This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File:                     Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier:          23+HlL/oPEcHFBhlIChKNSHWtYM0uY16ul/3t6aQu+8=
Subject key identifier:   B0:EC:CB:DE:0F:34:D7:12:68:2A:B8:28:E3:88:8A:FE:62:A9:2F:65
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer:       /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial:       350D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number:          3506
Signing time:             Sat 24 Jan 2026 14:45:37 +0000
Manifest this update:     Sat 24 Jan 2026 14:45:36 +0000
Manifest next update:     Sat 31 Jan 2026 14:45:36 +0000
Files and hashes:         1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: W0j8Ivlt2TtRciA317aBjHfiwybAzKP2wF603n05Nlc=)
                          2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: 4GdGUVJOi7JjJ/AHOJR3g7ZUzd7x0VAsl8ckv3O4HKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
                          rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13581 (0x350d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
        Validity
            Not Before: Jan 24 14:45:36 2026 GMT
            Not After : Jan 31 14:45:36 2026 GMT
        Subject: CN=6974db11-aab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:91:3c:b6:40:b9:90:48:96:d4:2e:86:c7:
                    b6:5c:f1:d1:86:53:5e:c2:d9:ea:34:75:c4:3d:65:
                    76:ee:2f:bb:9b:aa:46:30:e2:04:c8:8b:29:87:9c:
                    a2:1e:4a:95:44:d4:df:0d:4e:b3:68:b5:51:d3:fd:
                    a9:88:22:37:10:ee:87:b6:41:48:d1:b9:72:3f:68:
                    a5:99:e4:5f:c0:a8:72:cf:73:98:fe:97:bd:91:4f:
                    af:2f:f1:91:0f:7a:a9:5b:86:0e:28:4d:a3:53:29:
                    32:1f:2e:cc:8e:71:e7:c7:ea:df:8f:be:8f:01:c6:
                    f3:78:d6:03:dc:9b:0e:2f:42:54:de:c0:c2:1c:11:
                    25:73:b7:88:f4:f4:e5:e2:dd:0c:f8:0e:91:dd:92:
                    3a:f2:ef:eb:4a:5c:90:d2:53:f9:c9:40:e0:de:56:
                    80:8e:a2:3f:8f:c6:84:97:f2:96:02:67:d6:b5:24:
                    d0:ba:83:28:e8:51:fa:16:27:07:4d:e7:5e:cc:2e:
                    90:ae:fc:9f:61:67:8f:01:5e:2c:d0:98:b1:52:fd:
                    c9:4d:39:b7:9a:8b:3a:f4:b7:91:e5:85:e0:9b:74:
                    af:6f:ed:6d:e1:7f:03:79:cb:6e:34:8a:8b:aa:c4:
                    b1:4c:c6:5b:57:9b:54:fa:6f:36:27:81:4a:2b:67:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:CB:DE:0F:34:D7:12:68:2A:B8:28:E3:88:8A:FE:62:A9:2F:65
            X509v3 Authority Key Identifier:
                keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:c3:30:fa:36:3b:f5:1a:93:9e:20:76:00:dd:f9:d5:37:
         25:4e:87:ba:ed:d8:32:9a:ee:81:b3:3e:a6:ad:c4:83:ec:8d:
         56:38:09:71:55:31:53:96:89:b0:ce:15:23:1f:2a:62:c3:e2:
         a9:c2:29:88:a8:28:e9:24:d3:24:9f:ed:f7:6f:3b:f9:74:d6:
         3b:ef:5e:8c:4b:07:d4:af:1e:91:07:6e:5b:0f:09:8d:af:e1:
         4d:b4:1c:6e:5d:31:ef:a0:bc:29:5a:62:61:af:e5:35:3a:ba:
         11:43:67:0d:32:b5:27:5c:29:66:43:05:3c:1a:e0:b7:b5:15:
         be:81:e9:f6:37:ec:a3:02:08:4a:02:c9:06:70:4c:d8:cd:1e:
         81:25:b5:c8:48:49:ee:c9:54:15:fe:8b:e7:68:a8:ed:9d:96:
         d1:82:ae:35:0e:14:98:d0:a5:6d:78:84:ea:31:af:0e:37:b4:
         e3:19:17:35:8f:c1:63:0e:e9:32:18:4f:2e:c9:9e:ba:0c:57:
         27:2a:28:19:52:f4:46:79:96:42:1b:99:d2:39:7f:4f:09:b4:
         eb:1f:81:b6:23:88:55:9e:20:c5:0a:75:a4:f8:2d:66:43:7c:
         07:95:a7:a6:73:a0:16:13:c0:a2:b1:49:f3:9e:20:7a:ec:d0:
         a9:2a:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:13:47 2026 by rpki-client