This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File:                     4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier:          0pyx58/VN3zzpUr3PwZGLbcVauktKEs5pdTLS4560hE=
Subject key identifier:   AA:E0:CB:2F:86:D9:D5:B8:83:7C:93:A8:F0:FE:1B:1D:60:77:BC:47
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer:       /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number:          D8
Signing time:             Fri 23 Jan 2026 04:52:42 +0000
Manifest this update:     Fri 23 Jan 2026 04:52:41 +0000
Manifest next update:     Fri 30 Jan 2026 04:52:41 +0000
Files and hashes:         1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: OHhfvLN6Yi2CZlkh/vyuAe7FIdNZjMGIH3dNWtYA+cY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
                          rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
        Validity
            Not Before: Jan 23 04:52:41 2026 GMT
            Not After : Jan 30 04:52:41 2026 GMT
        Subject: CN=6972fe9a-7682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:fc:85:52:83:1e:84:4f:5e:d0:88:e2:72:
                    92:9c:d6:3f:3c:22:0a:ac:99:3a:65:f8:52:2d:c8:
                    e1:17:4a:a3:dd:09:8f:76:fe:bc:ff:82:9a:f7:77:
                    c1:b6:8d:63:bf:a0:f5:9c:ec:73:eb:c8:22:6f:5a:
                    66:74:2a:f9:06:35:43:b5:e8:5a:bc:fc:38:a5:41:
                    dc:04:0f:33:cc:f1:6b:d1:78:39:a9:57:cf:d1:00:
                    3a:cc:a2:b7:9d:fa:e2:ff:a7:58:40:ba:80:d6:a8:
                    f3:42:0a:44:5f:8b:0d:ec:b1:89:b2:c0:a8:80:18:
                    e2:d0:ac:eb:ae:fe:52:91:ee:d6:62:be:c4:0c:d2:
                    7d:fb:92:d8:ca:3f:74:85:ad:1d:58:c7:7f:09:d1:
                    bc:9c:18:f8:25:e7:72:0b:5e:8d:f0:c1:72:a5:74:
                    4a:02:d8:59:1b:56:4d:99:b8:41:5d:10:e5:8a:a1:
                    30:d5:f9:62:45:c0:d5:e0:6c:5b:ec:40:6a:ae:af:
                    bd:85:82:a4:14:c0:fa:b5:a8:21:35:ef:d1:b0:c5:
                    f8:d5:d7:8f:d2:5d:5f:f9:46:0a:b3:e9:64:94:03:
                    88:1b:b9:a0:f6:05:e8:f7:8c:f2:d5:14:2d:cf:bb:
                    6d:10:71:c9:6b:5b:2a:0f:e5:e2:c7:e9:01:f1:3b:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:CB:2F:86:D9:D5:B8:83:7C:93:A8:F0:FE:1B:1D:60:77:BC:47
            X509v3 Authority Key Identifier:
                keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:60:52:d1:35:99:7a:48:54:76:fb:ea:b8:87:97:ea:88:88:
         a4:9c:3e:05:ae:10:e0:08:5c:5f:6a:36:76:83:1a:91:bc:d9:
         b9:65:62:ea:fd:d9:ca:94:da:ca:2f:cc:3a:05:f6:3a:73:20:
         44:34:ed:65:e4:6c:c9:d3:f5:e5:ce:39:e3:90:74:e1:0d:a6:
         bc:b0:b2:be:2b:56:c6:49:73:fd:24:67:87:42:3e:b3:a1:87:
         00:1e:bc:1e:18:d0:db:c1:14:88:94:ef:c6:00:76:24:a9:36:
         5f:56:02:1b:bf:8c:61:eb:b5:a2:40:f9:95:76:1b:cb:22:86:
         27:ce:d2:b3:5b:80:d9:48:35:18:bd:f0:3b:52:78:f8:a1:1a:
         ac:84:09:14:df:b6:f9:70:2a:bd:2f:6e:da:14:e1:30:c8:18:
         ab:96:07:3e:5b:16:cd:1f:0f:9f:83:0c:7c:14:d5:0a:43:79:
         7d:48:5f:4e:4f:f8:6a:21:ba:4a:30:9c:10:c9:76:cc:91:68:
         f7:38:2d:fb:2e:48:b1:64:21:c3:28:a5:a8:61:4c:12:22:b6:
         4d:97:9e:46:66:c8:39:48:64:94:03:42:79:ed:b7:6e:d7:f5:
         50:f6:21:0f:86:2a:11:ea:73:b2:64:8e:e6:23:46:1f:1d:6a:
         8a:d7:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:01 2026 by rpki-client