This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
File:                     j6hk_qmvHMBaicsQ6i43MXBt8_U.mft (raw, json)
Hash identifier:          /OF9fClBk181lgbLz4wB/mRIgueaTTPy6ypL6Fww7Bg=
Subject key identifier:   EB:F0:53:9A:4D:94:12:4A:B7:C5:DD:DD:89:60:CE:13:DA:BE:E7:D8
Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5
Certificate issuer:       /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
Manifest number:          3E
Signing time:             Fri 23 Jan 2026 06:29:12 +0000
Manifest this update:     Fri 23 Jan 2026 06:29:11 +0000
Manifest next update:     Fri 30 Jan 2026 06:29:11 +0000
Files and hashes:         1: j6hk_qmvHMBaicsQ6i43MXBt8_U.crl (hash: hUKtgjR6fbYqJVVnaKzzr5CXRW87bmH4+you1kDyGgw=)
                          2: 8121DCA49DF611F0B7D5393FC4F9AE02.roa (hash: 9g7OIf/aUpSy1rCWca9ZMugo81QHot1HlcLobRXWLTE=)
                          3: 0B1E45B49DF711F09C653340C4F9AE02.roa (hash: vIsigsIWJxpolid0KI36h1A1tKYdEORqEUTOoyk6qAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl
                          rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5
        Validity
            Not Before: Jan 23 06:29:11 2026 GMT
            Not After : Jan 30 06:29:11 2026 GMT
        Subject: CN=69731538-9c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:1c:b5:04:3d:b2:92:23:bf:27:4c:9d:b5:
                    bf:a6:34:30:46:8c:e1:89:68:da:8f:52:9c:8c:a2:
                    af:56:c1:11:4b:87:24:55:5a:43:32:d8:e9:3e:04:
                    d3:54:0f:15:95:33:22:32:3e:0e:99:05:28:1c:48:
                    66:16:b3:c6:2a:14:cc:b4:93:ea:27:28:66:ba:d6:
                    56:58:dd:77:01:0c:ae:50:20:83:77:7f:9d:ac:87:
                    c3:98:30:06:06:83:01:78:5b:26:9b:68:68:4d:79:
                    76:f8:68:8e:9c:cc:d1:1f:12:89:7b:b8:18:b5:75:
                    ab:4d:77:ea:c8:72:e8:60:e5:ad:df:5f:a0:d8:4c:
                    a3:30:7b:40:b2:e5:8a:63:ea:ed:15:c5:db:67:cc:
                    ee:5a:35:7a:f5:42:2f:60:11:50:48:c1:73:2c:f6:
                    14:e6:39:00:2d:38:5b:50:6c:d3:97:eb:9b:86:02:
                    56:16:05:1e:ec:3a:fe:2c:94:f8:a7:c4:d2:bc:89:
                    80:68:30:4b:19:43:5f:b1:9f:fc:eb:e0:4f:19:15:
                    10:76:13:d8:f5:7e:4b:a0:3c:eb:ff:76:b9:ed:1c:
                    02:0a:6a:73:64:f9:fe:61:51:4a:d4:bc:53:09:10:
                    bd:48:4a:20:f0:c4:e0:ae:53:24:3e:66:8d:b0:fa:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:53:9A:4D:94:12:4A:B7:C5:DD:DD:89:60:CE:13:DA:BE:E7:D8
            X509v3 Authority Key Identifier:
                keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:80:fb:63:da:83:10:c0:e8:e9:92:b2:43:1f:fe:a9:79:c9:
         ce:e4:63:34:75:59:cc:ce:4e:d7:bf:32:96:8d:f2:85:7b:e8:
         b3:ae:79:93:5b:36:4b:5a:7e:b6:41:1a:d3:ce:e1:d8:08:f1:
         0a:36:2f:4c:43:a7:2a:1c:1e:78:04:7b:fc:bc:11:2e:91:c4:
         d0:68:27:ad:19:8c:a0:71:18:c5:ae:94:cb:b3:fd:e7:67:52:
         04:0a:92:db:59:5f:1c:32:25:f6:5d:e4:c4:da:3f:17:e7:e5:
         d9:36:32:f6:97:66:f7:a5:5a:ce:8f:a9:e1:bc:5a:f7:0e:ab:
         f0:29:1f:de:fc:6f:d7:e5:0c:c7:4f:38:f9:5e:9c:7b:70:c0:
         ac:bd:69:f1:78:bd:e2:c7:fc:bb:cd:7c:66:fc:76:35:ee:7d:
         5c:60:85:66:96:67:56:1a:29:3d:98:e6:f4:36:d0:07:51:3b:
         49:47:33:e3:de:f0:5a:b9:4d:78:79:1d:17:6c:73:e3:fc:7c:
         05:a2:d0:74:11:e0:6a:f0:1f:26:d5:c6:5e:9d:2a:1a:d4:07:
         c6:83:36:fb:c6:b2:09:33:3a:dd:dd:b9:c5:ac:a4:4d:92:9e:
         e9:a1:a0:06:9c:8c:90:26:b8:af:bd:95:67:6e:bd:dd:1b:16:
         f7:2e:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:29:09 2026 by rpki-client