This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
File:                     CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json)
Hash identifier:          dYNya+bohmJhd3D0X6iW1l2BbsbDtdQBUe9psbCjUAA=
Subject key identifier:   94:CB:17:6B:D0:14:7A:73:B7:FA:CD:64:5E:7A:AD:07:08:29:F4:ED
Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21
Certificate issuer:       /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
Manifest number:          016D
Signing time:             Sun 25 Jan 2026 03:08:54 +0000
Manifest this update:     Sun 25 Jan 2026 03:08:54 +0000
Manifest next update:     Sun 01 Feb 2026 03:08:54 +0000
Files and hashes:         1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: P36LStIgWMbE/UVsKpRjRZJa1Zuw9gBQnkC0WdSsW0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl
                          rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C203, serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21
        Validity
            Not Before: Jan 25 03:08:54 2026 GMT
            Not After : Feb  1 03:08:54 2026 GMT
        Subject: CN=69758946-175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:f9:18:f4:1e:d0:91:84:ae:86:73:7a:c6:
                    00:ec:80:fa:ce:c5:ed:25:d1:e8:9f:de:fb:60:b1:
                    2f:79:93:52:77:f5:3f:64:25:35:df:28:34:05:98:
                    15:67:d8:f2:0f:1a:ad:64:c5:76:45:55:29:c8:6f:
                    be:7b:4f:b5:7c:84:2b:b7:63:01:fb:64:7d:e3:5f:
                    be:60:5b:32:f0:f3:35:42:bf:8b:02:32:4e:e3:61:
                    d0:bd:aa:53:fa:be:21:ee:11:1e:bf:92:18:e3:b0:
                    07:aa:86:03:df:06:36:02:eb:81:54:31:bf:63:96:
                    fc:e0:9c:19:47:f4:25:92:84:e9:bf:e9:a2:04:8d:
                    ac:b9:c6:83:9a:a2:91:53:f5:aa:a7:9b:a7:c3:6c:
                    34:46:85:a4:bb:f6:6f:27:09:f8:5a:9c:71:11:a3:
                    ee:e6:b3:d4:08:eb:35:dc:41:14:08:6c:4b:da:1e:
                    51:bc:d1:7e:79:1a:dc:14:d5:31:1f:5f:91:2d:2b:
                    83:09:7d:e5:fa:29:25:9f:76:8c:6e:dd:c2:07:63:
                    ea:3c:fa:aa:60:08:a4:90:36:5a:5c:47:be:b4:06:
                    a1:24:a5:35:19:61:38:0f:d8:61:e7:ae:77:11:6e:
                    09:18:c0:56:53:bc:37:39:2a:b9:5e:fc:8f:95:c8:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CB:17:6B:D0:14:7A:73:B7:FA:CD:64:5E:7A:AD:07:08:29:F4:ED
            X509v3 Authority Key Identifier:
                keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:12:c4:9e:15:db:64:09:91:fb:97:4f:63:27:9b:31:59:aa:
         15:0c:7e:b2:0d:8d:76:1a:18:88:e8:5b:f7:f8:80:86:00:e6:
         9f:d5:bc:1a:d7:95:67:c3:c6:47:df:68:91:2f:79:cf:f7:4a:
         aa:f8:56:ba:e2:6a:57:76:e0:0c:5e:81:f3:64:6a:3d:4f:5c:
         0c:3e:b8:dd:06:6b:ec:9b:e9:83:89:95:60:17:1f:88:09:6a:
         be:57:5f:08:2c:7d:fd:df:a1:06:37:2d:b5:4a:56:04:0f:36:
         5c:f3:e0:d2:18:8e:96:92:24:b7:8a:7a:e6:9a:4c:4c:10:4e:
         7b:7a:74:c3:11:2f:ff:c9:3d:3a:44:2b:c3:c8:c6:5e:61:d1:
         63:35:bd:cf:1d:cd:53:12:b2:ee:3d:87:89:22:b2:4a:6e:34:
         87:4e:75:ca:04:0f:53:0d:9b:8a:7c:be:ab:e0:c6:62:0d:17:
         c0:21:db:74:1f:b5:6d:26:43:9d:76:9f:e9:1b:1a:03:6a:5b:
         75:91:38:f0:c8:f5:b9:11:ee:80:2e:35:47:66:b4:e8:29:7e:
         94:bf:4e:f9:4e:08:e3:1b:9c:d1:f0:66:74:b2:fe:21:35:db:
         7b:dc:42:8a:63:af:bf:4f:f1:49:9c:e4:a6:37:bd:75:ad:89:
         3f:3b:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:31 2026 by rpki-client