This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File:                     dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier:          3pkK+9PO7cyWrXIzTBrorFm69K6BaIPcihXpsR2U54Q=
Subject key identifier:   BB:3A:99:FE:AC:4F:56:F3:96:C6:3B:49:43:96:76:0B:32:C9:9D:F2
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       03B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number:          03AF
Signing time:             Sat 24 Jan 2026 23:52:00 +0000
Manifest this update:     Sat 24 Jan 2026 23:51:59 +0000
Manifest next update:     Sat 31 Jan 2026 23:51:59 +0000
Files and hashes:         1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: zi4SU9xPl2Dk1O41/HugzZHR+tNK7xxgAdQZ/kjRi7o=)
                          2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
                          rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Jan 24 23:51:59 2026 GMT
            Not After : Jan 31 23:51:59 2026 GMT
        Subject: CN=69755b20-3e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:29:81:81:02:5e:ec:8e:dc:52:06:38:d6:
                    b3:ae:86:5d:5f:0a:e0:d8:0b:fd:7b:f4:ad:aa:1e:
                    64:e8:a0:42:6d:b0:9c:06:58:f3:25:f6:27:0c:48:
                    50:9a:b5:59:b9:ac:5e:4b:9c:32:9e:11:5e:ff:3c:
                    66:b8:ee:78:d6:b6:59:b6:3c:f7:9f:67:33:b4:cf:
                    06:b6:11:1d:53:a4:1d:16:31:fe:d4:5a:db:9c:84:
                    05:fd:45:8c:a9:0f:05:44:a0:ea:e2:c0:10:67:c4:
                    77:1b:9d:2e:f8:b1:fb:25:1b:c1:0a:a6:9e:e8:75:
                    43:9d:60:45:5f:91:d8:d0:49:42:14:73:37:a4:0e:
                    45:14:51:91:45:ef:d4:fd:5f:95:e9:41:2d:1f:3b:
                    73:75:97:30:74:84:0f:57:ca:d9:42:70:af:33:e8:
                    0a:f1:92:5c:02:5e:d5:69:8c:59:ab:ec:31:51:eb:
                    98:ca:b9:11:6b:14:f6:b8:c9:48:7b:f2:85:60:2c:
                    db:9e:5f:f8:05:fe:da:98:09:95:04:d1:ee:d0:11:
                    78:48:6a:b9:be:4b:3f:83:c6:b9:23:00:37:f5:b4:
                    6b:9d:a5:45:80:e7:ec:c2:59:7e:06:a7:43:dc:14:
                    4f:72:3b:7c:71:55:5f:62:f5:f0:bf:eb:3e:d5:83:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3A:99:FE:AC:4F:56:F3:96:C6:3B:49:43:96:76:0B:32:C9:9D:F2
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:aa:23:25:18:84:d1:08:80:75:74:7b:93:cd:6f:3c:16:
         66:f9:2f:ac:8b:96:2c:c3:6b:d2:d3:59:3c:20:23:70:a9:c2:
         0a:90:e4:49:03:ee:54:37:a0:c2:43:7e:a5:3d:46:24:07:7f:
         15:2b:2d:35:82:e5:88:30:40:6a:0f:76:37:34:bd:28:69:9f:
         ba:47:e4:9d:65:29:e0:a5:bf:9d:a0:8f:7e:46:0f:25:de:dd:
         2e:e0:f7:58:b8:7f:24:0a:4b:78:40:da:ed:72:97:64:7a:0b:
         f0:fb:e6:bf:2c:4a:82:95:21:52:cb:1e:c3:e8:79:bd:5b:13:
         91:7a:a5:63:d2:d5:05:1c:67:74:b3:46:ae:8c:c9:4b:d3:c7:
         01:85:10:64:88:d3:6c:86:70:53:93:74:88:6c:05:9d:68:7f:
         42:eb:b6:14:4b:25:b8:da:93:44:32:b8:37:57:19:4a:ac:5a:
         d6:48:06:0b:e1:12:a3:f5:0e:14:33:79:9f:df:57:30:db:89:
         3f:4c:44:9c:68:a9:48:35:32:70:6f:51:e4:14:a9:96:18:0d:
         4d:6e:54:72:54:91:ec:fd:5e:b5:69:dd:ae:c5:8a:5e:96:12:
         d1:f4:b2:d7:47:8d:9e:76:84:53:bc:83:d9:99:80:5b:b2:3a:
         88:22:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:57 2026 by rpki-client