This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
File:                     SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json)
Hash identifier:          wYolcp5/XPQf+RjRRSAEhsyeS4DqxJ49OPXxAetOHVA=
Subject key identifier:   98:5E:D1:D6:C4:B4:21:92:2B:55:FA:16:71:FD:99:44:D8:B8:77:E0
Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33
Certificate issuer:       /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
Certificate serial:       0E49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
Manifest number:          0E3D
Signing time:             Sat 24 Jan 2026 17:28:40 +0000
Manifest this update:     Sat 24 Jan 2026 17:28:39 +0000
Manifest next update:     Sat 31 Jan 2026 17:28:39 +0000
Files and hashes:         1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: hdFx2le3h/DqNCxrphRjI+81XtpZIWDp3Tr133z2rxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl
                          rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3657 (0xe49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
        Validity
            Not Before: Jan 24 17:28:39 2026 GMT
            Not After : Jan 31 17:28:39 2026 GMT
        Subject: CN=69750148-8d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:fd:ae:bc:66:ce:e0:fe:fd:c6:7b:fd:b2:
                    06:51:c9:df:20:15:ae:b7:61:b2:a3:fc:bc:ee:89:
                    3b:67:8d:45:d1:1a:4a:09:74:bb:98:d0:af:60:db:
                    f5:60:d7:32:7a:a6:23:79:e7:93:b6:85:a1:4f:a8:
                    7b:29:5f:43:dd:5a:74:81:a2:1c:36:41:2b:bc:9d:
                    55:b7:9b:a7:99:b8:7b:3e:f1:dc:43:51:41:01:7f:
                    eb:f5:b6:7b:3a:cd:75:94:9a:87:d3:39:79:24:17:
                    5c:0e:91:54:1b:aa:77:64:ef:57:4c:2b:d2:89:7a:
                    35:f3:62:4e:81:68:09:25:22:63:11:40:1a:dc:35:
                    3b:7f:67:40:2c:96:a8:db:46:ac:ae:d6:50:30:ae:
                    0f:db:08:b5:c6:d1:ee:c3:43:fc:51:da:ef:3b:cd:
                    07:3a:e7:5e:f0:28:95:7b:ae:ba:66:37:ab:5c:15:
                    2e:7e:3f:8c:5b:20:d3:83:ae:15:4b:d0:0f:b0:e7:
                    3a:f3:15:84:5e:09:46:4d:ee:e4:14:49:19:55:c5:
                    0e:ab:99:f7:3c:b9:c9:a4:4b:df:21:1c:a6:7b:05:
                    19:d8:3c:87:14:cc:c6:1b:24:af:de:d2:75:66:89:
                    4f:7b:d6:15:c8:c5:f1:5c:57:a1:ff:41:d6:93:b3:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:D1:D6:C4:B4:21:92:2B:55:FA:16:71:FD:99:44:D8:B8:77:E0
            X509v3 Authority Key Identifier:
                keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:79:92:9d:8e:c3:dc:ff:ba:23:f8:37:2d:2f:b9:ed:6f:8f:
         94:3e:8c:7d:7f:41:dd:71:d0:5f:f8:7f:73:7a:54:12:f8:b6:
         56:2c:5e:70:2a:9a:70:7e:c9:24:f9:83:25:1e:ba:65:87:bd:
         5a:bf:15:33:9d:34:90:ba:b8:9c:05:82:cf:a1:bf:e0:3a:4f:
         61:54:06:02:d9:ca:e0:23:a9:8b:af:7f:fc:45:c6:ad:19:54:
         23:32:f9:b2:bc:dc:7f:c2:a4:d6:2f:f0:dc:8c:a3:0e:2e:ba:
         9f:c3:fb:1f:11:a4:f4:78:fc:b9:aa:c7:c0:7b:19:b7:16:ac:
         d2:3e:22:6d:e7:b0:b2:8b:2f:de:c7:db:33:6b:62:8e:b0:c5:
         0c:ef:ef:51:38:9a:3a:dc:de:7c:90:4c:7a:c2:8d:48:b7:7c:
         a9:79:43:1e:6f:81:3e:9b:31:a3:6f:65:87:95:28:48:e5:cc:
         24:1e:e0:3a:db:28:d8:74:00:69:18:8b:3e:b9:16:bf:29:07:
         3b:78:d3:40:9a:20:e2:4f:c3:70:d8:67:2d:a1:b5:9c:16:6b:
         cb:8f:3a:64:05:c5:53:58:b2:9c:7a:2e:18:59:8c:36:26:95:
         db:5a:a2:52:c3:a7:e7:39:d4:6a:ed:80:df:30:24:ee:3a:5e:
         be:b0:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:26 2026 by rpki-client