This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft
File:                     DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json)
Hash identifier:          GtsfEmv9qg06CcZ9whVLgF19+Lelqei89NnbhcQRlgA=
Subject key identifier:   CF:9C:7D:CF:4C:00:D5:A9:6E:36:C9:0F:1C:20:2C:4D:10:80:8B:E5
Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A
Certificate issuer:       /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft
Manifest number:          01BA
Signing time:             Sun 25 Jan 2026 02:22:45 +0000
Manifest this update:     Sun 25 Jan 2026 02:22:44 +0000
Manifest next update:     Sun 01 Feb 2026 02:22:44 +0000
Files and hashes:         1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: fY/EFbD4b2pzmvFLDBTI46rIFR+4aQMKZOQClQkuUs8=)
                          2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: Kd/nXe8mq0wmUKWwg1yucncDr8Tch9j71lYTXhPxM0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl
                          rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A
        Validity
            Not Before: Jan 25 02:22:44 2026 GMT
            Not After : Feb  1 02:22:44 2026 GMT
        Subject: CN=69757e75-4a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:e9:4b:89:84:9d:5b:aa:9c:1f:b1:f1:88:
                    a5:ce:47:c8:92:8f:3d:9c:e3:f8:ba:d5:7f:20:4c:
                    bd:31:c8:c6:11:33:e8:ab:70:7c:ff:9e:77:f4:d7:
                    ad:52:1a:97:a6:ce:3f:56:8a:cc:08:a7:23:72:18:
                    2d:49:a0:7e:ce:29:13:e0:36:be:bc:f1:c7:a0:0c:
                    8f:65:f5:c5:d2:08:92:d0:32:27:61:58:30:37:b7:
                    00:40:c7:c1:33:05:12:69:29:23:a1:26:98:f8:a2:
                    27:41:3d:43:22:8e:f5:d0:1c:60:0c:a7:d9:c8:fa:
                    7e:07:e3:98:fa:de:ee:dc:0c:3c:61:94:c2:93:e5:
                    51:b3:17:7c:85:ec:e7:7b:56:a6:1c:a8:c6:80:60:
                    6d:90:a4:13:a1:4a:16:c8:8b:f8:2a:7f:83:3c:17:
                    d8:91:56:d3:36:96:eb:ef:20:6a:21:be:a8:4d:c0:
                    89:5e:0b:94:80:7f:eb:a2:84:f9:e1:99:43:f7:40:
                    2a:82:ad:b0:2d:89:1e:72:b2:17:ff:c6:5c:0f:cd:
                    b3:d8:f5:16:86:d9:3c:e6:0a:58:6e:6c:05:d0:9a:
                    12:66:eb:d0:64:5f:a1:2a:3d:4b:37:39:58:de:58:
                    d1:b0:ab:f8:1c:1a:b3:7b:dc:62:e6:79:78:a1:38:
                    42:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:7D:CF:4C:00:D5:A9:6E:36:C9:0F:1C:20:2C:4D:10:80:8B:E5
            X509v3 Authority Key Identifier:
                keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:96:8b:24:da:8e:2b:14:23:90:23:95:a3:64:1f:21:33:88:
         17:2a:35:98:8b:70:13:ed:84:56:0f:cc:eb:52:26:19:93:b4:
         e8:18:4b:7d:11:83:96:3a:23:0d:50:62:67:ef:db:1a:a9:91:
         4f:4c:7e:a3:70:77:b9:a8:9e:ec:62:e6:61:1a:8a:ad:8b:f2:
         12:a4:3f:f1:c1:41:d9:79:21:de:fc:8b:8e:87:d6:e0:cc:b2:
         46:02:85:21:bc:60:0d:4f:65:b6:85:02:8c:b4:ed:21:e8:55:
         5b:af:a8:b4:64:c6:da:e4:5c:54:f5:b1:c6:af:2b:ad:27:97:
         ce:03:96:6f:9a:a5:43:e7:17:cd:1a:75:ac:30:09:43:70:19:
         8d:1f:58:4b:0e:30:81:46:9f:61:91:2f:62:17:d9:37:f5:1c:
         c1:65:86:28:45:98:2d:dd:22:99:de:19:69:7f:af:2d:64:61:
         de:1a:6b:28:1d:31:ee:40:5a:3d:6f:e0:10:d1:de:d3:fa:86:
         ff:90:9c:57:d9:4d:dd:af:01:17:fe:19:cb:ce:60:d7:39:01:
         90:97:48:5c:56:0b:55:15:ea:f6:96:34:64:0b:eb:ec:29:47:
         ed:59:b4:7e:3c:e0:2c:ae:59:bd:ea:2b:4c:fd:89:5b:82:78:
         21:cf:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:06 2026 by rpki-client