This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File:                     8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier:          GyN1IPUAqrIDnrkaU1JknBQd2Y50Q6beIF8NfREmM+o=
Subject key identifier:   C9:3F:59:B4:F2:E0:6D:5A:E6:F7:5A:34:51:09:D0:85:47:D9:80:89
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer:       /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number:          7C
Signing time:             Sun 25 Jan 2026 05:55:46 +0000
Manifest this update:     Sun 25 Jan 2026 05:55:46 +0000
Manifest next update:     Sun 01 Feb 2026 05:55:46 +0000
Files and hashes:         1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: rrMUH/jm05cG9NADoiVERtgycfjmVmIOj/8/fh2zzWs=)
                          2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
        Validity
            Not Before: Jan 25 05:55:46 2026 GMT
            Not After : Feb  1 05:55:46 2026 GMT
        Subject: CN=6975b062-7aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:86:5b:00:29:65:98:78:8d:dc:bd:5e:cd:
                    b3:6a:8f:1b:c4:e7:dc:a1:e2:8d:af:8a:48:67:4a:
                    3f:ae:55:ab:71:a9:8b:74:b5:30:bd:66:95:ec:81:
                    6c:57:0c:82:cd:91:2f:0a:35:69:93:d8:9e:12:05:
                    4d:c0:5f:79:82:ba:14:09:ac:19:6a:30:f4:c6:9d:
                    3c:75:f3:cc:21:35:ce:28:76:b8:61:10:06:77:38:
                    35:11:84:65:a7:db:37:0c:f5:45:aa:ac:b6:70:ad:
                    99:0d:ee:3c:ee:56:ef:fd:a3:a2:3a:92:2a:dd:69:
                    d6:c9:87:65:e2:f9:e7:66:5f:c0:99:54:21:7b:c5:
                    b4:e7:b0:34:91:3b:57:56:e2:5b:e5:5e:e5:ba:8b:
                    97:78:4e:11:98:7d:c1:be:48:0a:5f:b3:9b:7f:09:
                    95:f1:32:1b:aa:9d:93:af:a0:06:48:3d:61:a7:fd:
                    63:19:e7:a8:42:86:51:b7:30:d9:98:0a:92:7a:36:
                    17:08:9f:cd:55:04:23:fa:8e:c1:33:b8:9d:5a:1c:
                    92:4c:95:21:a4:56:57:f6:39:23:e3:6e:6b:8b:29:
                    32:46:b2:4f:c5:b4:02:93:bf:92:e8:f6:6f:20:0d:
                    0a:3f:e9:f6:27:5b:76:af:a2:06:a4:38:87:b4:2f:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:59:B4:F2:E0:6D:5A:E6:F7:5A:34:51:09:D0:85:47:D9:80:89
            X509v3 Authority Key Identifier:
                keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:75:2a:4b:aa:7c:86:61:63:97:5f:c2:b6:69:7f:a5:8b:76:
         da:3d:fd:d8:3b:77:a1:d1:6e:43:0a:5d:a2:0e:56:52:3b:1a:
         4c:0c:67:81:90:6e:e7:27:ce:35:02:57:23:82:ac:db:64:63:
         7e:b0:9c:00:cd:f9:51:13:06:86:4b:d0:e7:e4:2e:3b:35:ce:
         f6:81:ef:8c:c1:98:da:2d:1c:76:51:30:14:16:f4:1a:f1:01:
         9d:e9:52:06:b7:38:9b:d0:49:70:63:49:76:81:58:d2:e5:c4:
         02:28:11:e5:53:50:8b:6a:00:3b:9b:da:5c:f2:4d:8b:5c:10:
         57:0b:27:cc:3e:5a:c5:ea:d4:ce:1a:84:bf:49:3b:6b:dd:04:
         af:ee:a2:4c:f6:f3:23:8a:ec:95:c5:3a:3c:51:f7:f3:62:be:
         b1:ca:ad:e8:32:c7:1c:0d:f4:8f:e4:d8:d1:bf:10:6c:ed:36:
         51:98:e8:67:d7:3d:d4:e9:64:75:6f:6a:1a:bc:2d:82:66:8c:
         02:d9:33:f6:9b:df:bc:28:9a:50:a8:d0:ba:5e:f1:74:92:fb:
         a2:14:a2:cf:63:bf:87:25:6a:f6:d6:fe:7f:ea:fe:e4:e7:6e:
         40:f0:cd:35:cf:95:f4:5c:b6:64:0d:1d:58:fa:55:b8:76:8c:
         8b:45:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:30 2026 by rpki-client