This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File:                     aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier:          +hJskxdbmvNG1w/CqF0owSRMBmAITsgVESU44GE0JRU=
Subject key identifier:   16:17:35:26:0B:54:9C:A0:86:DD:F1:6E:04:37:49:EF:5D:37:B7:5B
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer:       /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial:       0764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number:          075C
Signing time:             Sat 24 Jan 2026 20:59:00 +0000
Manifest this update:     Sat 24 Jan 2026 20:59:00 +0000
Manifest next update:     Sat 31 Jan 2026 20:59:00 +0000
Files and hashes:         1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: Dg91QEVxxUdaq2Z6lkQvht8VtEf22RqlILsMg6ltQzE=)
                          2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
                          rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
        Validity
            Not Before: Jan 24 20:59:00 2026 GMT
            Not After : Jan 31 20:59:00 2026 GMT
        Subject: CN=69753294-9aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:08:b0:11:b6:9a:31:02:38:e8:5f:94:28:
                    54:12:7b:89:18:6f:18:b4:4d:c1:0f:a8:e7:f9:38:
                    a4:cc:e7:e3:9c:91:c5:5b:9f:03:51:b3:f7:dc:58:
                    43:d4:2c:66:7a:52:1c:d5:c1:c8:18:3b:61:ff:05:
                    6e:d1:f9:c5:ee:31:15:ab:b3:fb:48:00:38:24:a3:
                    11:0a:81:47:b2:f4:ea:b7:2e:30:91:3f:97:16:24:
                    fd:4f:dd:3e:78:d3:4d:ac:a7:08:9a:bd:5d:26:63:
                    04:47:94:0e:8a:bb:c8:f8:78:8a:3f:10:c5:72:44:
                    bf:bd:45:03:7d:34:03:a1:16:60:8f:4c:75:a8:19:
                    f6:2f:45:4f:d3:32:44:45:7d:43:38:5a:40:d7:c0:
                    f7:9c:b3:58:41:a7:22:4c:2e:c6:e9:b4:6b:9b:b7:
                    bf:84:53:f3:e4:ce:5e:19:cc:81:1a:82:b6:a9:93:
                    e9:92:de:02:f4:f6:a5:c9:f5:9e:c5:25:55:0a:e4:
                    cc:2f:a9:4a:0b:97:78:da:42:b3:98:e3:7b:6d:f6:
                    5d:ac:34:72:44:a0:14:61:bf:44:c0:29:6e:3d:ed:
                    07:69:01:f3:15:c4:c2:ae:01:04:d1:72:76:d2:f3:
                    70:8f:05:e8:0e:23:c9:e7:72:6a:9c:2b:2e:12:9f:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:17:35:26:0B:54:9C:A0:86:DD:F1:6E:04:37:49:EF:5D:37:B7:5B
            X509v3 Authority Key Identifier:
                keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:af:cd:46:bd:b1:93:21:76:4b:5a:3c:54:fc:fb:91:d8:e1:
         ac:20:bf:5b:6a:3c:25:b6:dc:71:5f:37:98:91:71:30:a9:28:
         2e:2d:ee:8a:2f:c8:24:89:4a:09:3f:e7:d4:93:e5:ec:24:b0:
         e8:eb:dc:d2:03:b7:54:e2:97:d4:0d:1c:02:bd:bb:53:f5:52:
         03:e0:58:7a:42:27:95:47:93:b2:15:5a:71:d6:5e:03:97:57:
         ea:98:9d:87:8e:98:d1:54:8a:08:fb:ac:03:0a:22:c9:fa:ea:
         26:6c:1d:66:42:ca:c9:63:bd:8a:98:40:1f:47:a1:9a:b8:63:
         eb:b8:4c:0d:cb:44:17:6d:33:96:3d:5c:d7:d1:59:71:93:f0:
         5d:04:90:a9:4e:5d:87:d4:2a:ad:2f:c1:b1:54:17:a6:2b:46:
         b4:95:46:e5:4e:f1:74:d6:bb:c7:75:f0:f5:ef:6f:0d:6f:85:
         e4:80:86:08:de:93:03:b7:f2:4c:1b:fb:3d:93:0d:53:da:0e:
         45:f2:f7:f4:7f:d8:ec:a2:d8:2c:04:da:bc:0c:dc:dc:f1:12:
         f6:7f:af:86:3c:07:eb:3c:a8:ee:e9:15:ba:18:c6:32:ff:2f:
         ac:0e:6c:7d:b5:c5:a8:c2:a9:e6:09:47:bf:41:28:24:a9:ed:
         18:ce:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:38 2026 by rpki-client