This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
File:                     Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json)
Hash identifier:          IUsJBRzdgtUThtn7BA6XfSOwNJVcJQL6AbIAaJcBMyo=
Subject key identifier:   40:E1:99:50:96:24:7A:3B:14:F1:6A:D4:D1:AC:7B:E5:32:F0:04:1A
Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E
Certificate issuer:       /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
Certificate serial:       0DC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
Manifest number:          0DC0
Signing time:             Sat 24 Jan 2026 17:32:43 +0000
Manifest this update:     Sat 24 Jan 2026 17:32:42 +0000
Manifest next update:     Sat 31 Jan 2026 17:32:42 +0000
Files and hashes:         1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: wYjYIh3BIi1nk6/VYlyxm6CBZw7rHSZqiYlsU8af//o=)
                          2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: kfnndHzaWyTnp8z7+y1i5jZZ9EYcGBwsAArn1r5+vLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl
                          rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3528 (0xdc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EF2, serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E
        Validity
            Not Before: Jan 24 17:32:42 2026 GMT
            Not After : Jan 31 17:32:42 2026 GMT
        Subject: CN=6975023a-e25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:a7:56:0c:9b:44:ad:ff:b1:52:89:87:cd:
                    cf:17:2c:aa:34:56:7e:fd:84:b2:e0:d3:39:49:fd:
                    3d:f6:fb:75:c3:bd:aa:09:1d:02:a3:00:c3:c6:d8:
                    6c:66:dc:d3:f5:24:72:61:7c:7f:df:38:41:81:cf:
                    9b:5c:c2:ac:de:fc:da:f5:68:06:00:48:b0:b0:7f:
                    33:73:ba:27:dd:58:9f:b8:23:95:93:85:21:b6:58:
                    42:57:52:8a:80:d5:e7:4a:6c:d5:a1:3d:1c:8a:52:
                    72:a0:bb:a1:67:27:ee:02:82:74:61:cb:63:ba:73:
                    3d:69:70:86:fa:27:1f:f1:0f:c5:40:3a:07:99:86:
                    bf:35:99:b8:4c:f6:a7:23:8b:7a:32:60:d0:61:a7:
                    a9:a3:38:1b:99:e4:55:41:2e:44:48:60:a6:fb:eb:
                    25:dc:96:0b:95:f4:fb:ee:8e:cd:ce:cc:5b:39:5a:
                    3f:eb:6f:56:ac:e3:85:6a:6d:77:ee:b0:d8:3b:2f:
                    e0:d3:74:11:4b:02:48:fa:31:e4:67:67:4e:3e:c9:
                    6f:f4:11:eb:ef:d1:de:32:d8:43:56:d1:7f:d9:69:
                    a7:cf:7e:cf:ed:e1:22:ee:a9:5d:a1:6b:43:0b:c4:
                    2f:6b:16:b2:61:46:52:3d:5f:f6:73:56:e3:35:f8:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E1:99:50:96:24:7A:3B:14:F1:6A:D4:D1:AC:7B:E5:32:F0:04:1A
            X509v3 Authority Key Identifier:
                keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:cf:44:a6:a4:71:aa:cd:f3:f1:24:9e:1c:09:6d:37:38:
         80:2c:7a:b4:80:c1:db:35:68:7e:da:cb:ff:a8:c5:c8:1c:40:
         c2:63:05:25:71:04:c0:28:d6:30:76:27:c4:dc:c3:0c:e9:58:
         93:5a:14:73:ee:c8:82:a2:c4:07:39:03:ce:22:aa:e3:7a:27:
         0b:27:9d:3b:22:ec:75:6b:28:36:49:a5:5c:a6:be:24:1a:9f:
         2a:17:fe:2a:1a:8c:f8:57:b8:ef:61:08:70:ed:d6:ed:b7:b7:
         45:ad:ec:ff:3f:0e:0e:4f:ee:ca:e6:50:f1:68:82:70:9f:bf:
         e0:ef:25:13:74:09:d8:2f:f3:37:e2:16:2a:68:60:c2:7a:bf:
         45:95:60:c3:95:26:6a:e9:ab:6a:f3:66:c2:0b:cb:62:11:d8:
         dd:c4:cf:46:8b:6d:70:1f:26:b6:b3:0b:6e:f5:78:58:39:86:
         f6:f4:4e:2d:bd:48:c3:24:61:13:03:da:3b:4e:26:50:e3:57:
         35:ef:2d:3c:11:d2:b9:1b:eb:27:5e:8e:15:e3:c4:9a:eb:05:
         8d:09:b1:85:60:06:15:84:ca:a2:94:94:e4:97:f1:94:8b:3c:
         98:d1:b5:f2:5b:f1:80:b1:f9:be:8e:82:a2:b2:ad:e5:92:b9:
         c4:c4:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:10:37 2026 by rpki-client