This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File:                     pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier:          7bLUgLr+/KVsu+uPi+qpgnjgVdJhYdzr75c3ullaWdw=
Subject key identifier:   4E:55:D7:13:2D:56:06:F4:80:4E:E2:36:75:0B:6D:7A:F9:96:E4:7A
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       11CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number:          11B9
Signing time:             Sat 24 Jan 2026 16:54:40 +0000
Manifest this update:     Sat 24 Jan 2026 16:54:39 +0000
Manifest next update:     Sat 31 Jan 2026 16:54:39 +0000
Files and hashes:         1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: 30pP7eLzFkp6Ueqq3bNIyx6LGTQa65azkoCgbbmyvEI=)
                          2: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=)
                          3: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4557 (0x11cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: Jan 24 16:54:39 2026 GMT
            Not After : Jan 31 16:54:39 2026 GMT
        Subject: CN=6974f94f-88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:75:43:8d:bc:5e:51:96:cb:0b:50:19:6a:
                    c4:9d:50:eb:ec:da:4e:46:a1:67:fd:7c:ff:79:00:
                    f8:08:11:a9:b3:3b:c0:b1:4e:df:2a:4d:be:e4:8a:
                    34:d8:93:ad:1f:22:23:80:8b:6a:ae:49:b3:e6:52:
                    40:86:4a:d8:71:38:99:d4:4d:67:03:3d:d7:55:67:
                    dc:37:54:1a:9c:1c:73:20:cf:86:1a:a6:af:8d:ee:
                    29:74:c7:51:36:99:50:15:88:12:ec:48:6e:59:6a:
                    69:58:93:f7:17:44:bf:74:33:ce:fc:cf:71:96:db:
                    f6:15:c8:c7:2b:2d:0b:a7:2a:e2:76:12:d4:3b:9c:
                    f3:17:27:70:22:da:f4:08:b5:cb:05:c0:06:ce:fb:
                    1c:38:93:75:94:85:6f:ba:b8:bd:cd:67:cb:fa:07:
                    dc:d3:89:48:e2:b9:0c:7e:56:a8:fa:ab:15:07:c8:
                    5d:2e:ff:9f:1d:f4:ac:17:80:48:6f:b1:ea:d4:f9:
                    cb:52:06:c0:bc:4c:bc:73:da:d2:70:90:00:fd:be:
                    85:29:e5:11:c6:2f:40:cd:1e:a6:90:63:90:cd:58:
                    ee:95:d7:3c:08:57:b7:e5:66:ab:f1:7f:93:c6:03:
                    d4:c6:86:c5:52:76:90:c2:3a:74:3b:44:8b:cd:8b:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:55:D7:13:2D:56:06:F4:80:4E:E2:36:75:0B:6D:7A:F9:96:E4:7A
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:17:62:2a:97:92:59:ec:e0:25:12:55:fb:94:1e:69:36:09:
         ce:76:64:e9:ab:ba:56:43:c8:b7:e2:93:e6:09:27:86:4f:c4:
         6c:57:96:f4:37:3f:9f:5b:ce:0e:38:3e:bc:bc:c1:17:df:23:
         32:c2:9f:c3:5c:ee:42:d0:e4:b7:55:30:b8:81:61:82:3c:ab:
         f2:14:af:08:db:22:57:e6:0f:d0:3e:ca:18:7b:fb:41:3c:90:
         3b:e6:3c:58:02:fc:4e:bd:26:72:70:3e:8f:64:07:d5:e3:44:
         d0:3d:1e:d5:64:15:9f:1c:e9:90:7d:c6:20:4d:bf:8f:7d:e4:
         00:4a:ac:71:b9:cd:87:2b:f3:7a:21:12:96:24:6b:f2:88:36:
         44:10:f9:e6:a4:95:17:a3:79:d5:4d:7f:ea:4e:6f:1c:07:28:
         1a:fc:03:2d:2c:d8:68:37:9f:a5:1c:3a:89:9e:ca:c2:e0:06:
         63:c4:ab:09:56:08:80:9f:b9:aa:ce:13:39:37:5d:eb:68:c1:
         25:42:8a:23:65:d9:6e:76:e3:d2:cb:77:96:0b:82:be:47:f6:
         dc:25:84:71:6c:82:ab:80:61:60:e7:f7:5b:0e:20:b6:95:f2:
         0a:51:a4:b6:12:36:2f:b1:2c:bf:c0:a0:f7:4c:14:5e:7f:df:
         16:59:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:57:10 2026 by rpki-client