This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
File:                     8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json)
Hash identifier:          myLcowRGtGYYi4E0TQHl0Sl/vMbrYkChNGWxYrEhmJA=
Subject key identifier:   E0:A9:FF:E8:B3:D0:09:30:54:0D:45:78:48:63:09:78:7F:FC:8C:DF
Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB
Certificate issuer:       /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
Manifest number:          0622
Signing time:             Sat 24 Jan 2026 22:05:13 +0000
Manifest this update:     Sat 24 Jan 2026 22:05:13 +0000
Manifest next update:     Sat 31 Jan 2026 22:05:13 +0000
Files and hashes:         1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: N28EPckem9frNDWPJiv8iPfNex1eNqtaunshsgnd/JA=)
                          2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: Yz0s0SgslhEB/Ux9X8zgj1HP5jX8LMQjR8aSmtueyxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl
                          rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB
        Validity
            Not Before: Jan 24 22:05:13 2026 GMT
            Not After : Jan 31 22:05:13 2026 GMT
        Subject: CN=69754219-2ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:e2:ad:cb:56:6b:43:3d:0a:bb:aa:34:56:
                    10:7b:3a:45:a7:08:29:2b:f9:e2:26:65:d1:b4:3e:
                    0b:c4:c2:bd:03:0e:b9:67:a8:90:fa:7a:a4:d9:0f:
                    86:5b:45:7b:ef:37:47:05:93:38:08:10:88:a6:b9:
                    2e:0b:55:f2:93:c7:35:8d:22:fe:f2:e7:2b:c3:a0:
                    12:2f:8b:8a:dc:e1:5b:ea:3b:79:c5:fe:2e:c5:49:
                    52:8c:cf:5b:7d:ee:3f:4c:69:eb:8d:06:6c:4a:2c:
                    3a:22:d0:f1:f5:5a:67:9e:8d:bb:3d:d6:c1:e6:ec:
                    fa:c0:fa:df:ee:fe:1b:34:ea:b2:8f:ad:b9:44:75:
                    ac:d1:d0:ef:11:fd:ef:ad:4a:07:fc:06:66:5e:7c:
                    6c:98:5a:c4:e7:e4:93:13:c1:1f:dc:b2:17:f7:af:
                    1d:84:89:e9:b1:9d:22:83:fa:4d:8f:12:a0:53:03:
                    3c:c9:fe:4d:95:5e:cd:24:40:d7:ee:ff:27:fe:fb:
                    e9:1a:f2:52:08:46:c1:a8:9d:ad:f8:f5:c6:1a:99:
                    b3:a4:e1:d7:87:03:68:a6:bb:76:2b:1e:4e:f8:87:
                    18:a5:86:5d:c9:ed:50:83:ef:5d:9f:67:da:1b:f4:
                    b3:b1:33:80:ed:d9:b6:78:be:53:21:bb:fd:2f:8c:
                    67:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A9:FF:E8:B3:D0:09:30:54:0D:45:78:48:63:09:78:7F:FC:8C:DF
            X509v3 Authority Key Identifier:
                keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:bf:e2:6a:ee:b3:92:3f:a2:d4:8f:ba:cf:b2:57:0d:2c:
         c8:45:21:08:a8:9f:10:b0:8c:ef:a2:c7:e2:2f:c8:2e:e1:da:
         b1:68:2d:96:02:ac:20:d1:97:de:c8:e2:05:65:ff:61:69:69:
         4d:be:dc:2f:c1:27:b5:0c:d4:72:31:27:a4:5b:0b:5f:04:ad:
         72:c5:4b:84:69:af:85:ab:ed:0d:cc:6a:b9:f0:bc:61:60:c9:
         19:a7:52:11:2e:c6:e6:2a:47:ee:ac:ce:9c:ed:37:80:8c:2d:
         2c:57:ef:4b:b8:79:56:42:9a:3a:02:24:44:12:01:9a:1c:b6:
         59:d8:5b:cd:05:3b:38:be:c3:30:ec:29:e2:1f:7d:77:39:07:
         86:54:16:82:f9:f0:3b:a1:f3:4d:d9:df:77:b2:5b:66:be:e4:
         17:68:0e:a0:d5:81:2a:11:57:2b:54:3f:1d:31:73:94:99:10:
         4c:0c:2d:27:b1:18:7a:08:70:73:62:3f:2e:e0:a9:75:49:d3:
         fe:e2:ee:e8:a7:3c:39:5e:7a:fe:04:3d:18:29:e6:fc:ce:26:
         6c:78:1f:7c:41:e4:e6:34:fe:ec:82:0d:1c:37:ce:82:b6:9b:
         08:24:0f:9e:a2:19:b0:aa:e0:03:e1:fa:8d:8e:6c:ec:21:ff:
         45:e1:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:19 2026 by rpki-client