This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
File:                     UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json)
Hash identifier:          4TqnoSEJlC1Rh7NEAMh7MBCJh7qsFNDog2+I5NzWfZc=
Subject key identifier:   EC:1F:94:AA:D4:2F:E0:41:A4:C9:44:87:BA:95:CF:63:35:70:56:2C
Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
Certificate issuer:       /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
Manifest number:          062A
Signing time:             Sat 24 Jan 2026 22:03:08 +0000
Manifest this update:     Sat 24 Jan 2026 22:03:08 +0000
Manifest next update:     Sat 31 Jan 2026 22:03:08 +0000
Files and hashes:         1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: Zg3O2mbpdR3d+mVX2JqdAKsrs0OXuJBnClEIWeSGsog=)
                          2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: mwVl4hNEaIqbBNWJudlbCJK/THwSQhv97GiC3rtYAeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl
                          rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
        Validity
            Not Before: Jan 24 22:03:08 2026 GMT
            Not After : Jan 31 22:03:08 2026 GMT
        Subject: CN=6975419c-ef91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:cf:c0:e3:9d:ed:ed:ab:20:7f:18:05:ca:
                    a6:46:97:6a:23:5a:fa:94:aa:dc:c0:cc:d7:97:68:
                    17:02:37:10:8b:b7:e2:39:57:16:3c:1a:80:1d:10:
                    ee:6f:9f:23:d1:06:5d:16:32:67:2b:7b:c0:90:3e:
                    7f:d3:b7:12:b6:fb:bd:eb:4c:9d:13:4f:7f:22:68:
                    50:bf:be:5f:cd:88:00:9b:08:cc:90:f2:ab:3b:62:
                    c3:54:06:46:eb:63:1c:f9:ff:eb:1e:b4:d1:5f:15:
                    0a:66:0b:2f:5d:6d:93:88:59:1b:69:64:8d:cd:9b:
                    4c:12:e8:94:cd:67:90:57:55:67:24:fa:99:0e:4f:
                    df:fb:ea:4c:ec:e8:d2:b3:53:bb:5f:f5:08:32:05:
                    76:af:a1:99:2d:95:a9:cc:45:cc:60:02:73:0c:f5:
                    4f:eb:7c:45:af:4b:c4:95:38:c4:43:39:5e:2c:71:
                    d9:cb:82:03:b4:d1:34:dd:5e:0c:50:ce:7b:2a:d6:
                    a6:10:af:0b:ce:58:95:a2:98:81:c8:57:97:a5:e9:
                    58:1b:14:dd:06:00:ad:39:99:c1:ca:7c:32:cc:15:
                    0c:25:db:7f:79:e6:eb:1e:0d:ae:d2:77:df:d9:6d:
                    06:3d:a9:bb:82:dc:1b:cd:02:b3:78:f8:f1:15:6a:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1F:94:AA:D4:2F:E0:41:A4:C9:44:87:BA:95:CF:63:35:70:56:2C
            X509v3 Authority Key Identifier:
                keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:fe:94:40:2f:34:cb:04:e3:1f:0a:d0:83:a5:76:78:29:
         0d:05:83:61:26:12:01:61:f0:8f:d9:d9:07:ff:96:b8:01:28:
         97:d9:5e:e2:d5:2d:ae:4f:f3:59:72:77:68:42:70:50:4b:3c:
         b8:40:88:eb:01:38:91:0f:16:e6:87:f8:4f:1f:88:c7:50:ae:
         69:01:96:8f:4c:b9:84:1f:75:b9:cf:6e:0f:f8:7f:f4:6c:22:
         a1:28:22:b1:17:97:9c:e3:d3:45:b2:bd:94:30:16:8e:54:a5:
         b2:72:8e:e5:10:bb:9b:c9:0b:94:2c:4b:7e:cc:16:37:24:9c:
         ce:ea:9a:28:d6:3a:83:fd:26:01:ef:d0:2c:a1:e8:4b:0c:85:
         aa:d0:64:b4:11:ff:f5:09:3a:01:78:44:02:97:1d:d9:2a:08:
         a2:3c:9b:eb:93:7e:fd:41:d3:ce:84:3f:81:c5:93:fd:a7:84:
         2e:26:8e:6a:f2:ef:58:f1:de:ee:44:c7:18:25:61:92:d8:93:
         99:ac:de:3d:23:83:7e:f1:57:8e:84:67:88:66:2e:d9:05:57:
         c0:92:01:ca:79:85:3f:c7:14:d2:58:53:7d:77:e1:f8:be:fa:
         49:a3:95:55:42:32:76:7e:c2:6e:3c:ed:cc:5f:60:4f:9b:04:
         7b:8d:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:29 2026 by rpki-client