This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
File:                     ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json)
Hash identifier:          QHwqmkOfdEEbNqOAZytMCHhUih2HGoF8TNj43kNvRG4=
Subject key identifier:   04:0B:50:A2:C7:21:2F:F4:35:C5:8A:57:3E:3E:EC:83:4A:E3:33:BA
Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Certificate issuer:       /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
Manifest number:          0151
Signing time:             Sun 25 Jan 2026 03:26:09 +0000
Manifest this update:     Sun 25 Jan 2026 03:26:08 +0000
Manifest next update:     Sun 01 Feb 2026 03:26:08 +0000
Files and hashes:         1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: ++ysycC5m5bci1x4F7wGlnuK9DDTLJoQFaPlI+LiP7U=)
                          2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
        Validity
            Not Before: Jan 25 03:26:08 2026 GMT
            Not After : Feb  1 03:26:08 2026 GMT
        Subject: CN=69758d51-1cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:f7:36:db:53:bc:8e:40:88:20:8a:3a:9a:
                    e1:2b:43:34:88:8e:82:69:f1:bd:e6:e3:54:82:14:
                    b3:aa:cd:b3:ea:b4:a8:21:80:72:b4:83:b1:2a:71:
                    95:00:ce:f5:76:96:41:6e:2b:d7:32:b7:4c:d2:1c:
                    3d:a2:b0:26:68:9d:65:33:25:5e:19:31:6b:a3:74:
                    c8:24:74:a5:fb:f1:d6:11:98:22:4f:c1:e4:32:e3:
                    48:86:b5:c8:eb:78:fb:a0:80:a3:f4:13:50:77:65:
                    7d:02:c3:bd:e0:d4:9d:92:7b:9d:38:67:db:e9:44:
                    ea:12:8e:8e:7c:3e:a7:3b:92:a5:e5:1e:bf:51:b5:
                    5d:95:49:5c:92:ff:2d:79:4b:67:c5:7e:16:31:c8:
                    0c:44:59:38:c0:64:eb:ab:1e:75:ac:47:fe:c9:66:
                    d9:9c:c4:bf:a4:03:8b:14:16:5c:a1:3b:5a:15:a4:
                    de:1d:1f:0d:b6:29:1d:ad:e6:75:9a:98:d1:1a:3b:
                    74:08:bf:d8:a2:f4:8b:19:82:91:2a:ea:b0:fb:dc:
                    de:e9:44:92:35:ad:b7:10:2a:26:1a:87:aa:f2:3d:
                    91:db:95:68:44:8d:5e:1c:5e:46:41:17:51:3b:07:
                    05:89:86:6f:10:f4:1c:11:a2:9c:9f:0c:22:94:0f:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0B:50:A2:C7:21:2F:F4:35:C5:8A:57:3E:3E:EC:83:4A:E3:33:BA
            X509v3 Authority Key Identifier:
                keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:79:c4:d7:d5:2e:40:79:17:b7:fd:ab:38:85:93:63:03:83:
         7c:e8:25:95:e6:f2:7c:28:4b:00:6f:f0:2b:e3:cf:9b:50:4a:
         01:ea:fc:ef:1a:44:1a:89:c7:85:75:10:8a:ed:50:18:71:bd:
         2c:4f:0c:bd:bc:1a:df:b2:2d:35:b3:26:8e:81:92:46:4d:ff:
         f8:7c:4c:0c:1e:d8:50:5f:3a:cb:81:37:f7:84:d7:ca:e1:e8:
         92:8d:ca:51:79:12:52:4a:95:0d:1b:67:4d:98:23:7b:0d:78:
         29:01:93:74:a5:23:d7:37:2e:c2:1c:8f:68:04:67:69:c4:41:
         c6:e6:9e:37:38:d4:e4:d1:b2:3d:f6:2b:4d:61:cc:1a:c1:23:
         c8:db:16:3e:11:0f:57:a0:c0:42:01:e8:97:c9:b7:6c:08:f1:
         3f:14:35:64:30:be:e8:ca:91:e2:51:1d:60:16:21:c5:4a:03:
         f9:ff:a8:41:cc:c7:e5:92:88:11:41:0c:86:94:5c:85:6e:b9:
         59:44:6c:ea:5a:42:db:66:7e:2b:b6:e6:32:4d:07:19:93:c3:
         42:54:aa:9c:e3:67:93:50:dd:6c:fa:2c:1e:17:e8:9c:b5:e2:
         de:78:9f:70:47:40:95:b5:1c:d8:90:31:ba:84:8d:f4:ae:cc:
         35:e0:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:02 2026 by rpki-client