This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          8xg5URJm6iFLB+khjK2happyWg4IFF//rvnF2elsooo=
Subject key identifier:   69:31:82:21:CC:6D:20:FB:08:57:D1:9E:CB:47:D1:F8:F3:73:35:61
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          CF
Signing time:             Sun 25 Jan 2026 04:58:33 +0000
Manifest this update:     Sun 25 Jan 2026 04:58:33 +0000
Manifest next update:     Sun 01 Feb 2026 04:58:33 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: /LTkz7TTuJaRQ2FRWXd8bA6sQJCtV+gQcJ5zXhDrW3o=)
                          2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Jan 25 04:58:33 2026 GMT
            Not After : Feb  1 04:58:33 2026 GMT
        Subject: CN=6975a2f9-07da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ab:3c:ee:3d:be:ee:bf:93:00:45:eb:12:76:
                    12:a4:e1:91:a2:16:6a:82:9c:32:6b:e2:81:32:cd:
                    a9:8d:9c:75:b3:d6:4b:b1:20:63:c2:36:b0:a0:ec:
                    ad:d7:07:b9:a8:b7:9d:41:07:3f:87:59:71:48:eb:
                    af:89:56:86:60:1c:80:63:cd:73:24:4e:2a:fa:16:
                    9e:76:51:5c:91:3e:0f:27:72:fb:87:42:73:93:22:
                    3f:49:7b:71:f8:9f:87:c3:9b:38:82:de:69:86:55:
                    31:b3:f9:2e:d2:87:5b:46:6d:9a:51:98:cd:c3:21:
                    bb:d5:54:57:70:13:a3:88:ad:7c:96:2c:15:d6:63:
                    71:0b:13:da:ee:92:83:5d:de:ad:58:3f:ce:a9:f3:
                    a6:55:d1:e3:9a:57:02:c3:cf:5f:55:b1:0e:6c:47:
                    87:6b:36:53:2d:70:5e:ad:bc:84:38:c8:cf:37:6f:
                    cc:af:1f:dd:7f:bf:5e:a4:72:de:90:f5:83:11:cd:
                    43:2a:e6:32:4f:78:83:fa:6a:e1:c6:82:6e:2d:4d:
                    0c:df:f4:1e:70:a7:f5:c7:a9:46:a1:50:db:f9:09:
                    7f:9c:ac:cb:79:1b:d7:16:a3:53:49:7a:4c:fb:17:
                    12:66:df:27:e2:93:94:bd:f7:23:2a:77:33:70:50:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:31:82:21:CC:6D:20:FB:08:57:D1:9E:CB:47:D1:F8:F3:73:35:61
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:5c:45:50:3a:aa:b3:7b:8e:ba:20:f0:a4:b6:45:99:4b:
         48:2f:84:b4:7e:e5:3c:b8:5b:56:f6:a5:dd:54:28:0c:ae:0f:
         d6:32:4e:41:04:be:b8:eb:2d:e2:1d:b8:4b:85:40:34:6f:39:
         b1:3f:32:17:8c:6d:e8:07:da:57:79:07:db:49:e5:8c:3b:7e:
         4b:0b:de:c9:04:1f:f3:03:e7:aa:9b:0e:2d:24:9b:3a:1b:87:
         8f:09:64:23:1a:e2:a1:65:9b:73:2e:07:00:3c:89:3a:6e:cd:
         ad:1d:1c:5c:ad:fb:3d:c3:81:ad:66:79:6d:36:5a:3c:b4:97:
         62:17:4e:ca:2f:91:d3:23:c0:8d:01:bf:4d:bb:81:8d:5f:f7:
         15:e8:6c:44:49:d7:34:4d:88:ed:4b:9d:c5:10:c0:87:dc:e8:
         39:2e:cd:36:74:e9:91:d9:e7:03:a3:b8:54:9e:26:58:48:79:
         5b:93:3f:0e:7e:e7:44:df:06:f0:42:10:96:27:41:99:1e:30:
         0c:11:66:27:2d:73:30:ab:dd:fe:c1:02:3a:d8:d8:57:aa:09:
         43:97:34:c1:6b:4c:50:66:07:50:d0:89:5b:16:9c:ca:3e:8f:
         a5:1f:ba:92:f8:51:6b:c8:35:d7:30:ef:2f:ca:78:5e:c7:ef:
         6d:62:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:07 2026 by rpki-client