This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
File:                     u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json)
Hash identifier:          ijZEuit+YvU3Vc1CnKE2ACVyDnKnjXg9yJuxlg83pUU=
Subject key identifier:   9E:25:51:21:DC:57:45:23:51:40:5A:15:F9:91:9F:99:EB:35:FC:C7
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Certificate issuer:       /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial:       0711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
Manifest number:          070B
Signing time:             Sat 24 Jan 2026 21:11:56 +0000
Manifest this update:     Sat 24 Jan 2026 21:11:56 +0000
Manifest next update:     Sat 31 Jan 2026 21:11:56 +0000
Files and hashes:         1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: Q0RvtY/VkMMzV6Rb+dyyjgCiOcCtnPNUQ7MTerVHHRs=)
                          2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hyfMZHqHSYXqXmUoPBYl5C2bAAKrO9L6ZCwOSgIJA4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
                          rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
        Validity
            Not Before: Jan 24 21:11:56 2026 GMT
            Not After : Jan 31 21:11:56 2026 GMT
        Subject: CN=6975359c-0e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:f2:0f:9f:f6:ca:cf:fa:8e:c1:1c:f5:9f:
                    ef:43:eb:ee:71:62:ac:f1:ac:ca:d7:12:f0:55:87:
                    5a:2c:08:67:6a:96:e9:92:4b:e3:4a:80:e3:6f:ce:
                    b6:bb:1c:18:43:20:66:e6:b8:92:95:ea:e9:68:48:
                    2b:12:5f:e0:54:91:e4:36:40:ae:bc:af:8d:e7:d8:
                    2b:47:98:78:e4:a3:be:3d:98:e6:45:65:29:da:1b:
                    4c:de:99:bd:9c:2e:71:0a:6c:3d:56:17:e2:a8:bf:
                    47:c1:b0:06:c4:49:f5:d4:f0:b1:c8:2e:6d:e5:a9:
                    1b:be:48:f2:a0:46:21:48:bd:d7:ca:48:9e:d9:68:
                    00:dc:cd:7b:11:be:e6:7a:1b:32:c1:2f:88:39:fc:
                    57:cb:be:85:10:85:04:ed:d1:46:81:a0:8f:b8:fc:
                    c6:83:d5:7c:49:2f:f4:2e:b8:6b:b2:99:8f:6b:75:
                    1d:52:1e:1c:90:d7:5f:53:37:47:18:0b:39:27:94:
                    ad:49:20:20:ef:6a:e2:e5:98:a5:90:f2:83:d2:c8:
                    02:fb:24:83:44:85:d8:6e:6d:88:a4:3d:a3:9d:c6:
                    b0:3d:64:11:bd:c2:73:f7:fd:7d:20:56:d5:e8:83:
                    48:fb:11:d2:c6:1e:b3:51:4b:2f:2c:6e:d0:46:9b:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:51:21:DC:57:45:23:51:40:5A:15:F9:91:9F:99:EB:35:FC:C7
            X509v3 Authority Key Identifier:
                keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:4a:1f:36:cb:f6:a5:85:7e:58:d0:ae:cc:bf:9d:0f:2a:28:
         41:b1:01:5b:ca:9b:76:df:2e:18:9d:ef:10:96:fc:c2:0d:55:
         a7:fb:88:68:bd:02:3c:35:49:31:a9:94:48:a8:18:58:63:fb:
         80:8c:b0:1e:67:ee:99:c8:fa:b5:58:35:a6:08:e0:70:93:d1:
         60:3f:b8:4e:cd:c2:3d:e0:9b:b4:9c:06:85:5e:27:60:2b:ce:
         cc:da:42:ed:31:20:48:c4:bf:9c:48:84:4c:f0:08:ed:84:6d:
         98:53:61:42:ec:0e:75:6b:32:13:51:b4:a2:a2:85:9a:3d:46:
         4c:7f:27:bd:96:f9:9a:8d:a3:b5:30:a4:32:b5:63:f9:67:b6:
         f7:d5:39:ec:e4:06:32:b1:3f:6b:95:26:65:1e:f8:ec:f4:06:
         3a:ff:dd:b7:28:41:97:d8:d8:08:c7:c9:b3:0f:98:91:23:b5:
         8c:ff:36:07:dd:c9:9b:89:eb:9e:60:1f:6c:de:29:ab:82:65:
         24:43:fb:9e:b3:0a:cb:63:57:3a:e7:c6:f9:df:aa:5f:b7:52:
         60:e0:2b:1f:03:fe:25:2b:af:a3:7b:02:48:24:d7:af:b8:76:
         80:a9:08:75:bd:a9:5a:ca:94:01:d6:a4:fc:54:67:35:0d:3b:
         32:74:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:07:48 2026 by rpki-client