This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
File:                     PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json)
Hash identifier:          zV2BI+iZw19Cbd2FNto42q54tvz5SUGdvsQJaCQiDt0=
Subject key identifier:   FF:3F:4D:6B:B1:13:53:61:0B:6B:83:58:DC:27:6A:AC:0C:75:AD:3D
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Certificate issuer:       /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial:       0B8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
Manifest number:          0B84
Signing time:             Sat 24 Jan 2026 18:38:31 +0000
Manifest this update:     Sat 24 Jan 2026 18:38:31 +0000
Manifest next update:     Sat 31 Jan 2026 18:38:31 +0000
Files and hashes:         1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: Tar0Gf3SAeg0ohT6z7iynAv/El3uR8TSNTL7iNsYLz8=)
                          2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 3XqDsoPQcPM1SE+f/Pp4M8xbjqkYXT0D0U2hagU+4cU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2957 (0xb8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
        Validity
            Not Before: Jan 24 18:38:31 2026 GMT
            Not After : Jan 31 18:38:31 2026 GMT
        Subject: CN=697511a7-77c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:df:d5:a5:8d:85:b1:34:26:8b:48:0a:66:
                    be:18:20:f4:70:85:be:30:e0:76:87:80:36:57:49:
                    cf:d1:69:1c:7e:21:83:3d:79:9b:05:18:1c:c4:3e:
                    9a:dc:e4:08:1d:2c:d3:06:e3:d9:ce:5d:59:a6:68:
                    47:d8:28:60:62:00:ec:f1:02:d6:bd:53:2b:dd:99:
                    66:f7:62:5e:b3:04:15:6a:02:34:eb:fe:90:db:45:
                    0d:a5:14:5a:ad:3f:08:8f:a1:50:7e:3f:ae:3b:32:
                    af:00:a3:cf:d8:19:70:f8:1a:6c:33:0e:03:2d:ef:
                    7f:ce:cb:c6:11:aa:e9:58:84:4f:48:8c:c7:57:0e:
                    f4:b5:b7:54:b6:a0:81:32:e4:0b:69:34:a0:44:2b:
                    80:fd:0e:48:38:8a:a0:2c:98:8a:d0:9c:bc:6f:42:
                    7c:b8:e0:7e:96:2e:24:05:d7:e9:35:24:93:3e:81:
                    d6:2c:88:aa:c0:60:05:fb:ad:8f:fe:6a:45:74:d4:
                    1a:93:c8:20:bf:de:b5:5f:a5:d4:4d:26:a6:67:08:
                    04:f0:00:3c:82:97:7a:b5:f0:e2:2f:95:9b:cf:3c:
                    ac:88:31:fa:f7:77:77:3e:ac:c9:d7:0a:e8:b7:a9:
                    a7:f1:ea:31:4a:2b:a6:92:64:50:d4:d2:a0:68:6c:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:4D:6B:B1:13:53:61:0B:6B:83:58:DC:27:6A:AC:0C:75:AD:3D
            X509v3 Authority Key Identifier:
                keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:02:de:12:ca:02:e2:37:c2:8d:44:8b:42:b2:5e:06:8d:8b:
         31:5f:94:95:eb:6c:f0:da:85:d9:31:d4:0a:28:4c:c3:e2:e1:
         0e:69:84:dc:71:e6:18:bf:fe:a5:65:be:04:93:0b:50:14:d3:
         d1:b4:5e:dc:3d:e8:b8:84:c1:f3:ca:15:c8:a4:0b:3a:7e:d2:
         23:6a:d5:b8:45:63:78:1a:7e:12:a8:a0:d9:84:65:7e:62:33:
         ad:cf:f6:09:5d:c3:46:de:5e:69:bc:68:95:98:7a:8f:1a:d9:
         1d:47:ff:7f:8a:8a:ba:a9:0b:ac:a7:98:5c:bd:59:12:d8:fb:
         f0:1d:3b:60:be:d4:1e:6b:fa:08:e5:a1:9a:74:04:97:2b:0b:
         8d:79:69:f3:3d:40:77:0d:dc:87:1d:10:4d:4c:a3:ab:1c:cc:
         c7:bf:63:5a:e3:e4:27:34:ba:5f:62:89:bb:07:dd:6b:a2:d7:
         9c:c1:05:3a:c2:f3:cc:ca:5e:a8:24:9f:5b:a0:f9:20:a3:98:
         e2:6a:d9:82:89:8c:46:a9:eb:3f:47:6e:8d:17:b5:54:f7:5b:
         1f:e4:db:e3:ca:01:f6:c6:fe:b3:8f:ce:fa:ba:b5:3a:1f:04:
         1c:05:26:41:94:6e:5b:e4:9f:6d:f3:f7:df:bd:70:89:e3:46:
         5f:2b:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:04 2026 by rpki-client