This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File:                     PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier:          T6nzoUeaeL2OMbOv/540KJM+064fw1vJT/Pmk33MtEc=
Subject key identifier:   BF:7F:8A:B0:40:31:A3:3A:51:F3:D2:4C:80:FC:09:FC:D1:33:B1:63
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer:       /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number:          2B
Signing time:             Sun 25 Jan 2026 06:42:01 +0000
Manifest this update:     Sun 25 Jan 2026 06:42:00 +0000
Manifest next update:     Sun 01 Feb 2026 06:42:00 +0000
Files and hashes:         1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: 8BmTEkYuFfIe2xuRyYKeFaTDe/x1tL5xADCTKULPJQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
        Validity
            Not Before: Jan 25 06:42:00 2026 GMT
            Not After : Feb  1 06:42:00 2026 GMT
        Subject: CN=6975bb38-812a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:0d:b9:8f:fa:90:80:2d:20:61:80:1c:26:
                    e8:be:6c:c3:9e:ee:96:14:bc:53:c4:d5:ae:b9:87:
                    e8:68:a2:d9:4e:83:78:46:5d:b6:a1:10:ec:90:2e:
                    6c:57:e4:40:f9:20:aa:ee:87:8c:33:62:d6:42:07:
                    ba:ee:55:9b:99:ab:02:78:99:9b:67:5e:62:fc:f9:
                    60:9e:2c:f9:69:f8:31:10:8d:07:16:89:94:ab:8b:
                    6f:28:f0:32:9a:18:2e:45:e1:9a:70:54:c7:02:88:
                    d9:a6:8a:11:88:34:3c:de:8e:a4:fd:08:99:71:cd:
                    59:e5:7f:db:80:8b:c4:b9:5b:e3:08:e5:64:a0:98:
                    b3:91:66:01:36:25:b8:6a:f1:61:4b:3e:99:17:da:
                    04:48:03:25:2e:38:51:f2:3a:cf:30:93:79:f7:25:
                    8c:49:28:77:f3:c3:fe:43:60:df:2f:ea:bc:58:30:
                    26:07:05:ba:f3:06:52:c2:9f:32:cf:6d:7e:b8:7c:
                    d2:77:b3:e6:99:b4:5b:ec:27:69:39:c5:cd:00:da:
                    ad:76:b7:01:33:ef:b7:c6:1b:b0:95:e6:30:6c:04:
                    cd:b4:08:4a:aa:4c:7e:54:95:dc:8c:89:45:00:a8:
                    25:3d:e6:b0:1c:00:99:ac:58:84:e7:bc:35:1d:bf:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7F:8A:B0:40:31:A3:3A:51:F3:D2:4C:80:FC:09:FC:D1:33:B1:63
            X509v3 Authority Key Identifier:
                keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:1d:ee:e2:fe:02:f1:b5:8f:d5:37:f6:d8:92:3f:65:ab:
         3f:66:71:44:26:29:96:a0:94:76:99:a8:b6:78:e1:42:af:ba:
         9b:6b:9b:7d:02:9f:0c:b0:68:13:47:ae:40:8d:87:1c:04:9f:
         8d:2e:95:8a:a3:79:1b:6b:37:42:a0:0f:62:46:69:1e:44:b1:
         0d:79:e9:d9:14:a1:35:a1:dd:d2:81:eb:e8:69:1a:74:57:45:
         ef:1f:66:c7:c2:f3:78:fe:4b:4b:bd:3d:d0:ca:3c:11:88:06:
         0a:19:92:ca:9d:a8:14:4f:2b:75:2a:8b:40:6c:54:77:66:40:
         fe:f8:cb:7a:b0:5f:a7:07:b8:f4:94:51:db:9a:02:a1:4d:f6:
         2a:25:00:e1:f2:fd:2f:09:ab:42:b5:14:af:d4:b2:ef:ec:04:
         57:0a:a4:77:55:6b:a0:3f:b9:18:60:99:85:1b:3c:6c:1d:45:
         7c:47:70:97:01:15:e0:8d:ae:7a:45:eb:7d:0d:9e:0e:d8:e5:
         cd:20:7e:93:a2:51:2b:eb:68:8f:8b:55:cf:51:36:b4:3e:c2:
         fb:fd:b0:03:92:2d:89:14:18:d6:a9:19:1a:0c:57:8a:26:6a:
         d5:c9:a2:db:87:f5:b2:38:bb:c1:81:e6:a1:2e:e9:16:1d:cc:
         43:b9:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:25:05 2026 by rpki-client