This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File:                     CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier:          734bGyr/MMEEGePUyixs2gLagp5fJBsoqjd2i/h91xY=
Subject key identifier:   57:66:6F:71:1A:C4:E3:41:C7:D4:0F:0D:8E:61:B5:31:56:F7:C5:0F
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer:       /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number:          40
Signing time:             Fri 23 Jan 2026 06:26:36 +0000
Manifest this update:     Fri 23 Jan 2026 06:26:36 +0000
Manifest next update:     Fri 30 Jan 2026 06:26:36 +0000
Files and hashes:         1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: geUAtRp64D4l8MfAXL1x5CZAlTC0LuX8151ODM1sqyU=)
                          2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: origqBJ9k2Zq/uSGJkI8lTn3lJpMgamfpnZM73+HcnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
        Validity
            Not Before: Jan 23 06:26:36 2026 GMT
            Not After : Jan 30 06:26:36 2026 GMT
        Subject: CN=6973149c-c57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:ff:40:c0:2c:69:e0:a9:0b:e2:cd:e1:3d:
                    20:e9:20:76:b7:b1:6d:2b:39:ec:a7:78:dd:97:41:
                    b0:f6:b3:31:21:4b:50:14:19:24:ac:9a:de:30:19:
                    76:48:eb:4d:a4:eb:94:9f:24:53:01:b5:da:d7:53:
                    d0:01:06:96:30:c1:0f:b4:1b:e8:ef:c0:cd:ff:5f:
                    aa:96:91:b9:02:fb:46:87:55:73:4a:cf:90:69:52:
                    94:2d:f6:99:ad:84:ff:fc:c4:54:d9:37:19:b8:53:
                    fb:7c:0f:58:1f:f7:10:9d:b8:2a:d3:ce:79:32:90:
                    4d:3c:cb:7d:6f:3b:ae:1d:b6:52:c1:35:be:fb:09:
                    34:b4:77:e8:9c:5d:c0:5f:cd:19:62:a6:dd:17:ef:
                    9a:01:e0:76:5d:df:bb:5e:b2:51:03:4d:13:ce:6d:
                    e7:88:d4:a7:16:c5:a1:21:85:1f:b4:cf:64:fe:7f:
                    a4:3a:7a:f8:6d:64:dd:b3:59:38:b8:6d:b6:2f:8a:
                    57:a0:1d:38:36:32:c5:67:fa:24:5a:61:7b:35:ff:
                    a7:30:96:3d:4e:f8:75:b7:cc:36:32:c8:c2:91:a1:
                    25:b9:31:df:3c:fa:bf:b8:ea:e2:59:00:a2:99:dd:
                    7e:5a:9d:60:27:99:9c:c1:a6:62:eb:54:23:45:fa:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:6F:71:1A:C4:E3:41:C7:D4:0F:0D:8E:61:B5:31:56:F7:C5:0F
            X509v3 Authority Key Identifier:
                keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:24:ff:b9:61:d8:fe:fd:ab:7a:93:bc:17:90:19:55:83:57:
         00:49:7c:dc:d8:b9:a7:4a:14:97:c4:95:d1:84:17:f3:8f:5b:
         d8:f3:90:49:71:10:d3:2b:89:fc:01:5b:2b:f7:12:95:a4:c7:
         21:03:95:25:2d:62:3c:f5:2e:31:cb:c9:43:e3:e8:71:63:9d:
         18:2b:b4:ea:86:15:cf:36:ff:6c:13:d6:8d:26:b5:a7:94:50:
         b3:c1:c0:1e:b0:1d:98:7b:c0:21:d2:4a:ac:6c:c8:ab:92:64:
         91:09:35:3e:4a:ec:35:e8:54:67:22:97:48:58:94:7f:a6:de:
         49:ea:8e:3d:55:0d:ba:14:a3:f7:a5:3a:51:09:75:54:3a:8b:
         9f:54:ed:be:3b:82:d4:8e:fb:c8:d9:c0:0c:cf:ed:68:ae:ea:
         48:a8:01:3f:3c:bd:a6:9d:45:33:b7:e6:70:87:42:b8:8c:8f:
         85:1c:05:96:26:03:79:fa:08:38:62:16:95:44:e1:dc:4e:98:
         51:4f:02:1f:13:b8:aa:4a:48:03:99:1d:7a:0e:b4:9a:34:80:
         1f:0b:80:0f:28:91:95:ba:c8:6a:7c:72:0a:b9:b7:40:47:a4:
         56:68:6c:fd:8d:48:83:3f:af:e0:6b:e4:5f:a3:e3:0f:85:0e:
         8c:88:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:14:57 2026 by rpki-client