This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File:                     dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier:          In0Qw6opCGIUhTZxg133htr0adGNHyGW53olns7BR2A=
Subject key identifier:   67:D8:3E:F2:02:AC:BC:D3:D1:6E:9A:19:F0:39:05:4A:F3:8E:20:05
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer:       /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number:          0127
Signing time:             Sun 25 Jan 2026 03:54:38 +0000
Manifest this update:     Sun 25 Jan 2026 03:54:38 +0000
Manifest next update:     Sun 01 Feb 2026 03:54:38 +0000
Files and hashes:         1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: XTSwsmMfQ2+VyuiC2apGOYarjoDkWkAK497cwHTcM+g=)
                          2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
        Validity
            Not Before: Jan 25 03:54:38 2026 GMT
            Not After : Feb  1 03:54:38 2026 GMT
        Subject: CN=697593fe-c8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:99:b9:57:75:40:07:db:8d:c5:fb:f4:f7:e9:
                    06:a0:7e:42:e4:0a:bf:11:82:13:2c:1e:e4:e4:57:
                    3a:54:67:e0:aa:18:3f:14:0f:77:d9:10:8b:15:6d:
                    2a:c9:d2:85:07:97:e8:7a:47:5b:5b:2b:a3:c6:ec:
                    05:15:38:2d:28:ba:b1:c3:8e:d6:d8:33:77:cb:6b:
                    ac:3f:ad:da:bd:78:b0:33:7e:82:1d:c3:02:5c:4e:
                    f9:ad:41:87:ab:e6:d8:9a:e9:27:c8:24:a8:6d:b9:
                    38:d0:95:3d:b8:b9:11:d3:f1:0d:5d:77:8d:c6:3a:
                    ab:36:d0:55:b8:38:40:06:4a:59:c8:09:9c:7d:3a:
                    1b:7b:28:6c:14:2a:93:cb:26:a1:59:18:5f:eb:a8:
                    09:5b:63:a3:bf:2f:15:99:1c:4d:79:28:56:ef:09:
                    84:b2:ab:e1:27:48:8e:c9:96:01:5a:ee:c3:ef:48:
                    b4:2a:ce:d9:60:d8:e8:09:43:e3:5f:79:63:83:ad:
                    6a:3b:8a:44:bc:d3:f9:a9:0d:89:a0:fe:a2:fb:7b:
                    9f:59:8b:2b:d3:34:cb:d6:10:98:32:00:7f:14:17:
                    3d:90:61:bb:2b:cd:c9:9d:42:80:60:91:64:9f:c7:
                    d6:4f:7a:94:d7:bf:a5:99:f8:3a:e4:30:2a:74:fa:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D8:3E:F2:02:AC:BC:D3:D1:6E:9A:19:F0:39:05:4A:F3:8E:20:05
            X509v3 Authority Key Identifier:
                keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:ef:18:b9:d8:d9:43:a0:c6:26:77:4d:ab:b8:5b:f1:b2:
         8c:e5:75:01:e2:5a:7e:47:e4:be:08:5f:75:6c:f4:7b:34:92:
         7e:b2:6a:9d:9a:c3:71:b4:48:0c:34:25:ee:4c:57:23:75:3c:
         70:fd:d4:a7:20:5f:68:92:13:91:1d:5b:f7:7f:7f:ee:07:f4:
         8d:4f:54:5e:81:8a:67:be:ba:29:85:c5:a8:25:62:46:65:bb:
         9e:54:7e:89:34:59:43:db:47:3f:d6:72:ac:10:ef:44:23:dc:
         a7:6e:4d:b5:c2:48:00:65:06:c4:f9:2a:fe:26:52:7f:0f:24:
         d3:58:a7:5c:46:94:5b:59:0d:97:b4:cf:94:4e:66:f1:45:f1:
         81:16:7f:2e:14:fa:07:f0:86:c5:ce:06:37:9a:52:f8:72:58:
         a3:7d:fb:69:3b:48:b0:4b:9b:39:d4:e8:7f:c4:96:fb:45:fe:
         f7:13:46:15:08:ce:39:82:2b:bf:59:cb:ec:e4:68:e1:30:01:
         9f:5f:e8:fd:3a:b0:7c:88:bf:1b:62:87:34:1b:8a:dc:45:e0:
         5b:4f:75:40:b5:6f:b6:48:ff:89:5b:a8:04:bd:02:31:14:09:
         49:49:93:b8:59:6a:f8:bc:55:56:96:2f:bc:9d:d9:48:49:16:
         23:2e:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:15 2026 by rpki-client