This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
File:                     cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft (raw, json)
Hash identifier:          FwnnLzm5v44/7hxOHzKilwGySbr/iy+Z2d7gZ0VpE88=
Subject key identifier:   FC:47:17:52:41:C1:E3:DB:E4:AF:00:76:F4:A1:98:87:8F:57:48:0A
Authority key identifier: 70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED
Certificate issuer:       /CN=A9171996/serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
Manifest number:          33
Signing time:             Sun 25 Jan 2026 06:37:12 +0000
Manifest this update:     Sun 25 Jan 2026 06:37:12 +0000
Manifest next update:     Sun 01 Feb 2026 06:37:12 +0000
Files and hashes:         1: cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl (hash: SnKVS3PcRtXy/spI+STqWNylewncuW5wrTpmWVgo9cQ=)
                          2: 125C30DAAE6811F09E31E129C4F9AE02.roa (hash: AgPQ+g0vVS1AcBmkA5KDmZRoTP4TQytZY60/q5U1Jhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=704C39E9B2302EC97A9CAE99ECE7945B81F2CBED
        Validity
            Not Before: Jan 25 06:37:12 2026 GMT
            Not After : Feb  1 06:37:12 2026 GMT
        Subject: CN=6975ba18-40b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:66:80:33:97:e7:d3:b5:b9:e7:16:a4:ec:
                    3e:ca:fd:fc:c1:2b:fd:d7:89:89:d2:0b:b1:5e:63:
                    0b:bb:57:25:95:1f:d4:29:1d:f4:65:31:04:55:e7:
                    73:ef:0d:6c:67:1c:97:ae:3c:8c:88:b1:d2:7d:1a:
                    84:10:17:35:19:53:be:b6:f2:65:98:a5:88:72:25:
                    54:60:84:8d:25:39:ba:4f:64:73:b5:99:28:51:c7:
                    3c:bd:74:aa:8a:49:4f:6c:f8:2b:87:34:75:70:96:
                    f9:f3:1c:f6:8c:1e:bd:c9:16:8f:31:8a:fd:ca:f7:
                    62:51:6f:5f:65:37:21:be:24:9e:37:d0:7f:79:49:
                    ec:dc:bc:6a:b8:de:d7:41:9e:8d:08:96:c3:0e:26:
                    11:3a:73:67:2f:e6:e9:8d:c9:2f:2e:e6:0a:f6:0d:
                    94:75:36:16:6d:44:d4:70:0b:bc:f9:59:37:69:6d:
                    f7:48:1e:18:71:58:d1:71:70:09:65:b2:ab:74:e7:
                    ca:c6:e3:9b:7f:36:93:13:b4:41:b4:a4:66:c3:3a:
                    45:94:08:14:9d:fb:90:63:81:db:20:03:fd:31:92:
                    b1:d9:76:d1:c6:d3:8c:be:55:fd:4f:33:9e:3f:37:
                    90:84:5e:71:13:8b:8c:ab:33:1c:e7:5f:f5:f3:ff:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:47:17:52:41:C1:E3:DB:E4:AF:00:76:F4:A1:98:87:8F:57:48:0A
            X509v3 Authority Key Identifier:
                keyid:70:4C:39:E9:B2:30:2E:C9:7A:9C:AE:99:EC:E7:94:5B:81:F2:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/AF7F4D6CAE6711F0B534F626C4F9AE02/cEw56bIwLsl6nK6Z7OeUW4Hyy-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:1d:c6:6f:aa:dc:45:18:64:e1:1b:4a:47:6d:cd:15:de:
         df:c5:48:ee:d3:74:18:be:18:30:53:a6:11:2f:42:e2:03:b5:
         24:05:60:c1:01:39:d1:e5:85:74:eb:ab:0f:95:ce:59:1f:73:
         ce:ab:b0:b5:ac:2c:42:55:d5:27:92:19:4b:63:63:1d:57:e3:
         62:7c:be:50:84:9d:84:cb:64:d6:7a:8a:52:e1:f4:a0:d7:9f:
         f8:ee:25:9f:1f:2f:6d:38:c0:50:02:cd:64:54:71:00:da:ac:
         fa:b9:27:16:23:b1:11:27:31:7b:d4:1a:b9:e6:5d:aa:79:25:
         78:44:0f:6a:f0:54:fe:50:f3:1a:36:e6:5c:d9:50:43:b6:e4:
         f0:14:4f:10:cf:a0:8d:9d:a0:83:be:12:66:ea:96:8a:ad:de:
         cf:4b:25:6a:4b:39:65:b8:e5:c6:d6:30:ca:fa:f5:33:7a:2b:
         9c:59:dd:db:b7:8d:71:6e:82:8f:16:59:20:1e:07:91:52:cb:
         3f:cd:89:d8:a2:fd:72:ca:d1:b1:a3:63:4b:5a:3b:68:37:fb:
         0d:03:af:14:48:61:5f:c3:5f:92:84:f8:93:46:54:07:25:e8:
         77:4c:c3:08:e8:f4:dc:89:30:46:c3:57:d8:74:da:1a:31:4f:
         33:6a:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:58 2026 by rpki-client