This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File:                     sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier:          D5OZHiUcTNPhvg1fu+9PQeMEOk1cnGrrSBDO+u0Dm7Q=
Subject key identifier:   D8:C0:73:06:55:9E:C8:AB:68:02:E7:1C:B2:2F:8C:12:B2:DE:86:5D
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer:       /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial:       13A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number:          1397
Signing time:             Sat 24 Jan 2026 16:42:29 +0000
Manifest this update:     Sat 24 Jan 2026 16:42:29 +0000
Manifest next update:     Sat 31 Jan 2026 16:42:29 +0000
Files and hashes:         1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: dRolve7mHTh39rcDw29O4Bbk98s4lD2q5MNF8r4RCic=)
                          2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: QOgKODH0BdGNU32KrNDcl5JW265mloOw6csnOyuDnjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
                          rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5026 (0x13a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
        Validity
            Not Before: Jan 24 16:42:29 2026 GMT
            Not After : Jan 31 16:42:29 2026 GMT
        Subject: CN=6974f675-32e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:21:ed:38:ac:33:ed:f0:5a:7f:f9:ee:3f:
                    46:fa:93:a3:86:a8:7d:56:c3:05:02:60:09:78:45:
                    49:be:0e:d4:91:45:97:7f:c7:50:6e:2a:d0:cb:78:
                    33:1c:60:c7:1f:84:91:61:0d:68:d9:2a:d2:09:90:
                    00:91:19:55:26:fc:14:bc:af:69:2e:3b:a4:de:04:
                    9b:cf:72:9e:35:83:5e:df:0f:93:65:c0:57:24:88:
                    2a:2a:1a:cb:e0:c5:d2:d8:94:95:36:4c:3f:be:4d:
                    d3:54:c4:71:54:1a:59:22:cf:99:7d:75:1f:6a:32:
                    53:65:a1:79:1a:e6:9b:c4:51:2c:78:fd:bc:86:d4:
                    c1:a3:14:72:c8:90:b0:25:fa:41:bd:b1:79:ea:32:
                    33:51:60:77:46:d2:f2:7f:58:f0:3f:44:56:4e:14:
                    9e:51:f1:fe:e7:9b:30:71:7f:d9:88:78:8b:30:ec:
                    8f:03:a5:1b:c9:a6:89:72:dd:64:d2:fb:f1:3a:84:
                    a2:66:fb:de:78:a6:f2:f1:50:ed:aa:47:5e:81:67:
                    0d:a0:13:24:98:5f:1e:b0:f0:dc:ad:06:e2:0c:ae:
                    3f:1a:08:ab:5c:b2:9d:fe:55:80:07:22:52:ec:0f:
                    a8:88:77:8f:a1:dc:69:42:f7:a8:e6:32:7d:93:be:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:73:06:55:9E:C8:AB:68:02:E7:1C:B2:2F:8C:12:B2:DE:86:5D
            X509v3 Authority Key Identifier:
                keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:84:7c:c3:7e:ab:fd:97:f3:e2:83:d6:c5:d1:1c:f9:36:63:
         44:78:a5:e3:47:78:22:1c:90:a4:e7:43:6c:1a:23:be:03:1a:
         86:19:ea:3d:e6:b0:6e:ba:0c:e2:2a:4a:a9:61:06:6c:11:ca:
         11:f8:66:37:82:62:11:de:57:5c:99:e8:c5:d5:29:57:14:91:
         e0:6c:82:4d:6f:c0:d5:36:1a:cf:51:6e:af:f8:6b:77:9e:4e:
         71:b2:84:84:7c:9f:19:e0:73:be:9c:90:17:50:07:80:31:bc:
         2e:6c:94:cb:b9:26:23:d7:98:11:f3:6e:ad:d4:e4:80:25:39:
         21:b6:79:a1:94:ce:88:56:b5:b9:f6:4d:f6:68:fb:0c:b4:b1:
         4d:cb:c4:96:19:e1:f7:d9:d7:8d:c7:13:9f:3d:52:65:ea:4d:
         2c:ac:b5:9c:60:e8:86:e5:a1:ed:59:c4:cf:06:97:3e:97:70:
         e0:19:c2:a5:92:23:32:09:4e:e1:a7:29:24:6b:0f:e8:8b:4b:
         c5:90:70:36:e8:32:12:00:43:d7:9f:5c:c1:c4:34:38:7b:b9:
         ed:b7:11:60:8d:63:40:a4:23:e0:e2:9f:5f:cd:33:c0:db:f2:
         f3:87:fc:76:2d:fe:d2:fb:50:92:0c:f1:b3:e8:88:ca:8b:30:
         2e:99:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:08 2026 by rpki-client