This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
File:                     PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json)
Hash identifier:          XlmRzOZUrfOI9/OJxJwluF+SlGwLS1PTNzmxD4ZNdow=
Subject key identifier:   B8:27:0B:4B:52:F3:D2:19:AD:FB:C8:D3:65:EB:F9:19:A2:9F:04:0C
Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
Certificate issuer:       /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
Manifest number:          92
Signing time:             Fri 23 Jan 2026 05:35:27 +0000
Manifest this update:     Fri 23 Jan 2026 05:35:27 +0000
Manifest next update:     Fri 30 Jan 2026 05:35:27 +0000
Files and hashes:         1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: CfxUepWxGrf4SEZbw0merLqb1iWe/s/s881NHrr0Wkg=)
                          2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=)
                          3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
        Validity
            Not Before: Jan 23 05:35:27 2026 GMT
            Not After : Jan 30 05:35:27 2026 GMT
        Subject: CN=6973089f-8762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:d6:82:25:dc:e4:8d:94:8c:fa:d1:f6:21:
                    45:46:c4:23:5f:1f:46:9b:f2:51:8e:92:9a:7a:ca:
                    2b:ba:4e:fb:97:f3:58:ea:4c:9b:cf:65:c6:ec:7f:
                    71:7b:45:b6:6b:2f:b4:7a:29:63:78:90:0c:49:d1:
                    f7:ef:45:36:06:31:d0:0b:a1:5d:18:be:99:98:f0:
                    8e:93:a7:d4:ea:42:f1:85:d9:7a:f0:37:f4:37:b8:
                    e1:2c:3d:0d:14:ec:a4:6f:3d:64:60:20:a1:82:f1:
                    29:ce:16:6f:c2:3f:1f:6e:73:ac:c3:27:b9:26:73:
                    40:b6:e1:54:74:67:72:d1:21:31:ec:5c:3a:b2:49:
                    4d:b3:d0:3a:44:7c:45:4e:cc:19:fa:cd:82:80:5c:
                    ee:e3:f0:74:a8:28:6b:3a:f3:c4:aa:95:81:4b:74:
                    d6:55:08:19:f0:66:0f:df:04:ad:6a:ec:a0:a9:e0:
                    58:50:5e:26:c0:f9:f3:20:a3:00:34:d6:8b:19:a3:
                    df:f0:eb:39:3c:3d:a8:2f:3f:9f:0b:ea:88:0c:be:
                    dc:ed:e4:1c:b2:03:72:48:2d:dc:77:8d:ce:09:d3:
                    04:40:4b:04:4d:c6:97:22:61:be:43:97:b3:2b:95:
                    1d:88:4a:42:ae:a8:3e:78:09:53:89:42:fa:33:2a:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:0B:4B:52:F3:D2:19:AD:FB:C8:D3:65:EB:F9:19:A2:9F:04:0C
            X509v3 Authority Key Identifier:
                keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:1b:e5:78:82:1b:ed:c9:ac:7c:b5:ed:0b:42:35:8d:97:
         cf:46:f1:ee:a6:a8:97:5e:1b:4d:f2:46:cc:3c:2d:db:c8:5e:
         9b:e9:ce:a1:e4:d7:17:1b:7e:7b:ae:b7:e2:db:d2:be:47:52:
         39:f3:3b:e2:66:2c:fc:13:5e:49:67:93:c0:04:d9:28:95:af:
         65:87:cc:38:55:75:a8:6d:eb:1a:4b:29:92:3c:8d:16:17:c0:
         28:5a:bf:d6:4e:94:cd:d5:b1:32:f8:25:81:71:d7:41:11:17:
         0c:ae:d5:01:46:ae:32:c7:e4:7f:92:6e:35:63:e3:32:23:19:
         ce:76:65:55:d0:6e:1a:09:81:2b:e3:9d:b0:f9:d9:d4:1c:e2:
         6c:ef:d9:2a:d5:ba:cd:5f:ad:6e:ee:39:95:66:59:1b:a9:e4:
         3c:9b:f1:22:be:1a:d6:fe:4e:09:d7:ef:bf:d0:5b:40:bd:83:
         21:6a:e6:01:62:7a:7b:f4:f8:d6:9a:0e:ef:c9:d1:24:77:60:
         d9:30:3f:4f:40:1f:46:7a:d9:0b:b9:98:ba:57:2b:59:7d:58:
         14:c0:ac:88:36:8a:32:7e:37:45:3d:70:cb:45:30:c2:1b:70:
         b1:48:93:c9:be:16:e3:22:41:05:eb:19:9d:63:e8:de:52:b7:
         05:73:b2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:18 2026 by rpki-client