This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
File:                     clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json)
Hash identifier:          Yu+xsApmm0iZPzifZvJTfYJIfJjsdlecHBpSfd/JHRA=
Subject key identifier:   04:04:60:62:35:AA:EF:66:EA:8E:9C:76:79:5E:8C:A3:A4:7C:26:E7
Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
Certificate issuer:       /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
Manifest number:          0265
Signing time:             Sun 25 Jan 2026 00:49:21 +0000
Manifest this update:     Sun 25 Jan 2026 00:49:20 +0000
Manifest next update:     Sun 01 Feb 2026 00:49:20 +0000
Files and hashes:         1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: OvpA2BdFdVSNiDMt39gHyElWnHE+JIb+aQIg1OhsKDI=)
                          2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: IDoZUSrFV6jx6DSWfjQN2kUHclLhHXH1mPFI6HDO2bY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl
                          rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
        Validity
            Not Before: Jan 25 00:49:20 2026 GMT
            Not After : Feb  1 00:49:20 2026 GMT
        Subject: CN=69756891-1378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:d8:a4:26:3c:ac:ab:00:fe:ab:f3:6f:a9:
                    0c:22:6e:54:8d:80:cf:46:ef:8c:94:2e:2d:f7:53:
                    12:c3:5f:37:17:77:ab:1e:41:6c:80:e3:66:dd:ad:
                    6a:c6:51:74:ff:2b:51:83:21:a4:d1:6c:85:98:91:
                    68:cf:7f:ac:b3:c7:32:89:be:e3:e5:a3:c1:5f:3f:
                    7d:59:b8:82:3f:7d:ad:7a:88:fb:ac:31:fe:ab:66:
                    07:d6:1f:f6:08:c7:ce:de:68:bd:0e:45:59:02:1b:
                    7e:a8:34:f3:08:b9:66:9f:74:ee:eb:fe:39:a1:3e:
                    bb:67:10:90:72:f8:21:a6:5d:1a:4f:ff:05:bb:3e:
                    e4:cf:87:3f:47:ed:6c:77:21:b6:83:f1:66:bd:30:
                    28:7c:ac:16:0f:2d:3a:f9:9e:25:0c:18:8b:3a:ad:
                    f0:a9:f9:91:42:48:a8:49:8f:4b:03:ba:58:f2:a8:
                    3f:1e:1d:0f:0d:17:41:41:da:78:a5:5f:e0:ef:36:
                    b0:1b:26:63:8a:e5:61:da:d9:2f:12:7a:d3:79:c2:
                    dc:41:5d:11:61:a4:1f:a1:01:03:61:44:e1:f9:b0:
                    ab:d5:96:4f:3d:63:02:2b:70:2d:df:36:19:9d:2b:
                    92:5d:40:58:a4:06:d1:67:31:4e:b0:0d:9a:92:90:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:60:62:35:AA:EF:66:EA:8E:9C:76:79:5E:8C:A3:A4:7C:26:E7
            X509v3 Authority Key Identifier:
                keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:e2:fa:fe:6f:18:90:6f:fc:d3:85:c4:d1:0b:84:19:fc:
         a2:94:18:f1:46:39:b9:8f:06:68:8d:ad:32:58:78:cf:7b:e6:
         1d:7f:b6:6b:4d:af:f1:8b:b9:aa:03:a7:b3:8c:07:1c:7a:d2:
         6b:36:23:62:9a:5d:52:48:91:ce:39:08:ef:49:b9:29:f8:fe:
         0b:8a:9c:f5:42:50:29:1f:78:e2:5b:1b:fd:dc:bd:fa:c0:5d:
         c6:8d:0c:45:28:38:19:dc:82:8b:16:8a:45:fa:fd:64:17:90:
         ea:96:d4:e5:e9:84:59:96:d0:f5:f2:25:4e:a9:31:cf:ca:89:
         3a:19:65:98:79:85:db:b5:bd:b5:51:23:ef:02:80:ed:80:ed:
         d6:5d:02:18:0d:58:ef:33:6e:27:0f:53:10:b5:01:d9:4d:86:
         0a:85:40:a7:c9:ac:a7:38:3f:20:0e:7e:d7:b6:05:98:5c:81:
         d9:b7:d8:bc:92:6b:90:01:8a:88:15:1b:ef:1e:f7:a7:b6:68:
         46:f4:41:f3:59:df:1c:02:56:fc:c0:43:37:e8:6a:a2:95:5a:
         ac:d1:fb:85:b5:a2:1a:e6:c0:3d:ef:f5:5a:e9:8c:a7:b6:35:
         e2:23:18:86:49:46:87:6b:d9:89:a5:cb:22:95:97:34:d4:fc:
         9b:cc:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:49 2026 by rpki-client