This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File:                     aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier:          88sHWrxB4TOjaPXVXC5h0p5Y9hClf4+SpjT6ywg9sGM=
Subject key identifier:   09:18:30:87:32:B4:8D:C2:48:67:13:9B:59:D5:B3:2F:25:B8:04:82
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number:          0243
Signing time:             Sun 25 Jan 2026 01:08:55 +0000
Manifest this update:     Sun 25 Jan 2026 01:08:55 +0000
Manifest next update:     Sun 01 Feb 2026 01:08:55 +0000
Files and hashes:         1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: 7WudV1Fok8sTrWe2Bwm73cwWJlc/dXeCVD0woyPUcOI=)
                          2: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=)
                          3: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Jan 25 01:08:55 2026 GMT
            Not After : Feb  1 01:08:55 2026 GMT
        Subject: CN=69756d27-769b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:34:9c:19:b2:79:28:d8:42:fc:99:96:3c:
                    75:41:15:70:db:0d:dc:e9:f2:0f:e6:23:a2:f2:f8:
                    33:90:80:3c:5b:51:09:7d:2c:77:7e:e8:e4:f2:19:
                    b4:68:a9:56:6d:49:ef:72:95:72:c8:66:ad:fc:e1:
                    8f:86:f2:9a:e4:8f:22:7c:34:96:60:6f:67:90:4f:
                    0a:37:1e:ec:ce:37:88:05:52:58:64:40:41:11:f2:
                    6d:27:2b:e5:13:b4:47:4f:14:37:94:1b:d4:47:96:
                    e4:50:46:ae:23:ba:2d:a3:03:7a:0c:9f:12:02:46:
                    d7:c1:89:82:a2:52:63:74:ae:63:78:3e:27:9c:69:
                    77:4e:14:9a:8b:c3:f2:7c:48:a0:cc:bc:e1:31:0d:
                    03:b9:3e:98:c9:e9:c6:08:17:ec:75:e6:70:ac:15:
                    e5:8e:ce:07:1d:8d:d9:6a:ac:87:bc:53:ea:41:9e:
                    3a:c1:26:b0:f5:35:e3:c0:e8:16:c6:ee:48:51:2d:
                    53:cf:6f:aa:c3:32:a7:ed:18:7e:c3:99:c1:f2:df:
                    f9:54:57:19:8e:7a:58:37:fb:ce:b6:b0:c6:79:74:
                    80:52:94:0f:4b:5c:98:ce:08:a6:ed:cc:80:97:80:
                    0c:1f:db:f9:d2:7b:1a:c4:20:34:08:2b:73:fd:2f:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:30:87:32:B4:8D:C2:48:67:13:9B:59:D5:B3:2F:25:B8:04:82
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:34:c1:3f:b0:92:ac:81:8c:e1:93:9e:3a:fd:72:9c:65:
         e9:b8:99:d9:0d:e0:19:d4:f5:7e:3d:52:7f:60:0f:28:f0:ba:
         09:08:12:be:01:60:6c:02:91:fc:2b:9e:6d:26:4c:54:59:d0:
         ab:d0:ed:c3:fc:ac:5c:30:bf:9a:a1:de:e4:ad:a0:fb:a3:0a:
         8a:3d:32:9c:9b:11:89:ae:a4:d5:ba:06:a9:46:c0:a5:2a:07:
         1c:9d:c6:0b:89:00:be:cd:f6:bc:fd:d0:c7:b1:f6:46:03:a7:
         d1:f0:c0:0a:a0:bb:16:19:08:85:4d:ed:34:cb:be:54:3b:0f:
         a6:87:d8:93:1c:49:c3:06:a0:1c:57:96:1b:bc:3b:2d:f9:6b:
         e4:0d:9a:fa:c5:79:af:75:28:5d:51:91:f2:70:4d:cd:48:db:
         95:d4:d2:e8:1e:e2:b3:3d:66:28:6b:b2:b0:d3:6e:48:c8:dd:
         c0:1b:11:fd:74:b1:37:7e:01:3c:7a:63:cf:b6:8f:2d:f1:88:
         01:0d:98:80:c4:bc:66:10:d0:39:ed:f8:af:39:02:d1:2e:2a:
         61:fb:ee:76:83:62:4a:90:a3:20:42:d0:11:66:e0:58:d3:df:
         52:97:e2:19:b2:04:09:da:7e:5c:fb:2f:b8:20:4c:95:ce:52:
         07:d3:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:57 2026 by rpki-client