This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
File:                     CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json)
Hash identifier:          yTZcxBzJVR3OKd7EK8RFkluSXJte8OCuKsDlQW8PqRM=
Subject key identifier:   02:A6:6F:1A:E6:AC:92:05:01:8E:2D:FC:DE:DD:65:D4:EE:BC:41:58
Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
Certificate issuer:       /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Certificate serial:       0CF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
Manifest number:          0CE9
Signing time:             Sat 24 Jan 2026 17:46:43 +0000
Manifest this update:     Sat 24 Jan 2026 17:46:43 +0000
Manifest next update:     Sat 31 Jan 2026 17:46:43 +0000
Files and hashes:         1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: /vicN/mIOw8ZqnrOjQZH/QhFvPtxu2x3X7Jx3UoNoEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl
                          rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3314 (0xcf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
        Validity
            Not Before: Jan 24 17:46:43 2026 GMT
            Not After : Jan 31 17:46:43 2026 GMT
        Subject: CN=69750583-3aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:1c:45:e3:4a:f6:6b:d7:0c:15:96:eb:a7:
                    b5:5a:32:12:5d:27:db:33:47:aa:cc:fe:00:42:46:
                    c2:70:d5:be:67:18:aa:4c:d0:4b:52:55:42:d3:c6:
                    2e:ac:03:eb:9f:e6:77:8d:23:0d:ef:fe:8d:41:6b:
                    68:76:9d:a9:6d:1b:2f:32:a2:a8:99:49:3c:34:26:
                    00:9a:13:74:9d:06:63:4d:4e:0b:4f:c1:65:94:22:
                    91:c8:7c:57:78:c4:4e:81:9c:21:31:45:aa:6c:4c:
                    67:9a:e3:85:d4:f2:39:0c:26:c2:1c:54:c8:7a:21:
                    16:ad:b4:7d:ba:c9:4a:1f:cd:18:2d:35:48:1b:d1:
                    fe:54:0f:8d:cf:39:a4:89:cb:61:e9:bc:d1:4c:80:
                    c7:47:5d:d9:2d:fb:88:f9:3a:85:32:6c:42:f2:bb:
                    49:2a:f9:85:d6:e3:3d:cc:c4:21:d5:4f:38:5a:45:
                    cb:10:7e:96:d8:ab:7e:d3:37:77:a0:a3:6b:6e:cd:
                    69:bc:1c:04:4d:7e:14:31:82:19:a4:f3:32:2c:07:
                    0b:5a:f3:70:5f:0f:ab:48:ee:ce:24:de:0f:19:b4:
                    d7:b5:ca:83:f8:58:c3:6e:70:74:f1:da:8b:99:62:
                    79:18:cb:90:18:21:8a:1d:8e:ec:fc:cc:01:73:6e:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:6F:1A:E6:AC:92:05:01:8E:2D:FC:DE:DD:65:D4:EE:BC:41:58
            X509v3 Authority Key Identifier:
                keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:36:44:5e:7f:ce:2f:77:e7:29:ac:28:a0:0e:88:2b:11:
         b9:c2:70:df:e7:4c:88:fb:a2:ae:dd:0f:0e:98:0c:93:67:49:
         ad:54:a0:17:a1:2f:a9:53:e0:cf:b2:3d:9f:30:46:55:5c:91:
         e9:6c:b3:83:19:66:14:2a:af:de:c1:01:91:ae:7f:d1:59:62:
         ac:40:6c:77:2f:b5:50:83:5b:f4:a9:21:46:8c:a7:cc:6e:f2:
         c8:56:25:26:aa:6f:b1:c0:e1:77:85:e9:65:b0:5c:79:7e:c6:
         9f:29:4c:b8:01:76:f2:35:08:66:57:50:f1:a4:f7:06:e2:c3:
         bd:3a:d3:df:ae:c5:80:c8:dc:38:d4:a0:2e:75:47:00:9c:1e:
         a7:e1:94:39:4e:df:5a:27:12:4a:0e:1b:92:36:55:76:30:f9:
         6f:b0:24:96:b0:66:b5:8b:40:3f:8f:8d:b2:07:56:bb:de:15:
         4a:0f:4b:ff:70:5e:fb:9b:9d:b6:5e:7c:82:5a:0c:1e:2f:82:
         ce:c6:98:56:d3:77:4a:27:b9:6a:9f:5a:a9:9a:4a:e7:67:c3:
         96:44:87:d1:11:55:f8:7d:bc:fd:f5:e3:b8:ac:01:d6:9c:6d:
         15:be:f1:e6:ab:e2:64:5e:f8:cf:38:d4:d9:c0:c5:20:9f:e0:
         c5:41:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:36 2026 by rpki-client