This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          NskfYeiYUfP9TQLqdxFazCqGqb11WgNyToA0nviqJqk=
Subject key identifier:   10:4E:B6:E8:52:76:7D:DE:84:69:C1:44:B5:14:61:D6:F2:27:47:F2
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          0122
Signing time:             Sun 25 Jan 2026 03:55:54 +0000
Manifest this update:     Sun 25 Jan 2026 03:55:53 +0000
Manifest next update:     Sun 01 Feb 2026 03:55:53 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: W0fB8ncBrA+Cptza4049YGOSk5aHFfpwaSx8xEbUm8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: Jan 25 03:55:53 2026 GMT
            Not After : Feb  1 03:55:53 2026 GMT
        Subject: CN=6975944a-60c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:1b:ae:ac:02:6b:e2:14:4d:49:23:e1:5c:
                    c0:60:b8:f8:8d:dc:3f:ce:33:88:75:02:46:8d:a3:
                    62:38:bf:a5:6e:ee:88:42:b8:0f:26:91:3d:c1:e1:
                    12:88:4f:ff:b0:df:27:15:f8:bf:70:61:3d:ef:0c:
                    b2:d0:87:3a:92:3c:a1:86:4f:c0:0c:80:6a:12:0e:
                    b5:d3:ac:98:41:8f:64:53:ba:b7:c6:01:25:b5:fd:
                    e3:2a:d2:99:72:a1:e2:dd:13:6d:6d:d7:e9:f6:c7:
                    d1:74:4e:d8:39:39:f3:75:ac:f7:28:1f:72:b7:1c:
                    ea:20:dc:aa:bb:81:e5:13:e8:af:a0:3a:89:48:a4:
                    0c:ed:a5:d3:a3:29:cb:f0:30:0c:0e:ce:58:c5:d4:
                    40:22:6d:99:37:7b:30:23:99:6e:64:49:54:b2:ac:
                    c6:b6:34:c6:eb:cb:cc:d6:81:e9:3d:5d:f1:07:77:
                    e5:5d:f0:59:b8:87:bb:39:12:38:ad:06:22:10:41:
                    7c:c8:34:22:8d:92:01:75:d0:b7:5f:7d:ba:33:d9:
                    7c:40:87:85:0d:b4:1f:ad:5b:98:a2:37:d6:66:24:
                    6a:55:9e:cc:44:31:98:dc:66:f0:ca:83:12:02:21:
                    7c:5c:3b:43:5b:20:7b:b2:7e:23:c8:3d:37:57:0a:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4E:B6:E8:52:76:7D:DE:84:69:C1:44:B5:14:61:D6:F2:27:47:F2
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:65:f7:1a:43:f7:a1:d0:f7:0f:af:42:e7:ef:85:31:5c:
         fa:9a:73:72:73:b2:57:4f:44:65:79:75:16:2d:71:af:65:db:
         62:f0:94:93:e3:1e:40:a2:31:93:00:3e:72:9c:a3:8b:e4:1a:
         8c:7f:49:a2:4f:2a:f8:b4:c5:56:af:83:65:8f:72:22:8d:59:
         ed:66:1a:c4:29:96:84:b4:1c:f7:c5:95:c0:92:b8:46:15:79:
         67:3a:06:94:3a:98:e1:0a:e5:c3:f7:76:74:0a:22:12:92:e6:
         88:15:a2:26:db:5e:cf:17:4b:e4:09:87:73:c1:d3:89:8f:4c:
         91:fb:ce:4a:a8:d7:38:43:c1:9e:2e:63:5b:32:a0:1b:81:a9:
         49:41:67:f9:12:c1:d3:15:b6:00:e0:af:9b:49:fe:32:93:b3:
         95:35:c6:ed:0c:05:49:14:9e:4f:90:e6:77:33:91:7f:12:df:
         59:0c:29:8f:02:1a:76:f5:d0:50:2b:48:a7:bd:26:7b:fc:7c:
         4c:68:a2:4f:99:db:9b:bd:14:63:85:fe:11:b4:46:e4:a4:e4:
         ed:25:f9:93:be:ad:0e:74:bd:f0:38:d9:c5:33:d9:50:f6:05:
         0a:89:83:7a:75:60:ac:c4:1a:69:ed:69:5e:9b:2a:3c:52:5e:
         f8:97:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:16 2026 by rpki-client