This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
File:                     _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json)
Hash identifier:          7qekeILk+9wONMEcThK/vmuRgSqbTVNkgUMdd/qu2Cs=
Subject key identifier:   C5:C6:F4:88:5B:DB:46:81:0C:51:4C:19:AF:A7:D3:AE:DA:AC:08:DD
Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Certificate issuer:       /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
Manifest number:          DA
Signing time:             Sun 25 Jan 2026 04:54:42 +0000
Manifest this update:     Sun 25 Jan 2026 04:54:42 +0000
Manifest next update:     Sun 01 Feb 2026 04:54:42 +0000
Files and hashes:         1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: HogaN9Gjg0Pw1HRKSP0HcfgpNw7UWSUhNK0+Y4E/eLE=)
                          2: 7A3EF584AEAE11F0ADA6ED46C4F9AE02.roa (hash: nrC//1SC2CUB7PaXGvEH1xifzROZPf1pNQzojBdEYXw=)
                          3: 79553296AEAE11F0ADA6ED46C4F9AE02.roa (hash: VBCefNcBKUF39oXPn5eHCv7kvz+CrU3bK4rLPhu4Q/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6
        Validity
            Not Before: Jan 25 04:54:42 2026 GMT
            Not After : Feb  1 04:54:42 2026 GMT
        Subject: CN=6975a212-83a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:4b:77:e2:0f:0d:bf:ea:a8:09:34:70:d1:
                    93:9d:84:d0:6b:fc:04:f4:c7:45:7e:a0:f8:71:9e:
                    d7:d3:f0:56:df:28:68:e5:86:82:2c:c6:17:7c:5c:
                    4e:9b:3b:5a:ba:f4:b7:e6:ba:95:b1:fa:aa:13:0a:
                    e6:c2:0f:11:76:0b:1a:d2:b3:e3:20:b3:8b:83:58:
                    5d:b4:95:d0:46:db:3a:d0:a4:a3:f2:1f:b4:86:91:
                    2b:fa:5e:ae:4d:2d:eb:ea:47:6b:5b:39:fe:4b:4b:
                    6d:e9:37:d8:8e:fd:f0:64:cf:74:94:3f:07:36:bb:
                    4b:95:f9:5e:ee:dd:85:f6:bf:1c:14:e7:1c:09:6b:
                    27:03:31:d6:42:41:0c:50:9b:cd:0f:56:14:5a:42:
                    60:2d:87:55:8c:76:2f:cb:5c:25:52:c3:cb:ce:06:
                    3f:9a:80:89:50:c5:3e:46:12:2c:c0:92:1c:a3:c6:
                    30:86:e3:7d:d8:86:19:76:50:40:3d:70:82:52:70:
                    4a:07:41:6c:8b:0b:3a:97:82:90:24:b4:52:35:81:
                    16:58:73:5a:e4:41:f9:a8:61:a3:a2:70:df:df:f3:
                    05:df:6d:6a:8d:f9:f8:6f:af:73:42:70:d3:67:89:
                    25:62:70:6c:42:bc:0a:f2:38:a9:15:fb:37:29:e5:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C6:F4:88:5B:DB:46:81:0C:51:4C:19:AF:A7:D3:AE:DA:AC:08:DD
            X509v3 Authority Key Identifier:
                keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:c2:ba:14:2f:86:90:db:74:dc:62:d1:4f:50:49:f0:4d:b1:
         29:c6:6f:bc:f6:60:6f:a0:15:fc:a1:92:c2:b2:1d:58:9f:51:
         4f:94:1f:d6:36:96:c7:63:c3:c4:db:b5:a3:ad:69:9f:ca:e3:
         1a:d6:ea:1f:1c:da:84:0a:17:20:2b:ad:50:61:dd:64:8d:a6:
         d8:f4:0c:d8:e7:6b:ac:13:96:65:25:fa:4a:76:72:8e:85:91:
         2f:c7:4e:ae:5c:37:45:9f:fb:bb:46:cf:05:26:7c:5b:00:85:
         7a:09:46:76:9a:df:da:18:5d:58:5e:f6:4f:be:55:97:84:b2:
         f0:57:92:d2:9e:12:7d:09:3e:47:a2:14:1e:15:36:3a:49:64:
         da:e0:09:07:a8:b5:f3:ee:59:82:3f:91:f0:30:a1:23:4b:ea:
         65:01:32:ac:ec:21:0a:75:e6:b4:95:a5:b2:5f:b5:64:2a:d7:
         64:5a:73:4a:f0:6b:3f:99:25:f3:bb:93:bc:43:1a:ba:96:1d:
         2f:86:1f:db:f8:87:68:1e:ed:6b:11:26:f1:fa:e3:14:86:80:
         f1:c3:d5:e1:0a:21:35:42:0d:b0:13:79:af:f9:07:b2:ed:e8:
         ff:93:55:5b:0b:b4:c4:f3:e6:5a:76:ec:80:10:bd:63:16:cb:
         31:0d:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:02 2026 by rpki-client