This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
File:                     pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft (raw, json)
Hash identifier:          g9IKTTyfDDEhiL5bLI0Fdrs2E9Ps0w5xeGgrFMGF7z0=
Subject key identifier:   D0:00:84:22:39:62:9D:92:37:7B:52:36:C6:46:62:55:18:B3:98:F5
Authority key identifier: A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67
Certificate issuer:       /CN=A919AD11/serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
Manifest number:          0125
Signing time:             Sun 25 Jan 2026 03:55:56 +0000
Manifest this update:     Sun 25 Jan 2026 03:55:56 +0000
Manifest next update:     Sun 01 Feb 2026 03:55:56 +0000
Files and hashes:         1: pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl (hash: 2ZlNi9x82bQH/HohzvOgJUCm+v1lJNrKlYvt5GvIRxc=)
                          2: FB29FEA06C1F11EFA8C5694EC4F9AE02.roa (hash: lcZB3z1c/RDD2H75d40NX0zmlgKhDSF1Om3/hMjJ4tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11, serialNumber=A554DF3D47027FFAF7CB8A166F3E0A10E3177867
        Validity
            Not Before: Jan 25 03:55:56 2026 GMT
            Not After : Feb  1 03:55:56 2026 GMT
        Subject: CN=6975944c-0c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:f7:06:45:8a:fe:6f:23:c5:bd:96:b6:01:
                    65:d0:de:e9:d6:52:e2:9f:fe:34:b0:5f:ba:80:f8:
                    69:96:88:49:c4:80:ff:4f:7a:65:62:a7:d6:9b:d6:
                    c7:15:67:91:3e:9b:ab:08:27:26:ba:0a:21:6e:c2:
                    27:e7:27:8e:f4:ad:0c:cf:76:ab:41:9b:92:18:07:
                    69:a4:af:a9:d8:36:a5:b9:fa:b6:a8:b5:44:ed:c5:
                    9b:1d:13:e8:cf:c7:2f:d0:5c:76:d9:22:66:64:e4:
                    ed:70:16:2c:6a:10:0d:d8:aa:52:63:49:13:17:62:
                    70:aa:97:03:31:c1:e1:0f:56:58:25:5d:53:04:16:
                    12:98:26:bc:3d:7b:b6:b0:10:aa:80:25:70:4a:1d:
                    79:54:71:0e:40:9a:83:35:14:9c:60:20:02:0a:86:
                    f8:2c:26:f6:05:1e:c8:88:b9:7a:a4:21:a3:f3:37:
                    ff:25:e0:f3:b5:57:b6:ec:4f:93:8e:13:82:36:bc:
                    25:76:c5:bf:3e:6e:96:5c:d2:9b:4a:97:67:f7:cc:
                    f5:87:6a:35:57:29:69:69:ae:00:5f:f1:cf:bd:19:
                    2b:13:b3:b2:70:3d:ba:2d:a6:98:90:89:97:26:fc:
                    29:5c:ff:94:b0:18:d8:97:ff:67:15:b9:99:57:09:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:00:84:22:39:62:9D:92:37:7B:52:36:C6:46:62:55:18:B3:98:F5
            X509v3 Authority Key Identifier:
                keyid:A5:54:DF:3D:47:02:7F:FA:F7:CB:8A:16:6F:3E:0A:10:E3:17:78:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pVTfPUcCf_r3y4oWbz4KEOMXeGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/FC5038483A8911EF9817B26AC4F9AE02/pVTfPUcCf_r3y4oWbz4KEOMXeGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:64:6d:70:35:e4:6b:f6:a0:99:38:5e:be:f3:12:37:d4:
         7e:aa:5e:1f:f5:dd:8f:a8:cc:75:d4:88:ea:ef:bb:6b:5d:00:
         a3:e4:a6:2e:83:7a:47:1d:36:54:35:c9:9f:ad:ff:5a:b1:74:
         00:85:2f:a8:18:10:b7:00:71:98:90:cd:49:03:26:b5:fe:ec:
         7d:ba:61:c6:b9:73:e7:d7:e3:ba:17:42:70:ba:1c:4e:b4:4c:
         47:e9:2b:0e:a0:a1:6b:0e:a4:a1:20:17:e1:66:8d:af:80:81:
         6e:2a:73:a7:98:9e:70:26:24:06:2e:c6:a7:b1:be:22:85:a6:
         fd:4b:63:aa:ff:65:8a:88:90:54:35:64:4d:11:71:c0:f0:e9:
         9f:b6:26:01:3d:9f:f1:5c:68:f3:02:f1:a6:e2:3a:e6:d0:a8:
         35:66:d1:84:6f:b1:bb:b4:7f:c9:ef:44:c6:bf:d4:92:d5:cb:
         e8:78:fc:a6:3f:17:09:98:77:ec:66:5d:74:36:7a:ca:ed:02:
         31:03:a8:7e:34:cf:ac:f0:ee:9e:23:78:6c:52:a9:1c:48:02:
         40:d2:d4:af:a8:c6:8b:b5:49:9a:e3:45:2c:ec:82:d8:d7:99:
         9e:d6:ec:04:94:0c:10:c1:51:ac:94:15:ae:fc:14:00:a1:d1:
         ed:51:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:35:00 2026 by rpki-client