This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
File:                     CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json)
Hash identifier:          soHByl3FVHsIQP/ijjSr19BQwOpSyaJKn7LSkWFXkCQ=
Subject key identifier:   2B:BB:6B:5C:54:19:30:CC:66:21:B8:20:E6:93:FC:2D:13:98:37:FC
Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
Certificate issuer:       /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
Certificate serial:       0C81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
Manifest number:          1446
Signing time:             Sat 24 Jan 2026 18:03:11 +0000
Manifest this update:     Sat 24 Jan 2026 18:03:10 +0000
Manifest next update:     Sat 31 Jan 2026 18:03:10 +0000
Files and hashes:         1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: fKPQsC2AHr6WtRR4UKaFSqOhagngeakVNvtjys4a79c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3201 (0xc81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
        Validity
            Not Before: Jan 24 18:03:10 2026 GMT
            Not After : Jan 31 18:03:10 2026 GMT
        Subject: CN=6975095f-e4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:ef:a3:14:da:bc:86:13:0a:6a:65:c1:20:
                    9d:3e:2f:ac:b4:db:58:fe:27:01:20:4f:17:80:82:
                    05:a3:8d:e4:ae:d7:71:62:60:7b:f6:3e:74:2f:0d:
                    3a:c7:91:53:4d:35:c0:cd:2d:bb:bc:cc:7f:69:9a:
                    b4:fc:eb:c2:26:cf:3e:01:0f:75:cd:3a:12:39:cb:
                    3c:6b:d9:e9:8a:f7:c0:43:8e:b6:bc:18:22:ef:33:
                    71:17:06:0c:47:05:da:f9:3b:05:4a:2f:b3:20:af:
                    b3:5a:a2:06:e7:7f:98:cd:1d:ef:ae:fc:be:a7:42:
                    8e:93:81:2c:6b:6e:65:68:cd:1a:b6:1e:eb:b4:a4:
                    cd:0e:07:b6:da:49:5c:dc:64:3d:50:51:56:6c:55:
                    ad:02:29:32:1e:22:80:3a:27:d6:d9:ef:fe:c7:38:
                    af:49:9e:9d:b2:c6:41:20:83:f6:e3:9d:cf:88:3b:
                    40:d0:d2:62:77:c2:34:1c:e1:e2:ac:3a:ae:87:7a:
                    da:50:7e:6f:07:06:d2:3f:a4:73:cb:bf:d3:22:55:
                    a1:51:53:b9:fe:5d:98:50:f9:d1:00:64:0f:72:ae:
                    de:81:00:1c:23:1c:6d:5b:6e:ab:4b:53:8f:e3:91:
                    2b:ec:20:72:72:36:58:28:ef:49:59:e2:1c:12:c3:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BB:6B:5C:54:19:30:CC:66:21:B8:20:E6:93:FC:2D:13:98:37:FC
            X509v3 Authority Key Identifier:
                keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f7:b9:dc:74:ac:61:24:58:fb:da:d7:2b:5b:dd:db:db:01:
         d2:79:12:ca:c1:cc:16:2b:04:40:d0:8a:04:d8:42:40:89:db:
         4e:f8:05:5c:b3:8a:fc:56:ee:59:4c:9f:cb:84:7f:e2:63:df:
         e0:be:40:70:0a:c5:a1:2c:03:1c:c2:82:dd:1c:80:6b:98:87:
         c3:3c:88:9f:16:98:42:5a:64:0a:b1:65:b7:5e:15:21:92:88:
         81:6c:6e:12:66:0c:4a:41:4d:bc:b0:25:85:bc:44:10:ae:c9:
         38:7d:cc:d0:fa:14:98:a1:c7:61:d2:94:13:77:d8:e7:18:3e:
         6b:41:20:02:7f:7b:34:21:b4:95:8a:7b:65:7f:f1:9e:bc:61:
         a7:65:ee:a7:d9:eb:cd:6f:1f:3f:35:bc:89:bf:e5:c3:d2:81:
         a4:d0:04:06:d4:73:67:b1:56:1c:17:66:75:f3:49:6b:7f:7a:
         ef:14:88:88:7e:bb:6a:44:df:bb:a3:25:33:a0:68:2a:a7:fe:
         6c:28:04:3a:7e:76:ad:5c:98:6b:61:0d:b7:1c:cc:26:e4:3d:
         f7:61:42:74:7d:86:85:7b:8a:fe:fd:72:c3:a2:4b:b6:16:02:
         19:df:07:ff:87:db:ca:d5:77:d1:8e:25:d7:ec:48:50:3f:99:
         cc:44:26:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz
MTRFQUZCRDUwHhcNMjYwMTI0MTgwMzEwWhcNMjYwMTMxMTgwMzEwWjAYMRYwFAYD
VQQDDA02OTc1MDk1Zi1lNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCzvoxTavIYTCmplwSCdPi+stNtY/icBIE8XgIIFo43krtdxYmB79j50Lw06
x5FTTTXAzS27vMx/aZq0/OvCJs8+AQ91zToSOcs8a9npivfAQ462vBgi7zNxFwYM
RwXa+TsFSi+zIK+zWqIG53+YzR3vrvy+p0KOk4Esa25laM0ath7rtKTNDge22klc
3GQ9UFFWbFWtAikyHiKAOifW2e/+xzivSZ6dssZBIIP2453PiDtA0NJid8I0HOHi
rDquh3raUH5vBwbSP6Rzy7/TIlWhUVO5/l2YUPnRAGQPcq7egQAcIxxtW26rS1OP
45Er7CBycjZYKO9JWeIcEsNRVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu7a1xU
GTDMZiG4IOaT/C0TmDf8MB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC
NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy
dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDD97ncdKxhJFj72tcrW93b2wHSeRLKwcwWKwRA0IoE2EJAidtO+AVc
s4r8Vu5ZTJ/LhH/iY9/gvkBwCsWhLAMcwoLdHIBrmIfDPIifFphCWmQKsWW3XhUh
koiBbG4SZgxKQU28sCWFvEQQrsk4fczQ+hSYocdh0pQTd9jnGD5rQSACf3s0IbSV
intlf/GevGGnZe6n2evNbx8/NbyJv+XD0oGk0AQG1HNnsVYcF2Z180lrf3rvFIiI
frtqRN+7oyUzoGgqp/5sKAQ6fnatXJhrYQ23HMwm5D33YUJ0fYaFe4r+/XLDoku2
FgIZ3wf/h9vK1XfRjiXX7EhQP5nMRCZV
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:34 2026 by rpki-client