This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File:                     DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier:          0KaVO3RgLz+oR7zF5KfVuFcDmGV1W6f24fQqKLJisYc=
Subject key identifier:   8F:A4:D3:19:9E:2E:AC:0B:B5:3D:7E:F1:79:E2:C5:B4:C9:B7:A1:4B
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number:          40
Signing time:             Fri 23 Jan 2026 06:26:34 +0000
Manifest this update:     Fri 23 Jan 2026 06:26:33 +0000
Manifest next update:     Fri 30 Jan 2026 06:26:33 +0000
Files and hashes:         1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: EmY3zTmIqWQiXLD0wtF2El2oafuHbJisRWbs26cncHk=)
                          2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: Xq+V2dhbaDK8xNC15SN+JABvncsJM2uUz84UdZHMyf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Jan 23 06:26:33 2026 GMT
            Not After : Jan 30 06:26:33 2026 GMT
        Subject: CN=6973149a-9bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:4c:7e:b1:de:d9:f4:31:e5:ec:d2:a8:4c:
                    54:f3:80:75:c8:c9:f7:f8:a5:d9:5a:db:1a:c0:8e:
                    40:cf:bd:25:76:80:2e:95:91:05:60:e9:17:83:a9:
                    09:b2:0f:46:85:a2:9d:a0:5b:42:31:bb:71:77:c4:
                    2b:c9:89:4d:e7:9a:74:5d:86:2f:ea:12:30:60:c4:
                    73:44:db:03:91:13:a9:ee:de:ba:5f:bc:be:08:03:
                    92:cb:b4:ae:e1:d4:f2:87:ca:0e:88:99:7c:e7:9b:
                    7b:71:bb:80:ad:fb:66:b4:cf:dd:c0:a3:dc:46:87:
                    05:71:fe:f0:5c:e0:6d:3d:a0:7e:58:4c:72:a1:1e:
                    5d:ec:1b:a0:f4:b3:00:10:99:59:3c:75:02:6f:cb:
                    d0:66:ee:9c:68:24:1c:fb:74:f6:5e:df:97:23:e9:
                    3d:37:b2:85:63:b0:e2:c3:6a:64:af:b6:da:d9:f3:
                    2d:b3:4a:0e:44:92:7a:6d:0a:76:3e:4e:2f:87:ae:
                    4c:3e:03:8d:ac:4b:3c:01:e1:fb:35:59:fc:c5:b0:
                    24:35:36:81:47:8a:0f:39:bd:07:a2:74:9d:01:8d:
                    d6:94:fa:5d:b0:8d:40:d5:91:aa:7f:23:f4:d3:1d:
                    22:42:03:e1:22:cb:2e:1d:60:2e:72:e4:19:11:39:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:D3:19:9E:2E:AC:0B:B5:3D:7E:F1:79:E2:C5:B4:C9:B7:A1:4B
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:48:4c:4a:6e:c1:93:e0:a6:2a:39:d3:a5:b6:9c:b3:80:
         71:42:2d:83:85:34:4c:30:a1:91:99:70:67:c3:c0:38:24:b6:
         88:97:e4:65:93:89:bc:ea:cb:c4:b3:74:4b:cf:22:1d:c7:58:
         f4:a4:29:68:6e:36:1b:8d:6d:b3:45:cb:4d:f1:1d:42:28:6a:
         f3:7b:49:08:57:1c:28:23:17:fd:31:00:ec:06:a4:4d:69:73:
         cd:0d:77:74:96:8b:67:cd:96:a4:0a:af:29:25:de:c3:00:2c:
         92:41:d5:39:75:b9:a5:a3:b0:94:0f:02:25:9f:03:33:57:cf:
         27:ee:0f:8c:19:cb:c4:c7:31:27:4b:75:01:8e:d9:ee:22:fd:
         4e:64:f5:5c:74:49:41:a6:f8:39:a3:73:66:28:7c:ff:91:01:
         24:37:3d:ec:46:bf:2c:1d:a6:8a:0f:99:b6:fc:85:05:83:f1:
         16:4c:32:28:48:43:cd:08:d2:88:05:f6:a7:38:27:d5:e4:0e:
         d8:c0:cd:7c:9e:05:6d:d8:a4:4f:c6:17:60:27:9c:6e:74:19:
         dd:04:e2:eb:5f:88:47:51:9b:5f:ff:ea:02:94:42:3b:cf:b2:
         11:c9:5a:a8:5e:97:03:57:b2:17:eb:3b:06:a9:c9:cc:b3:93:
         7c:e1:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:02:22 2026 by rpki-client