This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
File:                     CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json)
Hash identifier:          lvclQLOm7UgagupHaWVy79WvHOYMT8eqr26lB5b1Pl4=
Subject key identifier:   19:C9:1B:B9:0F:B7:8B:10:62:DD:CB:35:21:91:B2:6A:2E:26:6D:42
Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA
Certificate issuer:       /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
Manifest number:          78
Signing time:             Fri 23 Jan 2026 05:51:39 +0000
Manifest this update:     Fri 23 Jan 2026 05:51:39 +0000
Manifest next update:     Fri 30 Jan 2026 05:51:39 +0000
Files and hashes:         1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: dTjRndrgY5IqHE3CzC1f3bhkwuAjfeUtnx7F3hkD7kA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA
        Validity
            Not Before: Jan 23 05:51:39 2026 GMT
            Not After : Jan 30 05:51:39 2026 GMT
        Subject: CN=69730c6b-2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:6f:f2:19:9d:4b:a8:88:7a:9b:cb:56:ba:
                    55:32:ac:37:00:85:0e:af:02:ca:e1:c0:d8:58:3e:
                    89:bf:75:68:de:63:d5:78:ce:4e:16:68:27:e7:01:
                    7a:4d:27:cc:8c:f0:f7:fb:e6:b2:4d:ae:a8:be:95:
                    d7:55:e6:ac:43:64:e3:ec:3d:61:9a:25:64:83:f4:
                    a5:12:b7:60:75:22:8c:ec:52:de:ed:c9:4d:d8:43:
                    5f:04:93:49:43:5b:11:4e:f1:13:19:f3:c4:b1:e3:
                    42:de:02:73:05:46:20:df:2c:35:a1:63:57:34:9c:
                    d1:dd:9c:b2:62:77:b0:8a:4d:73:61:9d:4d:93:c4:
                    89:a6:ad:6e:b6:7a:24:c6:97:ec:1d:10:2e:57:c5:
                    01:f7:07:67:7d:d9:d5:67:5e:6b:56:1e:49:7a:bc:
                    0f:31:f1:4a:45:ab:4d:b0:ce:71:7a:0b:75:1b:4a:
                    65:11:12:18:ae:5e:18:bc:d8:ca:9a:f0:cd:38:af:
                    ad:bc:53:36:7b:81:2d:b3:17:8f:44:0a:72:f4:8a:
                    51:e0:b9:24:d3:52:c5:a7:2a:09:dd:49:2b:b3:c4:
                    91:74:ea:ab:f1:4f:48:48:28:fa:e2:23:67:de:20:
                    0a:ef:db:8a:ef:25:b3:02:1e:2a:dc:b1:54:87:28:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:1B:B9:0F:B7:8B:10:62:DD:CB:35:21:91:B2:6A:2E:26:6D:42
            X509v3 Authority Key Identifier:
                keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:ba:20:91:82:b6:64:49:b9:84:d0:26:f2:a0:e3:e4:c1:
         0b:91:90:73:02:69:d5:04:cd:d2:ca:7e:cf:62:12:69:15:b3:
         b3:7d:a7:e9:01:d6:30:7b:1d:de:e8:fd:f8:52:ca:22:28:91:
         7b:58:67:ea:2e:3a:30:3f:3d:6d:f5:b4:81:05:15:4c:e4:7e:
         da:47:70:90:95:00:65:87:87:2e:a1:83:00:83:1b:41:ad:c0:
         57:b9:8f:76:d4:6a:af:d2:42:b5:a6:2e:51:21:1b:91:ea:a2:
         3e:c4:e1:f5:8a:29:af:67:a8:e3:09:ef:59:ef:7a:94:ce:9b:
         ab:1a:5c:18:b5:50:e0:60:8a:69:12:eb:8e:5e:d0:93:41:d4:
         ea:fe:20:ae:a7:3f:be:58:94:61:b0:60:1b:c4:9d:fa:c3:24:
         81:68:fa:ac:34:7c:0b:e7:ce:e2:03:c9:6f:45:49:a0:2b:ff:
         73:d6:eb:8f:53:81:82:a6:d2:df:01:a1:72:f0:bb:f3:9d:5b:
         83:d8:16:9b:f3:b7:8c:84:47:3b:52:07:ca:fb:bc:0c:8f:2d:
         e6:d9:db:43:2f:f6:aa:b8:43:68:6c:1e:ba:3d:35:d8:f4:d8:
         13:6d:63:d0:59:07:ae:f1:26:cf:1b:2e:41:d0:25:34:17:f1:
         90:61:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:54 2026 by rpki-client