This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          VbpsR6hD4JJop+FRWM+eeXQueASqzlvZOAYSBGzOn7g=
Subject key identifier:   66:20:B9:DE:98:A3:68:44:70:41:D2:47:91:22:E2:6B:E2:9E:03:A4
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       071F
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          06FB
Signing time:             Sat 24 Jan 2026 16:35:27 +0000
Manifest this update:     Sat 24 Jan 2026 16:35:26 +0000
Manifest next update:     Sat 31 Jan 2026 16:35:26 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: wHqxybCmcCL+QyR1A3mhZIftUexSWJLa2rChwpjRnJc=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: qm9tOH02ZhUyhN95rojnAyTLcNLxX4GEOIv6/MzX5Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Jan 24 16:35:26 2026 GMT
            Not After : Jan 31 16:35:26 2026 GMT
        Subject: CN=6974f4cf-86a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:8e:37:94:34:46:fb:2d:fb:e1:83:b1:61:
                    87:47:dd:57:e9:ca:af:8a:86:44:82:1d:13:c1:11:
                    9e:87:df:91:6b:dd:bd:a7:22:32:35:f8:df:30:57:
                    37:3a:dd:ac:15:43:f8:b9:ce:3c:66:63:b9:bc:3b:
                    03:73:0a:5b:9f:bb:e7:f6:3c:dc:30:59:17:f4:8e:
                    6d:23:81:6e:c4:7f:ff:8c:18:71:40:68:b2:a8:75:
                    b3:ca:74:cf:37:59:28:a4:c3:24:d9:a3:ec:90:b1:
                    22:ed:1c:61:2d:72:f3:8e:9d:82:c2:36:71:26:a0:
                    a8:3f:26:4c:1a:37:33:80:4e:6b:f9:57:e7:5f:55:
                    9b:4d:cb:92:87:a1:f7:a7:25:03:85:e5:fb:37:b3:
                    fb:1c:83:f3:f3:2c:68:49:29:b8:06:bc:07:89:18:
                    00:d3:15:e2:c5:64:77:0c:2f:45:a3:d7:82:13:1f:
                    7c:00:dd:9c:52:53:ef:f7:b6:b4:44:38:4a:e2:0b:
                    4f:c3:a0:a3:fd:21:0b:5f:fd:f5:c0:8f:71:f4:5f:
                    7d:c1:c9:75:5b:6c:67:8e:90:90:07:5e:70:23:6d:
                    3b:89:6e:b0:31:4c:61:c4:c2:c6:6f:b0:99:e5:ea:
                    da:db:f4:32:a2:c4:88:1b:59:32:83:88:a0:3f:08:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:20:B9:DE:98:A3:68:44:70:41:D2:47:91:22:E2:6B:E2:9E:03:A4
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:60:56:78:f0:30:f7:14:25:1e:41:0d:b2:7d:48:89:d0:c8:
         4f:94:8e:1e:aa:d0:f6:d0:f8:42:74:de:5b:7d:64:cf:00:d6:
         10:9d:58:9f:cd:68:44:16:26:bc:4c:8e:74:89:3b:e1:0e:97:
         c9:6e:98:05:a2:8f:e7:cc:15:ca:d0:ec:7b:be:c1:ba:6b:c6:
         ca:66:25:31:8b:6d:c8:a9:94:41:0d:9e:99:28:2d:e5:d4:4e:
         23:7d:03:30:09:4c:c3:4b:b9:eb:9b:be:81:3d:f6:41:b3:ed:
         6f:15:7e:df:3c:c1:92:3e:ee:8a:98:d4:25:f2:f8:c2:4a:8c:
         67:b6:29:f5:2a:07:a6:47:b4:03:90:a2:41:7f:ae:aa:fe:b7:
         0b:b9:9b:7a:d1:cd:5e:95:f3:b7:a1:09:bb:ac:bb:a8:b0:9c:
         60:80:46:5e:fd:80:24:01:14:84:35:72:5d:45:4e:94:7e:56:
         18:76:8c:fd:0c:59:5e:a2:e3:da:40:33:61:0f:99:87:40:6c:
         24:f1:4f:d0:d5:b7:57:1b:a9:8f:bb:d1:af:ae:82:3e:14:14:
         68:05:ef:04:e8:94:f6:18:c2:0b:b4:39:31:e6:09:ee:73:59:
         61:1b:e1:aa:f2:8b:65:5e:9b:c1:05:f5:94:e3:ef:6e:f9:01:
         69:3f:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:00:57 2026 by rpki-client