This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          g9oPTIBBojhWnLaliQggCc1j9v4hwz5QL9RAP/MT0AI=
Subject key identifier:   FD:85:41:5A:07:2E:F4:3B:A7:D0:4C:F4:20:E7:88:9E:E8:C9:20:00
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       217F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          217F
Signing time:             Sat 24 Jan 2026 15:44:45 +0000
Manifest this update:     Sat 24 Jan 2026 15:44:44 +0000
Manifest next update:     Sat 31 Jan 2026 15:44:44 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: gnRO0P7wg+t15VQA5JIoayY/14UEs6lb+v5RbA+F3Gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8575 (0x217f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
        Validity
            Not Before: Jan 24 15:44:44 2026 GMT
            Not After : Jan 31 15:44:44 2026 GMT
        Subject: CN=6974e8ec-e5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:b1:3e:5d:48:5f:0d:75:a5:1f:70:35:6e:
                    ce:4e:ab:26:65:d4:15:06:a9:53:22:8b:04:ca:2a:
                    f5:87:ae:38:5a:fb:1f:d1:da:75:fa:2c:ef:a5:d4:
                    aa:df:f6:77:2c:b4:48:c7:4b:bb:28:49:df:c8:f4:
                    54:44:c5:fe:f3:67:2c:c0:6d:42:3e:47:c9:2f:c2:
                    74:70:1b:ad:d1:41:15:c0:42:c1:65:24:75:d2:28:
                    ec:d3:16:ce:a3:ca:f9:d6:e6:00:e1:a1:82:7b:1a:
                    91:d1:01:4a:99:c6:04:e8:e6:80:02:06:ed:b2:20:
                    22:73:46:0e:d5:fa:4f:1e:e4:25:5e:83:37:03:a6:
                    f4:cf:b4:a4:af:ff:fd:ab:13:b7:2b:e5:ff:8a:cb:
                    e5:55:5e:7e:c2:b7:32:5b:c8:dc:06:dc:cc:65:66:
                    bd:04:34:33:9e:07:ca:f9:bc:9b:14:72:17:33:4d:
                    df:f3:b1:34:53:10:3c:be:4e:fe:26:5b:4a:bc:15:
                    53:aa:1a:21:6a:a9:73:44:50:f6:38:c3:d7:7e:57:
                    51:5e:e0:7e:f7:48:62:75:ea:17:94:11:be:25:e9:
                    cc:98:aa:bc:1d:ee:3d:a3:10:a0:2f:f7:1f:47:2f:
                    52:56:34:f7:28:38:4d:82:30:3c:8a:65:84:c8:ee:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:41:5A:07:2E:F4:3B:A7:D0:4C:F4:20:E7:88:9E:E8:C9:20:00
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b7:14:2a:df:6f:4a:0d:bd:ee:fa:36:d8:9d:e4:50:34:64:
         bf:bf:4c:47:15:82:72:a7:25:b9:9c:70:49:66:80:a1:82:65:
         ec:04:49:92:93:71:a7:a4:d7:ad:e4:1a:c1:4e:36:63:ae:be:
         72:62:56:0f:31:03:39:2e:f6:8e:4e:5c:00:85:a0:f3:54:32:
         16:ee:a8:49:21:06:8d:3a:d6:e5:dd:ad:ff:f5:3e:b8:2c:bc:
         25:41:3a:54:3d:6b:b2:ba:a1:6b:d8:ac:4f:8e:98:8c:17:e4:
         4e:77:f5:86:1e:15:36:0d:ce:a7:a8:ff:4a:4b:07:ec:b9:6b:
         f2:a8:18:79:e1:60:76:53:8a:15:00:9f:0c:87:b4:94:a8:5a:
         3d:b5:d8:36:8d:cf:b5:f7:45:6f:f3:b9:5b:7c:83:8c:a6:41:
         96:3e:5d:35:29:46:c9:a9:14:21:9f:81:27:89:7a:90:0c:1c:
         96:37:dd:c8:4f:b3:4e:f9:08:a0:cf:ba:df:4c:d2:37:04:12:
         f2:2f:8c:ff:f9:05:e1:bc:cc:b1:a9:11:c7:39:32:b0:f0:de:
         0d:52:34:c8:dc:89:ea:a6:39:44:ae:b8:98:ee:35:9a:de:bd:
         ae:cf:75:f0:a4:b6:e6:74:68:88:42:6c:dc:d8:eb:d8:9a:f6:
         dd:ff:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:27:28 2026 by rpki-client