This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File:                     2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier:          SKn3bS5uIXkKU3Pn1aPmgTA2XNVRcZWX7Siouiv6goY=
Subject key identifier:   48:3F:EB:E5:68:41:B0:D2:E4:AB:DC:AD:CE:40:CE:FC:72:58:F7:82
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer:       /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial:       350D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number:          3506
Signing time:             Sat 24 Jan 2026 14:49:42 +0000
Manifest this update:     Sat 24 Jan 2026 14:49:42 +0000
Manifest next update:     Sat 31 Jan 2026 14:49:42 +0000
Files and hashes:         1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: wiFnxNoOJ9E4cY7UNlirQWKD7Ei8mrWhXl7Ga0k61d0=)
                          2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: mHUNvL3zJnpmbPqxHDIgKHTL5AEKLo79So94ufeiHA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
                          rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13581 (0x350d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
        Validity
            Not Before: Jan 24 14:49:42 2026 GMT
            Not After : Jan 31 14:49:42 2026 GMT
        Subject: CN=6974dc06-c33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:ed:c2:9b:0e:06:58:d9:0e:1c:22:41:73:
                    d3:05:60:6f:9b:e8:e3:1e:90:b4:b6:d6:53:3e:93:
                    1c:a4:fd:f7:1c:89:c7:78:d9:17:00:05:8f:aa:44:
                    d7:6c:7f:05:db:5d:21:c4:5e:96:63:61:90:e7:40:
                    e7:32:a5:24:db:c0:68:3a:79:e6:2f:c2:96:c9:59:
                    87:84:c3:4c:4c:7c:18:33:58:00:39:ae:fd:c6:62:
                    fc:f1:0d:3f:fa:5e:f0:b2:01:b5:99:63:13:1e:f8:
                    7c:06:51:46:40:a1:6c:34:0e:a2:86:85:28:bd:28:
                    25:c6:23:27:c4:98:8f:72:0d:71:be:bd:a3:fc:af:
                    6d:c0:c9:65:05:ab:bd:92:a2:97:9c:09:a7:a0:c0:
                    84:f1:e5:86:12:1b:b2:62:3d:75:81:03:2c:42:fd:
                    f7:3f:34:51:22:64:19:a5:7a:e6:74:ad:00:10:ea:
                    33:c4:d8:d2:1b:f3:75:7b:7b:9c:07:33:e2:31:d6:
                    3f:17:a2:1d:00:b0:e8:fb:b3:4e:49:6e:c8:cb:2e:
                    fe:84:c8:d8:a8:e1:1e:7c:60:8b:8e:2f:24:94:fb:
                    33:be:0c:f0:99:33:77:b8:72:c0:c9:22:fd:2b:10:
                    42:ee:7d:6f:39:a5:37:a3:9f:21:d6:06:d2:2c:14:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:EB:E5:68:41:B0:D2:E4:AB:DC:AD:CE:40:CE:FC:72:58:F7:82
            X509v3 Authority Key Identifier:
                keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d1:50:65:ce:92:71:f2:f7:23:d0:30:b4:40:0a:ed:88:f8:
         d3:6d:d3:36:f9:16:d9:41:9e:29:e1:a5:3a:d9:71:5f:b1:f6:
         63:bb:8a:ca:70:9f:92:3b:db:c4:2e:f9:b2:2e:f7:ad:7b:06:
         da:c7:29:7f:41:a1:52:58:bb:1c:02:4a:47:ed:a3:5c:ec:ad:
         10:ea:c8:5e:ba:b7:7b:bf:59:7c:ec:96:18:d5:26:6a:f6:6c:
         8a:21:96:86:dd:30:d1:7b:fc:9a:22:f6:15:8b:84:84:8b:a2:
         35:6a:7c:6e:2f:69:f4:dd:47:3f:0c:a3:c0:09:1a:ad:89:47:
         47:bc:16:ef:27:9d:a8:2e:cc:b2:2e:33:75:30:d2:92:18:e2:
         57:74:9d:1d:51:a8:6b:20:45:f5:eb:19:eb:74:61:8c:e5:a2:
         4c:dc:16:77:a0:df:88:55:b5:cf:d4:fd:28:c4:2e:7c:8f:e5:
         30:e5:4b:c8:87:04:d1:e7:f9:ce:69:0e:43:ca:87:12:52:cd:
         96:89:e1:ec:0a:a1:88:b1:63:fd:8a:c1:8e:a8:90:bd:cc:f1:
         24:75:9a:45:5c:80:f0:c5:e1:8d:a4:ef:d3:33:18:11:6a:95:
         d8:f2:d1:26:86:c5:0d:ff:0a:7c:2c:76:36:20:b0:97:ac:f0:
         30:bc:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:53 2026 by rpki-client