71:4d:b1:cb:2f:85:c0:34:d3:94:8c:35:99:29:b8:62:
         95:c7:28:79:d2:c1:68:0f:69:7d:38:24:7c:f3:18:f7:f5:f0:
         c1:34:b2:f9:7a:98:13:50:6e:57:bb:be:f2:fd:5b:35:16:01:
         e2:7e:fc:4e:5e:de:8c:e8:45:9d:fe:0e:0a:b5:b5:72:9a:76:
         6d:23:a6:a8:64:d1:c3:3e:b4:7b:ec:d3:c2:21:a6:81:44:74:
         f5:f5:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:34 2026 by rpki-client