This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File:                     jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier:          G11zShZtHOxIQAmay8HXVmDc5A6C4ggaOsMWJOPLFS8=
Subject key identifier:   65:68:16:D9:7C:73:F1:D6:48:28:72:CD:F5:17:22:B8:C9:70:5E:A1
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer:       /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial:       028A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number:          027A
Signing time:             Sun 25 Jan 2026 00:47:45 +0000
Manifest this update:     Sun 25 Jan 2026 00:47:45 +0000
Manifest next update:     Sun 01 Feb 2026 00:47:45 +0000
Files and hashes:         1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: 7aNTIHhoH8aVgYM/Qh64D2GbIgFNB6gdfr5uKJxGVtM=)
                          2: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: Tt5QEGk9H3QguHqaRgkxIgqMFYCotd2Vf9fW+VmHipQ=)
                          3: 99E52804462E11ED90035452C4F9AE02.roa (hash: zxfAEewqEIDozNRd2wIy4OCBkhmBpCjLntjcObVaFpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
        Validity
            Not Before: Jan 25 00:47:45 2026 GMT
            Not After : Feb  1 00:47:45 2026 GMT
        Subject: CN=69756831-43bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:73:d8:b0:0c:0f:f8:20:43:ff:16:1d:d2:
                    56:16:28:41:b9:95:bc:7d:d6:9a:2e:71:47:4d:0c:
                    c7:5a:de:85:ad:6f:9f:fb:f4:cc:26:a2:19:83:41:
                    1e:24:c4:be:13:60:97:44:7a:f8:90:18:18:63:63:
                    51:57:dc:f5:d2:03:08:b5:58:fa:a4:88:f0:64:51:
                    de:d6:46:fe:96:4b:9d:d0:d8:c2:05:97:46:5d:ae:
                    cd:f5:ee:2c:96:5a:e2:53:1b:01:5b:88:eb:dd:16:
                    b0:45:c7:21:1c:d1:30:ac:d9:10:20:1e:f9:f8:de:
                    be:0a:58:00:f4:2e:28:ab:d0:88:74:48:77:76:d1:
                    40:32:37:63:15:b8:a9:e3:9e:bf:c2:a0:5c:07:45:
                    4a:5c:29:cb:58:2f:9d:4c:df:c0:9c:08:fb:f3:bc:
                    55:b1:7f:5b:a9:42:b8:c6:86:f3:dc:69:a1:5f:1c:
                    f6:0c:f9:b3:ba:44:93:4e:4c:45:53:73:d2:05:7e:
                    4c:82:fa:c9:9b:38:5b:8e:e1:18:2e:2b:ba:4b:f2:
                    1f:ba:e8:a4:1f:28:70:a3:06:1b:9c:2f:9f:69:17:
                    0a:52:22:1e:7b:5a:be:3a:66:1e:98:f7:d0:c8:5b:
                    dd:f9:1e:d0:b4:95:ba:fa:73:e0:6b:22:2e:bf:6c:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:16:D9:7C:73:F1:D6:48:28:72:CD:F5:17:22:B8:C9:70:5E:A1
            X509v3 Authority Key Identifier:
                keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:8d:88:77:c8:88:cb:3b:39:e9:ca:4c:22:33:ea:0d:b6:
         bf:b3:ba:77:82:33:ce:b9:0c:5e:19:03:e8:3c:75:a1:21:49:
         c5:89:ce:3d:1f:13:99:7b:32:e4:61:0f:2f:8a:ba:69:98:72:
         24:d7:36:44:5c:b3:4f:a6:11:df:57:b3:49:71:d9:ff:88:cf:
         11:d2:83:a5:0c:45:79:ec:42:ab:93:d5:a2:ae:c9:4b:07:0f:
         01:db:49:26:99:20:ea:67:89:56:39:c0:11:da:92:e6:63:30:
         69:27:36:83:a5:ab:fc:69:65:c9:7e:66:d2:7a:65:0c:ff:96:
         5e:e7:9d:ea:8e:88:2a:f7:8a:28:ef:34:dd:7f:22:67:4d:86:
         dc:82:b4:3b:22:76:e4:8b:c0:49:6f:44:ff:5f:be:02:48:fb:
         53:e3:3e:6a:bf:c0:d0:2b:99:5c:cd:43:c0:d9:b7:03:5c:35:
         e3:8c:58:2f:c4:c5:9c:45:84:36:96:26:78:14:3e:78:d2:a1:
         77:84:a7:2d:85:7e:83:4f:29:17:fc:fc:94:e6:bd:74:92:cd:
         cf:0c:44:78:3e:6b:82:89:49:57:a6:6e:29:e2:b0:00:f8:fd:
         13:92:f5:f7:74:ea:9e:b4:dc:73:ed:52:8c:4e:69:fc:dd:bb:
         92:2b:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:18 2026 by rpki-client