This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          2LqMDato1yyoF77VmRUMMctPndYtQiupr1asVldRdcQ=
Subject key identifier:   D9:3D:3E:21:58:63:BC:67:9A:FE:C5:D3:97:89:42:F0:74:5E:0B:35
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       081B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          081B
Signing time:             Sat 24 Jan 2026 20:16:41 +0000
Manifest this update:     Sat 24 Jan 2026 20:16:41 +0000
Manifest next update:     Sat 31 Jan 2026 20:16:41 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: D6qlD/I6xMHtfbaxp8MPlTKZ7sjpPHkkKey3TB0BUjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Jan 24 20:16:41 2026 GMT
            Not After : Jan 31 20:16:41 2026 GMT
        Subject: CN=697528a9-2b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:ed:6a:cd:aa:97:b2:29:b6:8f:41:71:40:
                    82:c1:bc:cb:d0:96:f4:ea:ab:eb:bd:33:99:e4:96:
                    fb:b3:7c:aa:99:f7:5d:25:60:6d:89:1a:51:a9:af:
                    ef:81:3a:08:56:4d:dc:99:1f:af:d0:c1:4a:bc:f1:
                    f8:d3:d9:31:bf:5a:7d:ec:05:dc:71:a9:a5:87:13:
                    9d:00:05:f1:c7:e9:e3:92:09:ab:7e:be:cb:db:78:
                    9e:e1:44:6a:96:76:5f:19:06:15:b1:ba:17:de:27:
                    6d:4c:fa:95:ae:4b:85:6c:da:23:eb:1b:34:2b:1f:
                    e4:06:bc:c8:ac:17:ac:28:54:95:20:84:f7:b1:2c:
                    0c:34:bc:28:2c:cd:b6:29:fc:6a:e5:b9:de:bf:e7:
                    af:8f:4f:36:cb:f1:7a:8f:19:62:ee:73:a5:4e:0c:
                    7c:b6:e3:8b:19:53:96:92:f7:57:45:4f:9d:38:61:
                    ce:3e:92:6b:c4:54:d5:49:45:85:86:d6:49:28:ca:
                    01:69:a0:ea:65:35:99:a0:d0:9b:cd:28:74:5e:f0:
                    8a:09:52:f0:2f:5b:5f:b5:14:3b:c4:df:b1:93:5e:
                    75:11:9c:1c:c3:fa:5f:b3:3f:b7:8c:49:de:9a:48:
                    60:0d:ac:8f:c7:29:2e:5b:93:16:c5:17:d4:93:02:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:3E:21:58:63:BC:67:9A:FE:C5:D3:97:89:42:F0:74:5E:0B:35
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2e:e9:68:e7:82:ec:dc:6e:ef:d5:9d:aa:21:16:56:11:3a:
         bc:a5:72:78:19:cc:b9:29:00:9a:5a:66:28:5b:80:c0:87:14:
         a5:2f:bd:45:b8:d2:b7:29:b5:db:ec:36:d8:02:69:b4:87:13:
         db:7b:b4:00:c4:27:74:65:be:4f:71:b0:7b:78:2d:52:a4:c5:
         a6:cd:2a:cc:67:3c:f5:cf:15:a7:bb:69:37:06:2d:1b:f0:46:
         f6:3d:c5:2b:20:e5:87:7e:e1:57:a2:3e:e9:ac:10:07:90:5c:
         2b:29:9a:88:b8:ec:10:7a:a9:2f:d0:e4:e7:18:bf:3d:5f:c2:
         88:b8:bb:61:da:20:e8:16:37:95:2d:a0:b5:39:9e:15:09:85:
         e8:4b:57:c6:06:23:ce:c6:1b:9c:c7:d3:21:c3:24:53:3a:7b:
         0c:ca:f0:32:64:5f:8e:f2:ff:1f:1e:f2:b5:59:b0:3d:d5:ac:
         ae:85:91:87:8f:5d:37:cb:b6:21:f8:6c:0c:39:2f:c0:6c:f2:
         00:7e:41:65:82:db:e4:18:b3:f3:83:3b:85:8c:01:87:eb:54:
         42:35:a3:34:4d:d1:7f:54:d8:b3:58:7a:6c:67:06:2e:84:43:
         cf:79:9c:7b:74:f7:ef:2d:5b:38:05:e9:28:46:9e:3a:cc:89:
         e3:e2:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:47 2026 by rpki-client