This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File:                     2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier:          YtDNQPabDqS7ZMV+6Aj8w62FpmNGKrp2SfRF4wcvGaE=
Subject key identifier:   00:F1:5F:4F:5B:36:F4:97:D1:D4:36:30:D1:14:70:58:C6:84:2E:39
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       08E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number:          08CD
Signing time:             Sat 24 Jan 2026 19:52:23 +0000
Manifest this update:     Sat 24 Jan 2026 19:52:22 +0000
Manifest next update:     Sat 31 Jan 2026 19:52:22 +0000
Files and hashes:         1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: ovZUN3sHK+Z0NweL0NttppiZCjHvjp3cRb/leZlevfs=)
                          2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: d3AVE6MmRgC9f1BP/vAUeg941gkBQiu4la3PQf5xjqo=)
                          3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 69lFJmCSoZqJFnlRVMecyEqrZmFOaweKrojaOmIkHVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Jan 24 19:52:22 2026 GMT
            Not After : Jan 31 19:52:22 2026 GMT
        Subject: CN=697522f7-c14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:81:49:5c:7c:59:fb:b8:1c:b2:fa:8e:f8:
                    1b:de:8b:22:e3:42:5a:de:01:4d:e0:9f:a8:ee:eb:
                    ff:39:0d:80:d1:dd:bb:40:f8:84:05:cf:df:72:ef:
                    b7:48:59:7f:12:b8:05:97:91:d0:ef:16:03:ad:fd:
                    c8:ab:b5:f5:01:df:29:98:f8:38:22:5e:8e:cf:fb:
                    09:cf:fe:ff:c7:8e:89:5a:a5:ea:fa:c7:7a:7e:e5:
                    0b:d9:47:8d:73:cb:2c:1c:6e:3d:1d:af:95:40:7c:
                    d0:78:58:a6:4f:75:ea:00:36:3e:23:28:e3:4e:c7:
                    22:c6:51:af:90:d6:50:62:82:75:f3:79:6f:4d:d3:
                    03:64:00:53:78:70:04:cd:f3:9f:ec:31:df:4c:18:
                    95:35:d7:99:5b:9f:7d:c6:f5:0d:a8:07:7e:7e:64:
                    62:f1:64:9e:fd:8b:59:93:60:f7:bc:7c:cb:e9:3c:
                    f6:e2:13:f5:57:43:43:b8:f5:96:c6:2f:6f:d2:e1:
                    1c:a5:48:9a:77:35:b0:e5:77:7c:0f:73:86:09:b3:
                    44:cc:59:2d:e0:19:d0:24:a2:fa:fe:cc:f1:c6:98:
                    51:5d:5c:9b:f6:19:1e:37:a2:9b:1a:f4:56:b9:76:
                    23:16:59:be:f9:77:8e:fa:19:ca:80:b5:88:91:7d:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:5F:4F:5B:36:F4:97:D1:D4:36:30:D1:14:70:58:C6:84:2E:39
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6b:fd:d5:b7:ff:a4:23:6d:a1:4d:93:75:c5:11:63:35:1f:
         fd:d8:64:02:b1:2c:74:a0:46:48:03:65:12:71:4f:bd:34:27:
         5f:7e:77:2b:98:00:49:71:5a:8c:a5:35:57:b4:ec:9d:25:97:
         34:6b:01:7c:b4:d3:59:f2:74:f9:51:92:d4:99:f9:f8:23:e0:
         51:ca:0f:4f:af:05:db:55:71:a6:2b:b8:7c:f3:f4:39:bc:49:
         2e:d8:79:78:69:0f:dc:f7:1d:0e:97:f4:ea:5f:ef:6f:f1:1a:
         04:24:53:25:3b:c4:56:98:f0:b6:3e:76:f3:ba:a3:61:95:a7:
         ec:a1:a8:69:4d:c5:23:f7:5a:ca:fe:78:e0:a0:67:f2:70:7c:
         91:73:39:07:1d:36:b8:ba:69:39:42:04:ed:66:c6:49:aa:08:
         d4:1a:05:1a:aa:f0:d7:c0:80:94:fa:86:c2:42:8c:89:9b:0d:
         ad:42:2a:4d:92:92:ad:8f:91:ce:d0:fa:b4:3a:4f:5c:d3:8b:
         82:30:77:5e:f2:0b:b6:f7:bd:92:ef:4c:b0:af:ac:20:48:cd:
         74:02:83:c7:f4:f2:aa:5f:bc:71:eb:b1:c4:5a:c5:93:02:78:
         b1:42:54:82:95:77:7b:e8:1a:63:91:81:93:b0:7e:dd:2a:39:
         bd:a5:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:52 2026 by rpki-client