This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File:                     P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier:          jrbrs5EgrugFhDZnDn4GrWMx1DOEXwMYWPbyXtohrzo=
Subject key identifier:   A8:F2:94:E1:E8:76:76:A4:3A:8A:0F:CB:4B:9A:87:1E:FA:2A:09:4D
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0D21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number:          0D0C
Signing time:             Sat 24 Jan 2026 17:44:35 +0000
Manifest this update:     Sat 24 Jan 2026 17:44:35 +0000
Manifest next update:     Sat 31 Jan 2026 17:44:35 +0000
Files and hashes:         1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: bznIXPFUTlZqVRSFPEPXJyrlW1sYuGjVJSOv1FFeev0=)
                          2: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=)
                          3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=)
                          4: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: Jan 24 17:44:35 2026 GMT
            Not After : Jan 31 17:44:35 2026 GMT
        Subject: CN=69750503-f78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:c8:02:db:5a:e5:a5:b5:cf:3e:90:d6:e6:
                    7e:d4:2b:95:cb:d4:96:e1:7f:9f:71:9f:69:e7:6d:
                    9a:47:50:77:f1:8e:3f:21:83:22:24:40:0a:6e:4a:
                    f6:85:fe:27:33:fc:b8:e5:21:f1:91:a3:61:77:d9:
                    02:6c:af:18:96:1b:d0:57:83:92:b1:7f:f0:a5:76:
                    ca:eb:93:75:91:55:a9:42:05:c8:79:27:c3:a3:4f:
                    06:40:f2:c4:69:75:59:6a:7a:ad:e2:02:5e:e3:22:
                    6e:f8:33:1b:45:7a:bd:99:8f:8b:74:2d:e8:32:d7:
                    32:58:17:2f:5d:6d:46:42:b9:ca:c9:65:fc:88:19:
                    5f:64:d4:0f:81:62:a1:e4:5d:30:32:81:fb:af:89:
                    c0:68:39:1e:42:22:4e:93:29:2a:7c:b4:14:5f:3a:
                    3c:42:e8:a7:df:0a:a9:66:43:92:ea:3a:ac:48:30:
                    ae:cc:76:76:21:11:ad:3d:6b:da:7d:22:df:bc:41:
                    b5:d7:4a:f9:48:c2:26:76:15:51:22:1b:b6:27:e1:
                    43:47:0f:be:63:de:f8:29:be:91:ef:16:6f:fb:2b:
                    62:12:5a:4f:fb:ba:1f:00:66:54:a6:ad:e7:bd:74:
                    f2:f9:79:a2:f5:ae:5f:90:47:f5:a7:cb:09:03:d0:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F2:94:E1:E8:76:76:A4:3A:8A:0F:CB:4B:9A:87:1E:FA:2A:09:4D
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:ec:66:de:f4:e1:07:2a:29:a8:9c:5c:dc:71:2f:6f:de:
         7b:ac:ce:35:17:47:86:86:5e:74:88:fd:38:10:1f:f0:2a:60:
         85:60:50:5d:cd:97:ca:88:10:cd:bc:89:35:7e:ac:fa:4b:20:
         4c:cc:c0:ed:41:d4:84:07:d1:36:10:80:4d:1b:70:dc:66:7f:
         20:6c:f2:d9:4b:e5:16:d0:f6:94:ad:40:bc:61:39:14:00:43:
         2a:81:7e:43:00:5f:12:66:73:c6:a8:3e:0d:d5:79:1a:06:e2:
         59:e1:8b:bc:b0:e0:ab:1c:79:7c:5b:6f:19:68:ad:a7:bb:c0:
         6b:aa:24:b1:78:a6:f7:85:f7:07:51:08:c5:84:8d:b2:86:bd:
         0f:38:a2:80:66:eb:ad:9e:5c:a5:cd:9a:56:47:d2:15:f2:57:
         8c:f8:fd:2d:28:b9:8d:25:d0:cb:8d:e2:ac:ba:14:92:15:16:
         01:14:30:59:07:f3:7b:39:01:3f:70:7b:d4:60:f4:84:ad:5b:
         79:bd:ed:3f:97:67:6f:63:ba:b6:62:a7:d3:e6:96:2b:49:ad:
         2c:47:e0:fb:76:8d:75:0a:9e:f9:29:79:60:d5:c7:33:4e:ed:
         92:18:1c:3c:ef:24:ab:a9:d2:70:ef:17:32:5f:e2:9a:a5:41:
         e7:79:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:59 2026 by rpki-client