This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
File:                     jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json)
Hash identifier:          MlEbIPC+zAzpHCnhNXrVH80CPLJ+2UK8K8vAasLmPik=
Subject key identifier:   24:2A:80:2A:F5:C8:53:18:AE:1A:76:4E:35:09:C8:B6:1C:87:D7:A3
Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77
Certificate issuer:       /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
Manifest number:          01E7
Signing time:             Fri 23 Jan 2026 01:49:55 +0000
Manifest this update:     Fri 23 Jan 2026 01:49:54 +0000
Manifest next update:     Fri 30 Jan 2026 01:49:54 +0000
Files and hashes:         1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: WQ4RZb4bqzLK9iuBjs9oZm/RcAXXhFVwcyy6oRZpE44=)
                          2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl
                          rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 01:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277
        Validity
            Not Before: Jan 23 01:49:54 2026 GMT
            Not After : Jan 30 01:49:54 2026 GMT
        Subject: CN=6972d3c3-e898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:66:68:a5:0e:1f:07:be:cf:a9:f6:c4:ad:
                    28:2f:fb:39:30:cd:32:5c:1b:e4:4a:24:5d:ba:fa:
                    a6:8d:32:5f:e0:48:28:cb:bd:c7:a1:bc:92:4d:20:
                    57:0e:d1:de:de:e8:f6:54:51:d3:37:53:08:ad:12:
                    e8:35:20:29:5f:f5:80:92:9c:67:eb:13:23:e6:cf:
                    72:f4:83:68:08:ca:d6:5a:32:85:28:a5:0a:cb:36:
                    03:ce:ac:9f:6b:0f:44:2f:aa:54:f4:c8:0f:c5:32:
                    a6:43:e4:ca:90:3f:05:3b:ee:b5:2b:c1:90:ff:9d:
                    8a:2c:9b:a5:95:37:6b:a6:4e:a4:38:a6:db:cf:f3:
                    52:a5:ed:60:9d:a2:8f:6e:1d:53:88:e1:10:18:56:
                    8f:69:02:52:9f:a9:1c:1b:e4:69:a3:88:97:ff:90:
                    cf:a9:d3:6e:45:a6:cc:18:8e:5b:f3:9b:4f:a2:b6:
                    3b:ff:46:62:3c:6a:a9:39:f0:28:9a:a5:5e:1b:d0:
                    fd:0e:c3:9d:bf:9e:2b:c5:cb:18:2b:1f:73:2c:04:
                    a4:29:d1:ee:36:68:95:b2:1c:47:17:a0:cc:bc:1a:
                    3c:aa:c0:97:a6:3c:9a:8d:1e:1e:13:16:bc:5c:48:
                    09:28:7f:36:8e:80:25:c4:07:f1:87:b9:b0:21:7b:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2A:80:2A:F5:C8:53:18:AE:1A:76:4E:35:09:C8:B6:1C:87:D7:A3
            X509v3 Authority Key Identifier:
                keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cf:6e:d9:df:3e:56:5e:ae:85:19:1b:39:ad:bf:6e:f0:8b:
         42:12:0e:71:ee:d7:c0:eb:3b:d9:65:ea:3f:82:e6:59:0c:44:
         e3:24:b1:d8:f3:65:af:f8:f2:df:cd:e5:07:01:f1:e2:4b:f4:
         33:45:4f:d4:2e:f8:3f:1a:91:53:3b:0c:0d:c2:8f:6e:3c:5e:
         d7:13:23:2a:af:7c:ee:99:b9:d5:cf:06:96:c2:36:88:e1:da:
         d4:d2:7e:23:3b:10:ba:a3:12:72:ee:d9:4c:2e:fc:35:31:0d:
         92:ac:03:fd:5e:bb:3a:0d:70:24:13:f2:38:37:b5:7e:26:18:
         50:f5:55:0d:36:e2:aa:66:7f:49:7e:c3:6a:5e:5a:dc:5b:65:
         f9:0f:42:a5:d1:c1:5a:5f:46:03:3d:8d:e8:9a:11:2d:1f:77:
         85:27:17:42:83:bd:2a:1a:aa:fe:24:02:53:ab:2d:2e:02:5d:
         94:f4:ff:66:8e:62:30:4a:19:94:e8:16:39:38:22:0c:e2:2e:
         43:07:0d:27:f0:91:36:af:e6:9a:ad:d6:3d:b7:52:af:5c:c3:
         cc:6c:53:1f:d9:95:fa:09:31:6f:2c:87:9e:00:53:0a:d1:9b:
         40:3d:cc:1e:87:c5:c2:c5:3d:71:9c:c6:03:0f:06:a7:75:4f:
         5d:f1:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:19 2026 by rpki-client