This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File:                     R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier:          21gyUDJP/QM5bbWk3+olLhthP61sI74GKk4hVpFdYi4=
Subject key identifier:   4D:AE:CD:43:BD:4F:1B:05:1E:3F:39:85:40:A0:30:64:A0:F7:2B:4C
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer:       /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number:          021B
Signing time:             Fri 23 Jan 2026 01:25:52 +0000
Manifest this update:     Fri 23 Jan 2026 01:25:51 +0000
Manifest next update:     Fri 30 Jan 2026 01:25:51 +0000
Files and hashes:         1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: +ISG/sBFIzioWDneHi65cZj2oeHFAPq5yS5Y5USSM+8=)
                          2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: vTjIWL+7U0681ZWCBVmHMtqcTBbPy9kNb1m5t3OENUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
                          rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 01:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
        Validity
            Not Before: Jan 23 01:25:51 2026 GMT
            Not After : Jan 30 01:25:51 2026 GMT
        Subject: CN=6972ce20-5b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:01:80:58:91:7e:d5:1c:4e:7e:99:c4:5b:
                    35:14:14:4a:8d:cc:87:4e:80:a4:a7:01:d0:15:03:
                    e7:98:d9:d7:dc:30:55:89:0a:35:51:c7:7e:7b:42:
                    94:e8:90:2c:c7:36:d3:b4:b5:a3:0b:fa:dc:5d:ac:
                    36:88:fa:7c:49:2b:69:d6:ba:63:27:14:84:22:c9:
                    69:3b:69:a8:a0:87:35:82:00:a5:4f:13:b7:cb:87:
                    af:61:25:45:9f:5b:fc:74:8d:a6:a2:f8:a9:6d:4a:
                    78:68:41:24:af:5d:3d:81:2f:ff:bb:8e:b4:79:50:
                    e4:94:d8:52:7f:9a:5f:d5:9e:60:78:48:5b:cc:84:
                    26:34:06:16:91:38:8d:73:34:68:99:c9:21:1a:c9:
                    59:85:8c:49:ac:37:4d:70:47:86:ae:08:77:e5:a4:
                    b6:7d:3e:00:48:e4:36:5c:25:7d:fd:d9:ef:da:39:
                    fd:78:94:96:3b:02:e4:e2:d1:fa:b9:99:cb:af:34:
                    fb:df:82:67:f2:36:59:20:b8:92:7c:ae:75:b0:c7:
                    8c:6e:b4:1a:4b:ec:6a:66:af:22:f4:af:b8:29:2b:
                    eb:03:c5:58:35:c7:9c:d1:96:e8:be:f8:d5:ce:28:
                    0a:32:ed:18:bf:34:9a:eb:55:77:ea:7c:41:e2:60:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:CD:43:BD:4F:1B:05:1E:3F:39:85:40:A0:30:64:A0:F7:2B:4C
            X509v3 Authority Key Identifier:
                keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:c9:10:8e:b5:1c:b6:f8:a5:8c:df:39:8c:4f:46:97:b8:
         0b:e6:21:ba:76:53:de:fd:3d:05:c7:3c:18:37:23:07:55:b8:
         1a:c9:a3:df:b0:2a:f4:d6:64:27:20:7f:b9:a3:d2:9c:83:b8:
         84:2d:98:10:bb:8c:20:d4:27:9c:6e:36:60:ba:c0:dd:b9:2f:
         31:ca:c8:ba:fd:9c:02:d8:37:60:24:c1:d7:19:29:ce:95:af:
         e9:56:0e:12:4b:45:b2:ad:62:7d:d3:a8:f0:50:bb:7d:24:3f:
         fd:e6:6d:da:60:f6:e5:d5:5b:a8:6c:96:40:c2:7f:2e:4c:b4:
         57:c3:05:10:33:25:43:67:db:c9:8e:d0:34:47:55:e0:b2:11:
         48:26:26:ab:27:b6:67:0a:4b:44:b5:12:0f:b4:6f:3b:81:eb:
         0e:05:c9:5f:c9:51:f9:60:d6:b2:aa:f7:9e:6b:b9:1f:d1:f2:
         d0:a1:87:88:18:9f:cc:1a:91:11:fb:0a:08:a2:13:c4:30:92:
         73:c9:54:2e:6d:a8:fe:75:bd:5c:cd:91:a9:0e:ce:6c:05:30:
         e3:75:44:d2:43:c6:c3:ae:fb:1a:01:97:fb:6d:c6:03:ed:97:
         96:70:17:09:51:0b:8b:4a:e6:f3:4a:a1:70:fe:0c:aa:62:3f:
         b4:83:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:33 2026 by rpki-client