This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
File:                     AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json)
Hash identifier:          sl7ykCtBw2ehkPCPzIOIZeb+BubK3Rstp1QtMDJtiIs=
Subject key identifier:   2B:87:26:09:86:64:3D:DD:B5:34:71:08:3D:30:E7:CB:56:07:93:91
Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
Certificate issuer:       /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
Manifest number:          63
Signing time:             Sun 25 Jan 2026 06:09:44 +0000
Manifest this update:     Sun 25 Jan 2026 06:09:44 +0000
Manifest next update:     Sun 01 Feb 2026 06:09:44 +0000
Files and hashes:         1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: vtQLLkUEsQpA2EusE08GLidt3wOPJj/R1NosMWTYt1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
                          rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
        Validity
            Not Before: Jan 25 06:09:44 2026 GMT
            Not After : Feb  1 06:09:44 2026 GMT
        Subject: CN=6975b3a8-1f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:83:e3:f4:1a:fc:13:76:41:d1:0a:7a:70:99:
                    31:63:78:98:1c:91:e9:31:64:e2:1d:76:14:36:a8:
                    a6:17:68:78:0f:61:b9:2d:67:a3:85:d5:12:62:bc:
                    8e:9b:60:6b:e1:49:26:b5:2f:28:ac:72:f2:df:61:
                    84:c5:b3:99:30:e3:f0:92:00:24:68:ad:6f:4b:11:
                    a6:1f:ba:9b:6c:1b:ed:67:6e:98:74:95:13:1b:4a:
                    46:ae:d1:b7:1e:0a:83:d0:52:5f:45:1c:7d:04:b0:
                    bf:c8:99:d3:c3:ff:5c:25:2c:4a:72:5b:c7:5a:39:
                    c0:92:c1:a9:3d:77:61:cc:6f:ff:4c:d6:04:7f:95:
                    db:25:3c:7b:cf:7d:63:2d:02:35:32:51:3f:3f:da:
                    da:f9:30:76:71:25:f7:8d:c7:fc:84:14:94:9a:08:
                    41:94:a5:04:c9:8e:5f:4a:76:e0:2d:b9:1e:e9:a3:
                    4f:a7:4e:6e:18:35:fe:b9:82:75:0c:76:0b:f1:ea:
                    b6:e3:2b:73:03:ee:09:0b:92:0e:bb:c0:ff:cb:19:
                    0a:44:77:cd:96:c4:59:68:5f:36:d3:4b:9b:16:33:
                    31:fb:1e:87:48:9d:1c:3c:f3:39:a9:64:47:cf:ab:
                    d3:d7:90:8d:6b:ae:89:bb:da:cc:9e:95:5f:36:f9:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:87:26:09:86:64:3D:DD:B5:34:71:08:3D:30:E7:CB:56:07:93:91
            X509v3 Authority Key Identifier:
                keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:55:07:b8:84:98:88:6a:97:86:b3:84:21:af:f9:41:85:
         f9:ec:db:19:e8:55:47:e1:6b:63:05:02:e9:98:35:a8:46:6c:
         11:bb:52:c2:99:e2:1e:36:1a:07:9f:f7:f1:ed:ef:36:ae:e8:
         c1:6e:9f:ad:d9:42:2f:4d:39:77:5b:63:c0:29:ca:ed:78:37:
         f0:f4:5c:22:49:1c:42:a1:d4:76:62:00:fd:2c:41:ed:e4:2d:
         02:fb:9d:9f:38:7e:33:c5:77:03:61:0f:7c:5b:a3:0c:eb:8e:
         14:0f:2c:9a:6e:13:e2:1d:39:df:41:e6:0d:87:4d:82:b3:28:
         42:d6:82:98:40:6a:59:9d:56:42:41:21:34:7b:c7:75:d7:6c:
         11:77:1e:d6:1d:0f:a6:0f:51:f4:6f:6e:a5:05:81:91:d9:16:
         ff:8d:e5:58:cd:07:f7:cf:5a:4c:8f:ea:c3:bc:b1:cc:78:d3:
         47:d2:d3:69:3f:28:3c:d7:c7:2d:d5:1d:bb:31:71:d4:e0:8a:
         2d:9c:bd:fb:99:16:b1:9e:96:2f:c3:12:5d:30:86:05:df:11:
         e7:26:d7:05:24:2a:27:5c:25:a7:a0:9b:d7:07:bd:ed:82:51:
         a4:e7:5c:09:cb:14:5b:50:28:35:cd:b5:7f:0f:48:05:ca:f0:
         93:48:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:03 2026 by rpki-client