This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
File:                     fA03qVD2-mazVJllAshMr6_nOXE.mft (raw, json)
Hash identifier:          7vMd8kYWwp+zrA4v9T46R5yW9Lr58iUB2BZqyZKS/ks=
Subject key identifier:   0F:42:B8:62:4D:14:19:55:EB:C4:56:CB:65:B8:46:AD:D8:7F:79:6F
Authority key identifier: 7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71
Certificate issuer:       /CN=A918D6AD/serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
Manifest number:          2F
Signing time:             Sun 25 Jan 2026 06:39:44 +0000
Manifest this update:     Sun 25 Jan 2026 06:39:43 +0000
Manifest next update:     Sun 01 Feb 2026 06:39:43 +0000
Files and hashes:         1: fA03qVD2-mazVJllAshMr6_nOXE.crl (hash: 8RlkrlAC7T4zU8K8kR89R79NdPx4RCm6Mi9ac/pqwfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl
                          rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6AD, serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971
        Validity
            Not Before: Jan 25 06:39:43 2026 GMT
            Not After : Feb  1 06:39:43 2026 GMT
        Subject: CN=6975bab0-9b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:cf:be:a3:29:3d:c0:05:70:f7:40:95:51:
                    72:c5:a4:6d:e9:ef:0d:d5:59:28:02:e9:7c:b7:1b:
                    3d:40:38:0f:bf:e7:b4:e5:29:75:64:3d:75:9f:07:
                    ed:e0:62:53:43:70:56:5e:c5:fd:c1:2f:33:6f:56:
                    28:b7:4f:7a:bc:77:6b:96:9e:37:9e:ab:d5:d0:ce:
                    e9:88:fa:ad:94:01:e4:4a:e2:27:3b:ee:1f:e5:0c:
                    f5:db:5d:e9:c4:26:db:bc:9d:21:de:c7:8e:1c:88:
                    43:7a:57:de:2c:3c:f5:f4:e6:d3:40:82:84:e0:75:
                    78:49:53:db:b5:b7:14:9d:7a:ae:83:d2:f7:94:86:
                    c9:1a:6e:48:77:97:da:6c:5d:8f:74:b2:d2:b5:46:
                    87:12:ac:32:f4:9b:ff:cf:af:38:3a:4c:a6:cf:3e:
                    ad:fc:e3:ce:36:5a:44:dd:f5:1b:e9:bb:0e:fa:e5:
                    ce:57:fb:97:1c:44:e8:b9:0e:d5:8c:2f:5a:3d:96:
                    49:d2:80:a3:12:81:c2:de:20:23:39:30:a2:7b:65:
                    b6:d3:99:b0:7f:3e:7f:2e:11:09:c9:07:8f:f0:ba:
                    70:ea:16:dd:8c:1e:64:64:97:72:90:3f:44:01:a7:
                    53:21:68:09:08:2a:d1:4f:14:be:f6:d0:63:22:1f:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:42:B8:62:4D:14:19:55:EB:C4:56:CB:65:B8:46:AD:D8:7F:79:6F
            X509v3 Authority Key Identifier:
                keyid:7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:8e:8b:62:03:24:25:f3:8a:aa:4a:b9:85:f6:77:5c:0b:8a:
         9c:96:d3:51:08:11:a2:87:2d:66:cb:3b:f3:e0:4c:85:f2:4b:
         7b:7b:5c:50:0f:bf:e7:5d:1e:0a:38:d5:a3:9d:2d:30:9c:01:
         1d:56:d1:01:f3:3a:a4:75:7f:c8:83:63:a0:48:d3:2b:65:74:
         62:2a:00:92:0e:07:e7:5b:1c:04:41:97:54:b4:b8:7d:58:a9:
         e5:c2:cd:b3:a0:56:eb:64:69:02:85:6a:88:b6:90:5f:4b:7b:
         3d:c9:3e:02:9b:0d:dc:35:76:ac:02:b0:bf:a4:79:f7:39:6b:
         70:75:91:25:d2:ac:59:54:a2:71:7e:a0:f3:8d:67:51:10:82:
         3f:57:d0:cf:c2:09:b4:f5:c1:05:d4:9b:45:62:f6:7d:e8:d9:
         c6:77:32:e4:f2:d8:36:d9:2d:83:6e:89:16:04:88:30:f7:5b:
         14:91:3c:de:18:8d:75:3e:5a:d5:d6:83:98:68:ec:ee:51:7e:
         3a:be:8f:d3:74:95:0d:39:64:3e:a8:60:36:b0:73:69:d7:4e:
         c9:ec:f3:e0:72:cd:14:e9:64:4e:7f:f8:06:27:5a:b0:d3:c7:
         3c:85:dd:a6:93:cf:f9:63:5f:08:df:f0:20:4b:d8:82:78:6b:
         1b:d7:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:57 2026 by rpki-client