This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File:                     ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier:          Oy8DGj2NJpH8REGd1Rn8GcoCL7NfaBumMWtzV7PLnDA=
Subject key identifier:   9C:0F:C0:9B:B0:DA:96:3D:A4:34:36:F6:28:5D:9C:CC:9C:9D:ED:28
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer:       /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial:       0C2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number:          0C1D
Signing time:             Sat 24 Jan 2026 18:23:09 +0000
Manifest this update:     Sat 24 Jan 2026 18:23:09 +0000
Manifest next update:     Sat 31 Jan 2026 18:23:09 +0000
Files and hashes:         1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: //IENYxEbbRLC1Eq9AsPPc7n0C6+Fi3duTMSaSJHjNE=)
                          2: 7AC6992E655411F088401528C4F9AE02.roa (hash: MVPXC6NdGWdp+qZvK+cp29BC/aexVTk4i7nFJG647t8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
                          rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3119 (0xc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Validity
            Not Before: Jan 24 18:23:09 2026 GMT
            Not After : Jan 31 18:23:09 2026 GMT
        Subject: CN=69750e0d-0958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:e8:2c:df:57:76:83:09:99:6a:46:a7:78:
                    3b:20:06:e2:b7:60:9f:20:4a:36:8a:7c:47:47:26:
                    c2:d4:b2:7e:f3:e2:06:19:e4:f3:c7:75:11:28:46:
                    17:78:a7:50:7b:24:ea:03:92:54:c0:0e:06:66:0e:
                    dc:83:af:ab:39:65:f9:26:18:16:78:9b:ea:c0:66:
                    31:b6:0d:39:be:9d:9a:df:05:6a:90:90:b1:e9:93:
                    b8:0e:81:99:c9:e6:eb:85:83:06:69:22:cf:5f:b9:
                    5d:01:ec:00:58:f6:67:a0:c1:bb:0d:cc:69:e2:d3:
                    2f:c8:06:31:44:db:52:88:11:b8:f5:f2:c3:ac:f0:
                    63:a5:f3:69:25:f9:4d:12:1e:46:27:a2:46:d0:e3:
                    83:c3:b0:4b:df:a2:11:f2:00:51:28:35:8b:3e:a4:
                    e4:ec:71:f8:77:f5:4f:7b:1a:16:92:fb:cf:7f:7b:
                    cb:f2:e5:41:6b:f9:84:94:cb:6a:da:ab:ff:ff:9a:
                    3e:fb:5c:46:18:fd:22:1b:da:0f:2f:0d:34:f6:b5:
                    cb:0d:14:2e:e4:2b:39:d0:c5:61:64:6e:b3:30:01:
                    5e:c8:2f:19:00:fe:86:0a:f2:9a:0e:31:80:d7:23:
                    c9:43:52:44:06:0f:51:86:fd:a9:8f:b0:f8:2c:d4:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0F:C0:9B:B0:DA:96:3D:A4:34:36:F6:28:5D:9C:CC:9C:9D:ED:28
            X509v3 Authority Key Identifier:
                keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:17:4a:85:41:30:ba:59:c4:4b:41:40:52:25:4d:d4:4b:da:
         88:9a:b9:73:de:db:67:89:9a:dd:64:45:39:e8:ca:92:0e:92:
         14:d0:1f:c4:09:6f:12:73:e7:0b:8c:f2:57:c0:ca:d6:55:a4:
         49:db:6b:42:da:58:a7:e2:6f:61:cd:b5:0d:55:a5:0d:99:ad:
         e5:e4:22:c7:2a:37:8d:71:1e:de:d3:15:ef:c6:09:e6:33:44:
         18:45:0d:16:92:c7:4f:9d:c0:d7:82:d7:12:d4:c0:88:e5:3b:
         2c:9a:7f:67:29:5f:13:d1:0d:9a:1c:eb:7e:ae:f3:63:a9:d8:
         d4:39:20:ae:21:81:16:ac:4d:a6:e4:ad:bc:4f:bc:ab:ea:f6:
         7d:be:7c:ca:ac:fd:33:73:da:00:ab:9e:e7:98:c5:7a:c0:54:
         c8:61:57:3d:87:20:02:3a:14:7d:e0:31:36:39:d5:dc:c9:f8:
         5b:d6:28:2b:a3:72:50:33:e8:4b:b1:be:bd:e6:d6:de:aa:20:
         f6:97:27:a3:57:1d:ac:9d:57:99:43:bf:a8:52:fe:21:3a:6f:
         0d:8d:ad:52:89:74:79:a5:c0:ef:03:18:13:02:06:7a:a6:11:
         fc:7e:c2:a2:c6:50:82:b2:14:48:4a:3c:cb:39:3e:b7:39:21:
         a5:35:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:15 2026 by rpki-client