This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File:                     Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier:          /VtRKkNNaFk1So9lKbkiR4Ed8oRiG++SXO85vkIBkvY=
Subject key identifier:   36:E2:26:A2:53:AF:D3:58:BF:7D:0F:C2:E8:9A:55:53:E3:E8:03:DB
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer:       /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial:       0539
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number:          0705
Signing time:             Sat 24 Jan 2026 22:43:02 +0000
Manifest this update:     Sat 24 Jan 2026 22:43:02 +0000
Manifest next update:     Sat 31 Jan 2026 22:43:02 +0000
Files and hashes:         1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: we5PxY7HPFt3QKd51aywlYoGYEB75n+UaSTFxUFh6ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
        Validity
            Not Before: Jan 24 22:43:02 2026 GMT
            Not After : Jan 31 22:43:02 2026 GMT
        Subject: CN=69754af6-19af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:5f:1c:f8:82:a8:3b:7a:85:23:7b:b0:2d:
                    ec:35:51:5c:55:a9:e7:65:db:dd:77:19:81:74:06:
                    d9:0b:64:8e:73:90:cd:29:4d:7e:8b:36:ea:26:03:
                    c8:71:2f:7a:f3:85:35:fa:35:de:b8:8a:cc:e6:00:
                    f8:f9:a9:61:2b:5c:46:8d:cb:c6:cd:38:1c:60:3c:
                    f9:d5:fa:ad:cc:3f:21:49:87:b4:6c:8b:42:ea:c5:
                    de:11:f6:3a:83:f5:0b:0f:71:cd:ce:92:49:a8:3b:
                    94:35:b3:a4:90:de:9d:3b:77:a2:d1:69:b0:95:d7:
                    db:ff:37:8f:09:49:db:2e:58:f2:8c:11:fb:21:03:
                    e2:a0:ef:29:44:b0:fd:f2:4d:44:5d:93:8f:8f:12:
                    99:be:15:a3:95:ce:eb:f4:13:1c:91:26:eb:fc:d5:
                    62:9c:89:22:a5:89:69:7d:2a:01:51:a6:29:22:91:
                    ce:35:35:1a:4f:5c:40:f1:95:fa:5a:a1:99:e8:dd:
                    db:d8:c3:3c:f9:be:37:4d:97:1b:f0:62:15:fa:95:
                    2e:8b:ef:6f:2f:01:52:00:e3:d8:3d:b6:10:18:11:
                    8c:54:e6:c0:13:0f:00:4a:8b:d4:1d:e8:9f:f4:c9:
                    1c:48:e0:52:67:f4:39:f1:26:25:1f:25:51:32:13:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:26:A2:53:AF:D3:58:BF:7D:0F:C2:E8:9A:55:53:E3:E8:03:DB
            X509v3 Authority Key Identifier:
                keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:6e:c0:17:7e:86:42:7c:19:26:57:73:e6:cf:ef:a6:9c:
         59:c5:0c:12:77:52:57:b4:03:76:24:51:09:2c:29:ea:64:5e:
         64:5b:b0:88:07:5f:a1:19:93:0f:f7:2e:4a:63:a7:8a:dc:18:
         4c:0a:1f:63:83:23:5d:c4:a4:43:d2:ca:59:c0:9f:ae:92:86:
         00:d5:23:b3:e2:cb:30:05:db:4d:70:6a:63:f8:c5:31:66:6f:
         cc:b9:8d:25:f3:d0:a4:79:0d:58:2d:68:65:c0:b8:df:98:a5:
         92:cf:f0:b6:a6:7e:92:39:76:a0:31:50:a5:2b:91:9f:7a:ae:
         6b:40:8b:bc:ea:73:70:5e:dc:66:d7:5a:95:ae:bb:f3:45:f3:
         af:f3:5d:98:71:a6:de:79:9d:40:48:f9:4f:21:cf:3f:f2:ae:
         0a:1c:65:2d:4f:cb:f1:db:ff:20:9b:03:73:01:a8:ee:93:d6:
         d2:ca:5d:30:03:13:8d:70:01:8f:b3:86:01:8c:11:41:fe:41:
         6d:75:f5:10:67:a4:c4:5a:67:3c:e8:81:1f:35:da:f3:1d:b1:
         11:cf:7f:d0:ca:08:b3:29:c9:fc:c8:f6:d0:6e:7d:50:16:3e:
         52:6f:1e:2a:8c:6a:7a:41:8a:79:5c:db:26:1d:63:cb:e2:6c:
         14:71:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:47 2026 by rpki-client