This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File:                     R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier:          fN3urOR+6tP0aXwJmnf3zUL0jIrqNVxoJCqNnm7meCc=
Subject key identifier:   D8:C1:31:8A:B5:08:49:A3:B4:32:C4:FA:0A:52:15:2F:1D:33:12:FE
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer:       /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number:          021F
Signing time:             Sun 25 Jan 2026 01:31:47 +0000
Manifest this update:     Sun 25 Jan 2026 01:31:47 +0000
Manifest next update:     Sun 01 Feb 2026 01:31:47 +0000
Files and hashes:         1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: zgIH6OBmRakt8Tngj23IKV50ISQG3IZ4+jxqgT+g2I4=)
                          2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
                          rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
        Validity
            Not Before: Jan 25 01:31:47 2026 GMT
            Not After : Feb  1 01:31:47 2026 GMT
        Subject: CN=69757283-f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:aa:40:0e:e0:bf:03:45:28:a1:75:6e:5a:
                    63:64:1e:1f:97:a1:c7:17:80:65:da:ef:e1:da:85:
                    29:ea:fc:94:72:19:1c:f3:0f:bd:1a:e7:79:c3:4d:
                    77:21:3e:70:df:79:59:29:66:18:cb:cf:e2:d2:07:
                    08:f1:24:ae:a8:f1:d0:2a:1e:21:45:0d:c6:cf:9c:
                    90:a3:28:76:9c:43:f9:cc:09:f3:78:b7:2e:bb:79:
                    c9:73:40:3b:16:7c:f0:81:46:df:ae:85:25:59:07:
                    e3:0b:72:c8:fe:78:fe:9f:94:4d:65:0b:5c:0c:f8:
                    1b:6f:da:7c:83:a9:71:fb:f2:ff:1d:db:2d:dd:62:
                    17:68:0e:33:b9:71:5b:66:96:2a:7b:23:52:3d:7b:
                    33:c4:ba:6d:b5:96:63:37:d6:d6:9f:31:d2:f4:00:
                    5e:c7:2f:14:f5:4c:64:4a:05:50:64:9e:d4:c6:a6:
                    42:23:97:43:8b:91:74:85:a7:2b:18:69:63:c9:51:
                    37:a9:e6:ab:60:55:01:86:98:d9:b2:ac:68:d3:5f:
                    7d:8b:b6:cf:b7:50:a6:77:ca:2d:25:98:5b:d1:b8:
                    e6:a3:e9:1c:32:4c:4e:aa:75:bc:ac:5b:1f:50:f0:
                    25:c8:18:35:71:f6:69:2d:b7:fd:99:b2:b8:73:81:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:31:8A:B5:08:49:A3:B4:32:C4:FA:0A:52:15:2F:1D:33:12:FE
            X509v3 Authority Key Identifier:
                keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:18:40:7a:a2:5a:99:a8:8d:64:8f:bd:fc:c6:91:92:73:88:
         fa:a4:dd:61:07:ea:f4:b3:e8:30:aa:75:3e:53:b4:b5:bd:1b:
         b6:3f:d9:0d:18:0d:3e:e5:cc:08:c6:8c:23:47:70:f0:a1:49:
         35:93:bf:54:3f:2d:28:f4:26:dc:30:5e:35:3b:a8:f0:14:1d:
         0d:a7:d4:1a:e7:07:d2:cc:12:ea:59:fc:6f:95:f0:41:f1:03:
         ee:56:b2:17:b7:b4:cb:5f:42:6b:93:bf:02:18:75:32:7a:2a:
         67:63:f6:b6:6f:9f:e5:1a:42:93:b0:a7:aa:e5:74:16:96:c2:
         46:c6:0a:34:2b:c9:9e:2b:10:0e:96:f5:2f:4a:80:6b:78:56:
         64:af:8c:b3:5f:7c:ff:49:b4:64:ed:0f:a0:70:54:38:a5:c9:
         89:1a:d2:ae:1e:60:26:58:68:f3:c8:62:be:88:36:77:7d:6e:
         a2:1b:de:e5:de:bb:c2:4e:ed:50:c4:35:6d:3a:98:72:b7:d2:
         00:0f:d4:dd:30:da:14:16:dc:6d:1d:a3:51:d4:be:92:d9:8a:
         f0:85:a2:e9:95:be:d5:54:b0:ca:6b:68:b8:0c:66:a0:98:da:
         4d:81:26:d3:53:05:64:e2:15:f4:1b:29:6c:c2:87:1d:83:e7:
         a5:07:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:34 2026 by rpki-client