This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File:                     8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier:          6BBaMykybodDVYU7kxb34DzDbwK8z0a4FKaXRRtkAMQ=
Subject key identifier:   55:1B:6D:2C:7A:28:60:7F:27:E6:B5:C3:47:05:C2:1D:14:36:E1:FB
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number:          29
Signing time:             Fri 23 Jan 2026 06:41:10 +0000
Manifest this update:     Fri 23 Jan 2026 06:41:09 +0000
Manifest next update:     Fri 30 Jan 2026 06:41:09 +0000
Files and hashes:         1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: eih+06kCpjcgWUacibIGTULxXn6WYuXE6xqC4DCxTJo=)
                          2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: cxYtuj/s/bSvnaQ4JfJbG+7S68mrHrbAGrbGPiwy+Uo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: Jan 23 06:41:09 2026 GMT
            Not After : Jan 30 06:41:09 2026 GMT
        Subject: CN=69731806-c2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:c1:de:c7:e1:c3:e1:0a:b3:df:3f:3b:a4:
                    83:c1:7d:43:ea:c0:5e:a0:7b:18:d1:86:cd:08:b3:
                    e2:66:13:df:01:fa:3b:0c:b2:1e:2e:91:34:0c:6d:
                    94:cb:e4:15:b3:44:31:74:d3:db:a0:e9:9f:86:10:
                    5f:2d:b4:fc:41:e4:3f:8e:e2:73:8a:91:28:41:79:
                    27:b1:46:44:b6:dd:c9:43:77:5f:6b:a7:42:6e:9e:
                    a6:c8:7e:40:c0:1f:b3:19:53:7b:ac:a6:d6:be:81:
                    97:8d:ca:dd:f6:7a:fd:e5:3f:4b:96:af:10:2e:c3:
                    f9:ad:95:70:f9:73:15:4b:b9:ee:2b:34:23:de:2f:
                    6f:5b:01:4d:18:2d:47:c9:61:70:9e:37:61:53:60:
                    1c:47:dd:84:4b:92:46:7f:6f:75:2b:2d:7d:9a:95:
                    2a:ed:0a:53:90:93:ae:ad:71:0f:99:42:80:9e:75:
                    a2:c7:9b:6e:a0:4b:87:65:c6:1b:33:64:a6:bb:c0:
                    f8:54:4e:81:83:c9:71:34:8b:7b:02:cc:17:e6:3d:
                    20:ed:4b:da:20:ce:54:8f:6e:ee:b1:44:d3:0a:b9:
                    a5:a9:38:4b:27:da:0c:ce:40:3b:74:a9:0e:5a:7c:
                    9a:9c:4a:57:ec:0e:89:f8:3e:8d:22:ca:61:71:b3:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1B:6D:2C:7A:28:60:7F:27:E6:B5:C3:47:05:C2:1D:14:36:E1:FB
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:22:f5:c1:7b:32:e7:19:d1:ca:1e:c9:a9:38:00:f8:17:db:
         c3:14:34:9f:8e:a4:b6:bc:29:35:73:ce:04:10:f1:35:2f:49:
         77:89:4f:17:7c:27:cb:74:02:4b:f5:69:02:87:55:30:6d:a4:
         a3:29:24:44:99:13:97:9b:9f:61:06:fd:92:81:e4:ef:fb:5e:
         3a:03:9b:62:c1:21:f5:dc:a4:89:04:5c:92:c6:bf:17:09:1d:
         97:84:5e:32:ef:cf:cb:95:61:66:42:a2:23:fa:8a:01:dd:93:
         c4:48:6b:2c:a1:71:5b:9e:c9:74:bc:14:b7:34:1d:4c:87:2c:
         69:47:65:98:ca:b6:97:7e:dd:f3:2c:fb:f7:fd:47:02:9b:ae:
         8c:c8:0b:d9:38:d2:7e:34:8a:e8:85:b5:1c:41:85:c0:f1:bd:
         5f:47:fd:e9:6a:91:a4:d8:b1:7c:09:af:10:07:50:8b:18:16:
         e7:95:f2:d4:07:c2:bc:5c:ac:bb:59:06:18:fb:2a:db:88:0b:
         6e:a3:80:fc:26:ab:e4:4c:a5:82:8f:72:b9:23:d5:69:a1:8e:
         2d:ee:1a:83:31:f8:de:d1:98:be:f6:4f:5c:b3:19:5a:a3:50:
         8d:2e:06:67:e6:f1:13:04:e1:f0:e8:a9:6d:dd:6b:84:6d:10:
         9a:95:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:42 2026 by rpki-client