This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
File:                     15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json)
Hash identifier:          HZL6RdY8rOn7lya/yqnHDUpBX1j8JSHQV5OTzVhFviY=
Subject key identifier:   5A:85:F6:63:EB:81:7A:C8:62:3E:66:B7:BD:C5:95:1A:62:C3:8C:5A
Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4
Certificate issuer:       /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
Manifest number:          FD
Signing time:             Sun 25 Jan 2026 04:22:12 +0000
Manifest this update:     Sun 25 Jan 2026 04:22:12 +0000
Manifest next update:     Sun 01 Feb 2026 04:22:12 +0000
Files and hashes:         1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: VhEJJ+rP77WSbA7c1CofITMnLL4zqgMmpFIdE4+MQcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
        Validity
            Not Before: Jan 25 04:22:12 2026 GMT
            Not After : Feb  1 04:22:12 2026 GMT
        Subject: CN=69759a74-c0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:eb:d1:61:43:b5:a5:3c:89:bc:cd:76:81:
                    91:9d:46:d5:49:d3:1e:ab:96:17:99:eb:d7:85:5f:
                    b9:14:15:de:73:ec:52:51:3f:19:d2:1a:7f:0c:14:
                    4a:28:81:14:1c:2f:f1:18:c3:ba:fe:50:44:6e:23:
                    33:5f:58:4e:cd:46:ec:ca:5d:4b:40:ba:ea:91:66:
                    7b:d0:25:5b:9f:9e:65:f4:e3:c7:88:45:fb:00:05:
                    c7:ae:72:52:33:f2:df:89:14:ae:9a:d5:1d:58:48:
                    bf:93:36:2c:84:85:5b:2b:1d:d7:fe:50:94:e8:6c:
                    11:d4:64:5c:0d:df:b2:d7:36:f1:d8:61:00:66:e2:
                    08:0c:0d:62:4f:3b:e2:f3:fd:88:9e:31:97:b3:4b:
                    23:10:a6:f3:59:86:c3:c5:7c:16:e2:e8:73:08:6b:
                    53:9c:6c:bb:16:f2:57:68:81:ed:9c:ee:c8:8d:e2:
                    d1:c2:94:55:ff:8f:10:a0:58:84:92:eb:cd:37:29:
                    c4:86:a1:1a:37:5c:71:68:65:4b:21:02:6b:6a:a9:
                    5e:07:68:46:9c:62:86:32:8c:cc:4b:55:33:ce:7c:
                    60:f8:a2:e9:d9:0d:59:43:cd:28:5f:39:e1:44:b4:
                    a9:6d:0b:6f:51:cc:4b:04:10:a3:8f:bc:59:f8:99:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:85:F6:63:EB:81:7A:C8:62:3E:66:B7:BD:C5:95:1A:62:C3:8C:5A
            X509v3 Authority Key Identifier:
                keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:ea:78:6c:7a:73:ba:44:06:65:36:b0:48:4a:c8:65:4f:
         2a:49:77:a5:bc:24:7f:48:4e:27:59:67:31:2b:f0:e5:4c:13:
         b6:bf:3a:ba:e8:94:44:a3:a1:e9:11:b1:c9:8b:84:94:1c:ac:
         be:23:e3:77:d8:1d:62:8a:ee:4d:a9:da:aa:78:eb:58:45:6c:
         8f:2c:ac:84:19:62:a3:c8:bb:da:b6:27:bd:d8:e8:1d:70:2a:
         41:3e:c2:5a:d5:ba:54:47:4a:56:b1:5d:0a:08:d5:54:cc:f1:
         37:a4:2a:5f:3c:a0:5a:35:24:92:5f:c4:8a:de:7b:aa:6c:9e:
         11:5c:3e:b4:9b:76:ed:26:9a:c1:3c:e4:dd:16:9d:fd:e9:d2:
         a6:fb:ca:12:82:66:e7:f5:bf:25:f8:f1:17:24:f6:ce:9a:c4:
         e6:7d:2c:7b:91:0c:ed:55:44:35:01:52:fa:8e:82:fe:43:0a:
         a8:71:c9:35:55:65:d1:b0:c7:e8:a6:45:3d:24:72:2b:73:ee:
         d5:a9:a0:e4:e5:51:8c:56:91:fe:ee:95:f6:3c:5e:41:e1:db:
         a0:87:28:fe:01:af:90:16:bd:e8:ef:96:4c:54:2a:1c:22:d6:
         3f:a5:d3:b3:26:31:5d:6a:e3:88:14:37:24:44:a0:6c:bd:fe:
         7d:69:e1:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBEQTUxMTAvBgNVBAUTKEQ3OUJGRDgzOUI5RDBFMDlEMDQwNUVEMDRFRTUyOTIw
RTkwQjdBQzQwHhcNMjYwMTI1MDQyMjEyWhcNMjYwMjAxMDQyMjEyWjAYMRYwFAYD
VQQDDA02OTc1OWE3NC1jMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoubr0WFDtaU8ibzNdoGRnUbVSdMeq5YXmevXhV+5FBXec+xSUT8Z0hp/DBRK
KIEUHC/xGMO6/lBEbiMzX1hOzUbsyl1LQLrqkWZ70CVbn55l9OPHiEX7AAXHrnJS
M/LfiRSumtUdWEi/kzYshIVbKx3X/lCU6GwR1GRcDd+y1zbx2GEAZuIIDA1iTzvi
8/2InjGXs0sjEKbzWYbDxXwW4uhzCGtTnGy7FvJXaIHtnO7IjeLRwpRV/48QoFiE
kuvNNynEhqEaN1xxaGVLIQJraqleB2hGnGKGMozMS1Uzznxg+KLp2Q1ZQ80oXznh
RLSpbQtvUcxLBBCjj7xZ+JmudQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqF9mPr
gXrIYj5mt73FlRpiw4xaMB8GA1UdIwQYMBaAFNeb/YObnQ4J0EBe0E7lKSDpC3rE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BRjg4NUY2Njcz
RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERnblFRRjdRVHVVcElPa0xl
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MERBNS9BRjg4NUY2NjczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi8xNXY5ZzV1ZERn
blFRRjdRVHVVcElPa0xlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCObep4bHpzukQGZTawSErIZU8qSXelvCR/SE4nWWcxK/DlTBO2vzq6
6JREo6HpEbHJi4SUHKy+I+N32B1iiu5NqdqqeOtYRWyPLKyEGWKjyLvatie92Ogd
cCpBPsJa1bpUR0pWsV0KCNVUzPE3pCpfPKBaNSSSX8SK3nuqbJ4RXD60m3btJprB
POTdFp396dKm+8oSgmbn9b8l+PEXJPbOmsTmfSx7kQztVUQ1AVL6joL+Qwqocck1
VWXRsMfopkU9JHIrc+7VqaDk5VGMVpH+7pX2PF5B4dughyj+Aa+QFr3o75ZMVCoc
ItY/pdOzJjFdauOIFDckRKBsvf59aeFg
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:18 2026 by rpki-client