This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File:                     IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier:          CBCijhlCTWOWzY7jipdCVWE8YOjwgQRqerdoG81oXik=
Subject key identifier:   D6:53:EC:8C:CC:9A:ED:87:55:A4:1C:41:CF:10:8E:14:B9:93:D9:C4
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number:          0112
Signing time:             Fri 23 Jan 2026 04:05:26 +0000
Manifest this update:     Fri 23 Jan 2026 04:05:25 +0000
Manifest next update:     Fri 30 Jan 2026 04:05:25 +0000
Files and hashes:         1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: IgON+ZfXJH2fmr2NAsVOkHQR78dnOiyM/846jVrwe/Q=)
                          2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: U+YpJjsdpIii+x7KSl554lHw0RtKScpC+wz0GcX2Ss0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
        Validity
            Not Before: Jan 23 04:05:25 2026 GMT
            Not After : Jan 30 04:05:25 2026 GMT
        Subject: CN=6972f385-1643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:9d:27:19:f6:8f:43:a0:a2:34:b0:76:1c:
                    10:4e:b3:50:d9:0a:59:99:73:dd:e6:20:d1:f3:5c:
                    a3:dc:44:81:86:e0:03:46:60:da:99:b9:2e:fe:df:
                    5d:a2:96:bb:22:97:27:73:3a:57:be:38:fa:b9:22:
                    6c:3b:d7:29:3b:97:ad:8e:8d:95:a1:dd:b0:01:31:
                    12:c4:b1:6b:3f:a1:ce:29:06:c0:c2:12:04:c4:24:
                    b7:e3:7f:4a:e6:98:d1:ab:2a:73:04:fe:68:54:7d:
                    ef:94:28:45:df:ac:f2:55:5b:17:06:88:8f:8f:a4:
                    e9:07:38:d1:bf:e8:bf:56:75:14:58:86:31:2e:7e:
                    21:24:45:f2:ab:53:a3:8f:91:8a:e1:9c:a6:10:8a:
                    74:44:c9:97:87:1d:17:f0:e7:b7:fb:4e:eb:fd:62:
                    d3:4b:92:99:fe:af:1b:0f:6c:41:9e:0a:2a:1a:19:
                    8e:0c:14:86:05:59:ec:84:51:e3:c1:28:7d:90:f8:
                    25:2e:a2:57:5c:13:30:b2:e2:d1:0f:ec:83:b5:74:
                    66:bd:cf:7e:47:c0:1d:ca:6e:01:7e:8c:82:ce:ea:
                    78:53:40:70:e3:b1:af:84:84:4e:7c:f4:d9:ed:4c:
                    26:b9:eb:6a:e1:1a:c5:59:26:07:f1:51:5d:c8:1a:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:53:EC:8C:CC:9A:ED:87:55:A4:1C:41:CF:10:8E:14:B9:93:D9:C4
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:49:01:bd:7a:b1:48:d9:c1:c6:30:47:40:06:95:79:59:
         b5:4d:3f:3d:44:62:c9:4f:78:bf:3d:d9:1e:4e:2c:37:ca:3c:
         54:4a:e9:f9:ee:b7:3f:33:cd:ad:79:39:2f:f4:74:74:c3:74:
         da:5e:63:d2:36:7f:0f:44:f4:fa:f6:79:52:37:56:54:20:8c:
         74:3f:17:6d:0b:83:c1:19:2e:5a:bc:e0:80:f9:41:3e:f3:c3:
         66:dd:7d:bf:8d:10:72:cc:a0:eb:ba:3b:80:3a:18:bd:64:5a:
         e4:e3:ad:25:df:d5:a0:73:d4:1a:6d:37:99:fa:de:a5:9e:eb:
         2e:75:22:f5:2e:73:ff:c2:35:31:86:0c:e3:bc:93:63:c4:de:
         06:50:83:fc:2c:c4:3a:ef:9b:78:3c:22:e5:d8:62:89:d3:ab:
         2d:01:1d:6b:2c:74:34:09:3d:37:59:43:ab:db:1b:9a:51:95:
         a9:c1:e7:4c:79:4c:7a:75:d7:1e:96:0b:ce:de:8e:cb:83:8b:
         48:1e:92:7f:7b:33:70:36:f0:ce:e6:04:1a:f9:08:c4:92:90:
         8c:92:d9:0d:27:7d:19:84:76:9a:3f:24:d2:5a:1a:df:87:79:
         0c:42:9d:9f:e4:e5:5b:ce:de:bd:b3:c4:af:5f:0b:1c:11:23:
         5b:2f:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:57 2026 by rpki-client