This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File:                     DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier:          yN+935X+bQoS/wU4ATb07lIqNEh8Qw6cSFeDlP/tu2A=
Subject key identifier:   0D:61:80:A8:3E:86:AE:08:E6:8F:80:76:12:87:05:7C:E2:DD:47:7E
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       17DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number:          17B9
Signing time:             Sat 24 Jan 2026 16:19:52 +0000
Manifest this update:     Sat 24 Jan 2026 16:19:52 +0000
Manifest next update:     Sat 31 Jan 2026 16:19:52 +0000
Files and hashes:         1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: eZm9NRl/hDftiUnW4Gg/83eK/QUfsjFoSTfxZo5WTRw=)
                          2: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E=)
                          3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: YlusDdL6GSsVTm6aqUoc8SPstBv7LDPsMKGOZ35QMHY=)
                          4: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: WZaPuq2ePLoM0KjlrMWH8IWVHfB/Av+7ec0Tgw3cu6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6109 (0x17dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Jan 24 16:19:52 2026 GMT
            Not After : Jan 31 16:19:52 2026 GMT
        Subject: CN=6974f128-a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:65:30:64:c9:eb:af:6f:73:9a:ab:83:f5:
                    7d:76:4a:5b:94:2e:91:d5:46:72:61:68:65:13:80:
                    8a:26:41:da:5f:38:06:aa:cb:3f:24:a7:77:d5:ee:
                    b4:7d:da:70:b7:cc:9b:56:1c:67:f9:41:e9:49:f5:
                    9d:d3:c4:88:8c:6c:72:ce:3d:af:c7:54:2c:4a:18:
                    4d:82:de:9a:b9:78:c8:21:ae:cc:d6:a7:15:c8:ec:
                    1e:be:7a:d5:65:84:6c:cb:8e:ab:a2:a4:5b:d4:9a:
                    d4:bd:a7:49:ad:cd:de:c4:29:20:18:69:7a:95:73:
                    46:b7:3d:1b:a7:95:ae:89:93:c3:5a:e9:ee:69:0d:
                    25:8f:be:c6:a2:98:97:0f:73:48:5e:c0:c5:5f:28:
                    53:14:e4:bd:f9:3f:e8:f3:38:18:2e:cd:cc:d3:4f:
                    ad:61:c8:9f:4d:c2:72:ba:2b:59:b9:fb:fc:1b:01:
                    cc:2a:b4:1b:0e:fe:71:29:ec:f1:ca:ee:f5:a5:ad:
                    33:8d:ac:4e:82:4e:bf:08:39:85:6c:41:0f:25:d6:
                    3f:a6:f7:10:46:f5:e6:28:1d:f6:ff:45:1f:99:54:
                    f1:2f:7b:34:32:32:37:b3:0e:df:cb:6b:a7:fa:b4:
                    f7:35:db:1c:28:e5:db:b7:a4:3c:77:cb:76:59:e2:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:61:80:A8:3E:86:AE:08:E6:8F:80:76:12:87:05:7C:E2:DD:47:7E
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2f:f5:a4:b7:02:f8:5f:4f:73:c9:ad:9d:c0:03:c4:43:35:
         83:70:f2:09:8d:91:32:13:6c:7f:cb:19:6a:92:98:74:04:b7:
         18:d6:54:5d:40:af:2f:8b:61:63:ab:26:51:fd:e7:27:22:5c:
         da:37:cf:64:03:3e:67:43:5c:cb:41:b6:69:43:b6:80:13:01:
         f3:f7:2f:a7:e9:5d:d5:ce:1d:57:67:f1:e4:ff:b1:2e:46:a5:
         28:db:7b:c0:8d:f1:09:f4:bd:53:df:1c:2c:13:26:de:ac:24:
         7a:e7:98:e4:3e:11:82:4e:2b:44:dc:f3:cc:b5:5f:73:e0:53:
         55:d8:8a:c3:ad:9c:ed:c6:30:6e:3f:9b:06:06:a5:71:09:64:
         18:8f:4c:1b:29:d9:a3:2a:dc:1f:d3:47:13:dd:83:5f:77:13:
         d8:4a:47:4b:b0:a4:5c:16:10:6f:1a:2f:c4:8f:a3:ef:ed:cd:
         14:57:25:7c:f2:38:5b:41:44:68:d1:56:07:5d:93:13:28:71:
         66:43:6a:d9:95:ce:52:52:a4:68:4d:3a:b6:fb:55:d0:86:32:
         c3:68:e5:62:7c:22:4e:5b:8a:1b:3e:f3:48:13:38:c0:08:4b:
         16:b4:3e:c2:58:33:77:82:26:83:24:a1:a8:94:86:86:bb:f2:
         a2:63:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:36 2026 by rpki-client