This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File:                     RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier:          fujQhFnouct0Aj8vj9Ntu+bfHrTecuDF7j8kx250bN8=
Subject key identifier:   0A:C9:AB:B1:0D:3B:7F:17:B7:CB:5C:77:69:45:AB:75:A0:F4:39:D8
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer:       /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial:       1313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number:          130A
Signing time:             Sat 24 Jan 2026 16:45:46 +0000
Manifest this update:     Sat 24 Jan 2026 16:45:45 +0000
Manifest next update:     Sat 31 Jan 2026 16:45:45 +0000
Files and hashes:         1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: C6cey7W6EtKrzwR+/zmVQBooQTzKcGHhtrAaHMkJzew=)
                          2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: eY3ibsYzV91/JflqQnul3DxFJH+5O7KLj0qmVYC2zhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
                          rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4883 (0x1313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
        Validity
            Not Before: Jan 24 16:45:45 2026 GMT
            Not After : Jan 31 16:45:45 2026 GMT
        Subject: CN=6974f73a-4c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:dc:36:8f:56:59:b0:10:e6:87:cd:0a:fc:
                    25:8e:ce:6b:b9:96:b6:b5:ba:6e:66:72:3c:58:1c:
                    54:84:15:b4:03:bf:0a:f8:d0:49:83:fd:67:ef:b7:
                    35:58:55:6c:a5:41:8d:07:3d:99:00:cb:53:4a:9c:
                    ce:9c:6a:60:28:69:49:d8:d3:b4:8a:15:7d:f2:10:
                    5c:4d:0a:c4:d6:95:0e:8f:a8:8c:af:85:b6:ce:31:
                    6f:61:fe:3b:12:e6:7e:fe:b6:c0:7b:2a:0b:9e:ca:
                    28:f6:56:22:08:a4:93:77:b8:1f:61:d9:17:17:9e:
                    11:1b:ab:7a:dd:0b:3e:33:05:30:e2:e9:a9:aa:30:
                    41:36:25:9b:ae:92:bd:71:43:b1:34:78:3c:c9:9e:
                    2f:a8:7a:bc:20:7a:4f:3d:5b:ae:de:71:ca:bd:ef:
                    b7:e2:8c:19:90:2a:01:eb:89:1e:14:12:ec:38:13:
                    a3:21:05:f5:d9:b9:03:ac:c9:e9:e3:1f:5b:61:0e:
                    41:70:50:24:46:91:64:cf:7f:bf:8c:9c:d0:48:62:
                    53:20:dc:f7:83:82:c9:c4:3c:8e:25:98:90:9a:52:
                    63:47:36:31:92:77:89:eb:93:ff:4e:ed:5c:da:94:
                    3e:e6:bc:79:1d:bc:0a:67:e3:ad:2a:35:e5:4b:b5:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C9:AB:B1:0D:3B:7F:17:B7:CB:5C:77:69:45:AB:75:A0:F4:39:D8
            X509v3 Authority Key Identifier:
                keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:25:50:f5:ab:e6:02:d6:53:36:e4:f5:5b:f9:ab:fc:7b:
         98:67:51:4e:12:2f:1d:7d:a3:04:93:06:2c:a9:85:5f:39:d3:
         d2:32:ae:ca:9b:a4:49:95:1e:ca:83:4c:b6:04:90:59:e0:77:
         e9:c9:d2:89:a4:09:56:b1:11:e0:75:56:b2:67:3d:ea:8d:b6:
         96:5b:0b:d8:cc:36:f0:f7:56:f8:97:6a:af:13:65:90:e8:3e:
         63:2a:eb:8a:42:db:32:5e:47:cd:e3:04:59:64:d6:13:27:d1:
         ca:22:33:3e:96:82:45:ff:b9:d2:f3:2e:25:84:f5:c4:9e:b3:
         ed:32:40:f0:18:50:f2:f9:40:f3:c9:25:63:a4:48:d6:44:f8:
         fa:89:48:8b:3a:f4:e8:6a:70:41:20:c8:ff:85:1f:cd:04:80:
         01:4a:73:3a:fd:72:23:8e:3a:cb:2f:a9:df:4b:87:2c:c7:e1:
         56:f3:76:1e:19:2d:a7:3a:b9:b4:e9:52:dd:c1:76:18:ed:12:
         98:7a:6f:2b:5f:7f:b1:37:4e:10:ee:ae:ed:1d:64:dc:d6:1c:
         86:d7:df:ba:21:dc:d2:31:da:08:35:5b:77:b8:ad:7a:88:85:
         ba:c0:0e:32:48:85:ca:69:4d:53:df:94:7e:97:a0:86:2f:07:
         c8:e8:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:56 2026 by rpki-client