This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          hIoTsl27pF1GcyNVhtIu+3o31D6E1EVXumBTz7Q4EF8=
Subject key identifier:   EB:32:BF:5B:7A:69:A5:FA:68:57:31:CF:FA:4A:1E:78:51:A4:E2:DF
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0D16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0CF8
Signing time:             Sat 24 Jan 2026 17:45:30 +0000
Manifest this update:     Sat 24 Jan 2026 17:45:30 +0000
Manifest next update:     Sat 31 Jan 2026 17:45:30 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: v3VzaY7RoGHnRlDk5ov+lu+PmcFXdU9fH35JKUuKG8I=)
                          2: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
                          3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
                          4: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
                          5: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Jan 24 17:45:30 2026 GMT
            Not After : Jan 31 17:45:30 2026 GMT
        Subject: CN=6975053a-4d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:1c:c6:be:79:e5:b3:6a:fd:94:b4:cc:d8:
                    c2:34:e2:10:06:15:65:1f:46:08:08:1d:a2:19:4d:
                    0b:df:6a:55:55:70:8e:5d:a2:54:6d:3a:0b:13:44:
                    c7:ba:7a:b6:47:ba:39:1e:41:cf:f4:e3:fa:6a:ee:
                    e7:3e:f2:2a:fe:35:e2:c4:12:d4:bd:49:5d:86:8a:
                    41:a5:4f:f8:74:35:0e:47:cb:79:27:a3:84:f2:ac:
                    6b:5b:35:a2:c4:e8:89:49:43:66:16:69:12:36:17:
                    6c:20:c4:0e:6a:40:0b:73:c8:ce:35:35:47:fe:44:
                    19:37:47:d8:38:0d:08:e0:45:83:90:d5:1d:20:cc:
                    6a:1a:d6:e4:70:1b:c6:f2:78:80:c8:3e:f0:13:f8:
                    b5:ac:d9:3c:6a:3e:27:7d:24:21:ea:91:13:32:ef:
                    78:54:38:53:4d:23:35:c3:16:0d:e6:5b:f2:f1:bd:
                    f6:81:55:53:21:9e:f3:1e:7d:f2:09:83:fa:cd:27:
                    5c:62:a2:a2:a3:1f:cd:b3:9a:81:b3:bc:5b:44:53:
                    bb:b4:65:1f:1e:9d:26:e4:2d:a4:19:91:fe:40:af:
                    1b:10:fc:6f:6d:c2:c7:33:05:ea:37:f5:8e:0e:cf:
                    6c:4b:2d:13:05:ad:2b:25:b7:5e:c8:fc:94:1a:7b:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:32:BF:5B:7A:69:A5:FA:68:57:31:CF:FA:4A:1E:78:51:A4:E2:DF
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:0f:30:2b:fa:d0:5c:7c:68:97:d2:e8:55:84:da:88:45:
         cf:aa:bd:fd:49:df:fe:fe:50:28:5d:f1:57:d5:e8:18:c5:2f:
         83:49:fd:5d:ee:34:48:7d:f8:8d:6c:0e:79:4c:7a:1e:1d:a7:
         8d:3a:25:02:80:4e:d7:1a:9b:b0:e9:04:8b:c6:d4:d3:93:a0:
         9a:28:6a:aa:d8:ed:67:ef:10:da:73:57:9a:3c:54:28:eb:e0:
         e2:63:0f:54:cc:61:e2:7e:81:71:3f:40:63:cb:1d:a5:12:c4:
         e0:8b:dd:5e:3c:ff:77:52:29:7f:fd:ce:0b:77:69:7f:1a:bb:
         73:e8:4e:22:34:bb:7d:b3:b2:f1:a2:15:0f:3a:45:71:16:63:
         91:10:f1:00:de:28:e4:cd:d2:c3:ec:b8:b5:b8:c1:2f:4b:25:
         f1:9e:c9:bf:93:e6:5b:dd:6c:d7:70:42:63:0d:9d:ab:e1:9f:
         cf:e0:b2:e6:23:46:fa:d3:cf:07:6a:bc:0b:f3:1a:b6:40:2a:
         0f:fc:07:58:6e:cd:23:ee:a2:06:62:ea:84:96:f0:dc:9d:82:
         9c:01:24:84:60:13:57:ca:15:8a:f4:4f:17:5f:77:ef:24:e3:
         e8:09:7b:86:2d:b1:e3:9a:cd:49:2f:9f:0a:06:a8:ef:b1:37:
         2f:b5:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:02:58 2026 by rpki-client