This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File:                     rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier:          6HpOX+/LsIKTeBhXH8Hvn8RllnH0ZthtSJGbZLi1DhI=
Subject key identifier:   B5:66:5C:32:CC:C0:EB:39:E8:C7:FC:F6:CA:C8:A4:6C:90:0D:9D:15
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number:          079F
Signing time:             Sat 24 Jan 2026 20:51:35 +0000
Manifest this update:     Sat 24 Jan 2026 20:51:35 +0000
Manifest next update:     Sat 31 Jan 2026 20:51:35 +0000
Files and hashes:         1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: 8eOpCjzfHMSJWKKVACxF8V/p9+TcvTQ0ApvduYIXkiA=)
                          2: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jLprJlYDgAu74jqVf0KhRr49j5tKUoWp/CVQN/GM+MQ=)
                          3: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: Y4IjgROza7hbC5Ch8I7v3zCuAkrKDxCGPUvc5F2ZkfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Jan 24 20:51:35 2026 GMT
            Not After : Jan 31 20:51:35 2026 GMT
        Subject: CN=697530d7-a64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:23:6e:f1:1b:fe:21:c8:1f:40:57:2c:ff:
                    71:0e:2a:ee:48:3a:13:1b:7d:d3:10:08:37:02:ab:
                    74:cb:c2:41:f9:19:5b:ee:48:45:77:39:f0:8c:42:
                    84:cf:27:e5:ff:3d:26:a7:89:ae:dd:52:e2:a0:d9:
                    0f:f8:d8:42:de:00:d5:65:c4:0a:78:90:73:09:84:
                    e7:68:36:7f:fb:da:b3:93:c2:e5:4e:0d:ec:77:12:
                    6a:96:cb:d1:4d:00:8c:72:d1:5a:8f:f1:ef:4c:f5:
                    58:8b:86:c2:c6:68:8c:fb:67:54:20:af:07:12:50:
                    6c:56:6f:0d:44:4a:9a:e9:c0:34:a0:c8:00:ce:84:
                    e7:2e:a5:94:69:de:06:a5:2f:30:52:42:4e:63:5f:
                    de:9d:ea:60:ef:f1:75:37:e7:7b:18:ce:de:ae:b4:
                    ad:af:04:68:c0:34:07:08:6e:8e:d1:9c:8e:77:5d:
                    33:f3:60:83:9c:f5:40:f1:7a:80:8b:04:0f:36:a0:
                    5e:13:03:25:9d:17:63:e9:f6:9b:98:a3:bf:bc:5f:
                    f3:ed:23:54:3e:f6:dc:33:8d:ac:8f:b4:b5:2a:fa:
                    6e:5a:70:c6:e2:f0:c8:2e:a7:16:b3:ff:be:55:c7:
                    de:ad:2d:ec:c1:4f:a9:dc:31:2d:85:52:c8:0e:5d:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:66:5C:32:CC:C0:EB:39:E8:C7:FC:F6:CA:C8:A4:6C:90:0D:9D:15
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:28:31:e1:b1:3c:40:29:6b:d6:8a:56:22:dd:cd:d3:91:
         3a:94:de:8e:6f:ea:bf:bc:be:70:d1:e6:2a:90:2c:db:2e:d8:
         3c:b4:07:47:78:57:18:51:98:e9:be:d5:5d:3b:54:a6:87:fc:
         b3:f0:83:8b:4c:d7:b8:99:72:66:be:78:24:8f:92:6a:09:99:
         7b:3b:76:7e:38:92:7b:0d:f0:34:b0:70:9b:ac:ba:ae:a8:49:
         60:ff:a0:a6:3c:08:85:d9:a7:60:bc:ce:3e:f6:24:ed:0a:70:
         fa:62:b2:70:28:5d:7a:16:5d:13:99:05:dc:ed:7d:85:5e:cb:
         9a:99:97:70:4d:e1:09:cf:52:fa:0f:88:52:9f:8a:24:22:19:
         89:f1:64:09:7e:70:78:d7:32:11:d1:8f:7d:fa:9d:7f:43:b5:
         8f:ea:28:d4:58:e5:ff:25:0c:34:83:57:40:bf:c7:ad:1b:ba:
         c5:4b:b7:fe:c3:07:dd:74:a7:0b:47:2b:1a:56:52:4c:24:61:
         26:6d:ce:ca:37:b3:1e:46:e3:f1:08:cd:25:88:9f:22:c3:c2:
         13:4c:3b:0e:b4:09:d7:f2:86:82:fb:75:77:12:53:e0:7c:a6:
         03:2f:e2:30:e2:de:51:ce:64:82:8b:9b:b2:6f:6d:d8:a5:fd:
         41:f0:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:39:25 2026 by rpki-client