This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File:                     MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier:          4Izz94FdDfPC7aWOUWewSoG6if9BiKQDIksT3gsiwQQ=
Subject key identifier:   E0:C8:FD:9E:DE:06:68:0F:E8:5D:11:B2:42:6A:CD:93:84:8F:94:79
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number:          0511
Signing time:             Sat 24 Jan 2026 22:50:50 +0000
Manifest this update:     Sat 24 Jan 2026 22:50:49 +0000
Manifest next update:     Sat 31 Jan 2026 22:50:49 +0000
Files and hashes:         1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: ssQCt37nh4yeTpGdeQBod71X5B3r+TWLPSAw9JCTH2U=)
                          2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Jan 24 22:50:49 2026 GMT
            Not After : Jan 31 22:50:49 2026 GMT
        Subject: CN=69754cca-930f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:3e:d6:7f:bf:f7:64:02:c1:68:99:2e:a6:
                    fd:77:7d:94:37:0b:7f:39:46:e6:93:f6:a2:bf:48:
                    08:be:33:aa:cc:1e:02:d0:37:77:9b:3a:57:06:1d:
                    5f:3d:22:19:df:77:6f:23:3e:de:0e:77:c6:bc:c8:
                    a2:dd:fd:2b:e5:32:78:82:60:82:6a:c8:4d:03:05:
                    ea:a5:a9:9d:fd:f5:74:b0:3d:9d:0f:54:1c:23:73:
                    79:20:3e:b8:33:0f:93:80:2c:04:92:51:f9:44:47:
                    4b:61:63:f7:1f:c1:c4:6e:0d:33:c9:9b:a4:c1:cd:
                    ee:f2:44:da:5f:94:cf:dd:07:4a:16:40:98:0f:8f:
                    fa:10:71:f7:f6:e8:63:a4:b9:84:27:49:2b:e7:7a:
                    a7:06:3b:fe:29:bd:d3:54:be:ef:b2:b2:86:9c:95:
                    89:b8:6e:59:ee:86:d7:0b:9f:de:c9:22:c2:37:d5:
                    bc:79:de:c5:72:02:08:de:7c:d6:1b:cd:77:d9:68:
                    ce:a2:1c:e3:f2:6d:67:e1:b3:fb:ff:da:8d:88:c9:
                    c6:78:97:3d:1c:98:72:76:04:f4:43:ca:4d:e7:28:
                    08:fe:3a:b6:d3:48:42:9d:90:dd:db:12:82:07:4b:
                    30:73:a2:49:c3:f4:40:82:2c:33:63:a8:74:8a:df:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C8:FD:9E:DE:06:68:0F:E8:5D:11:B2:42:6A:CD:93:84:8F:94:79
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:43:ed:fc:bd:ca:bc:cc:ef:69:02:12:fe:e5:07:36:b6:
         17:3c:ba:5f:e7:7a:96:6b:1e:a5:1b:d4:ae:68:91:3d:e2:79:
         30:42:6c:25:2e:2c:c8:3d:cc:bf:fb:d2:cf:a2:9b:a3:bf:b5:
         44:36:da:46:14:e8:68:6e:62:9d:03:6f:71:ad:25:e5:65:d4:
         cf:26:da:5e:9b:ea:bf:3f:1e:7f:64:0b:c1:1b:7d:cf:b6:e2:
         cd:9e:fd:4e:fa:6f:e2:41:74:c6:3c:e7:ed:14:bc:dd:b2:71:
         3a:36:fd:77:e6:c3:f5:b2:c8:71:13:7a:7d:a0:12:75:c7:59:
         a8:7a:6b:94:77:34:1e:77:4c:9b:19:a8:6f:c2:ca:ce:81:59:
         f4:fb:11:9d:d0:9d:6b:41:1c:68:b8:c3:65:eb:9e:89:ef:c4:
         85:26:69:15:b1:80:67:18:07:48:38:b7:41:20:93:e1:87:bf:
         35:0b:0d:00:fc:93:24:f1:18:1a:d2:a1:c5:3f:21:cf:46:7b:
         56:aa:c8:8a:c5:8c:7e:68:ac:65:48:e5:b9:70:bc:dd:81:db:
         6e:6a:b8:3e:61:32:8e:bc:7e:2b:d0:20:e8:e3:2d:4a:d9:de:
         33:77:ea:58:58:d8:1e:9b:05:f1:fe:3e:92:87:38:fb:2c:9d:
         2b:9f:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:22 2026 by rpki-client