This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File:                     MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier:          i88EPiA5+RLZmO3rbJh4/SQH1n4bDAlyzSbvW9xDzl8=
Subject key identifier:   4D:F2:33:AB:79:19:87:0F:17:FE:83:75:4E:22:F1:6D:79:52:4D:B6
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer:       /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial:       0CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number:          0CCB
Signing time:             Sat 24 Jan 2026 17:51:01 +0000
Manifest this update:     Sat 24 Jan 2026 17:51:01 +0000
Manifest next update:     Sat 31 Jan 2026 17:51:01 +0000
Files and hashes:         1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: ANXljqbBCVmGIsnKeknolO06xGdTmkH+GILaaQH/sEg=)
                          2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: LXTrgQN3T+0OVcDzvaM6T5a0p0NXB+0zRwSrfQRhFSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
                          rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
        Validity
            Not Before: Jan 24 17:51:01 2026 GMT
            Not After : Jan 31 17:51:01 2026 GMT
        Subject: CN=69750685-ab67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:4a:09:eb:18:49:c5:84:51:25:24:f3:a7:
                    2e:01:3a:0d:7e:e5:8b:d0:ea:e7:ec:de:1c:0e:d1:
                    b7:f1:ce:a7:19:31:3c:74:0a:77:fd:00:0f:ef:70:
                    27:ac:d1:d4:c1:d2:f4:f3:a6:28:88:63:90:f0:82:
                    ac:67:d7:d1:a4:cf:ba:d6:67:da:67:e1:a6:15:39:
                    06:cb:ea:0c:07:78:16:6f:5d:7d:8e:f1:b7:cf:22:
                    90:f2:80:5a:39:e1:f6:64:f8:7c:d0:9e:b6:6e:73:
                    d4:86:09:11:c3:f8:b2:19:89:bf:3a:25:0a:96:64:
                    e3:8a:10:fe:e6:a8:ec:c4:d6:ee:88:df:31:41:5c:
                    ac:1a:ed:8e:bf:09:94:d4:7d:fd:74:ac:f7:75:16:
                    5d:86:c0:29:39:13:02:2d:1c:7c:8b:39:69:a5:e5:
                    b9:9f:3b:6c:f8:ca:7e:ea:f8:b3:c9:99:b0:87:1e:
                    c8:ec:91:63:87:4d:af:aa:fd:e4:37:d3:a7:94:e3:
                    9d:ad:86:86:22:3f:7b:31:03:3b:e7:06:62:80:c3:
                    1e:29:ec:a7:78:b7:5d:e0:21:78:ce:2d:c3:f5:36:
                    04:10:6b:07:fe:cf:af:65:cf:c0:1b:d0:3b:76:8d:
                    90:97:7e:41:9d:d7:16:70:28:81:f2:c4:e4:05:3f:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:33:AB:79:19:87:0F:17:FE:83:75:4E:22:F1:6D:79:52:4D:B6
            X509v3 Authority Key Identifier:
                keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:38:94:a4:90:94:41:cb:4b:c5:ba:a8:2c:6b:9d:fa:8e:
         31:2d:f2:5e:6d:cd:02:7e:99:0a:90:d8:42:a5:17:fe:6f:25:
         09:e7:65:d4:52:91:47:66:4d:d6:d6:c7:fa:3e:50:e7:98:48:
         cd:e7:e1:4a:ff:32:63:c0:38:56:d3:16:bc:83:5f:e3:82:86:
         d5:3b:5c:63:74:cb:67:d3:0f:9f:09:7b:91:a2:f8:b4:a9:ee:
         f3:5e:79:67:39:f4:2f:cc:ae:f9:c6:a2:4a:1a:ac:cf:5e:39:
         40:16:70:a8:a9:2f:54:97:77:ef:9a:b3:28:71:01:fc:54:fc:
         1b:3d:02:e6:90:2d:c7:db:38:e4:b2:46:28:4f:bc:ca:45:9d:
         d7:07:dc:04:72:c6:de:71:25:4b:2e:fb:35:5a:1d:f8:1b:b1:
         6b:46:20:d5:74:5d:69:90:9f:96:0c:04:03:27:4f:8a:26:f4:
         d2:11:6c:63:99:66:65:19:cd:c2:61:fe:5b:7c:f6:a6:8f:c8:
         a6:3d:16:f8:46:5a:28:f5:c0:4f:f3:18:ff:97:28:a5:87:34:
         a2:a4:0d:07:7d:b0:59:b2:72:ac:21:62:23:2a:97:66:f7:bb:
         5c:12:01:b1:86:f3:11:1a:00:3f:83:44:d7:25:da:fb:1a:af:
         fc:eb:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:59 2026 by rpki-client