This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          WxesAoUhD+cR6hY1dQXzA7Qsz4odJcuU8PRFb6TpFKE=
Subject key identifier:   AF:40:DB:84:03:51:4F:CD:34:B2:50:11:FE:90:D1:AB:DA:BE:83:AE
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          0106
Signing time:             Sun 11 Jan 2026 04:16:30 +0000
Manifest this update:     Sun 11 Jan 2026 04:16:30 +0000
Manifest next update:     Sun 18 Jan 2026 04:16:30 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: DfzewCF2Rnuq6cWflIwquadpY8zgXevBdQeMhPHR3xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 04:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Jan 11 04:16:30 2026 GMT
            Not After : Jan 18 04:16:30 2026 GMT
        Subject: CN=6963241e-bea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:53:0f:81:e5:59:d0:f0:08:19:5f:5e:7e:b1:
                    fd:fb:7c:ac:b2:a1:9e:c7:55:09:8d:e3:f2:44:dd:
                    c6:45:f2:b7:78:19:1d:01:f5:40:ba:71:b7:23:cf:
                    be:e7:b9:85:05:f7:71:f6:54:a9:45:81:44:ec:14:
                    9b:84:75:99:b0:5e:43:c8:f9:a2:71:42:2e:90:9d:
                    8c:8e:4b:80:46:c4:c2:85:12:3e:c7:c1:2a:69:68:
                    cd:77:fe:5e:dc:8f:7e:be:d2:74:ae:d7:40:f2:c8:
                    b2:eb:73:f3:e7:c1:ff:b5:06:ad:56:d5:a3:b1:47:
                    21:b4:aa:64:81:2a:0c:76:b5:5b:bc:b2:db:9c:27:
                    03:97:23:00:3e:e3:bf:00:96:5e:8f:43:9f:39:cd:
                    f1:d3:23:27:1a:6d:8f:d6:62:d8:50:12:95:0e:41:
                    25:c8:c1:a5:d1:41:c9:f9:75:40:1b:87:f0:ae:36:
                    ad:40:cd:cb:b6:e1:27:37:d3:a5:62:d9:a4:e4:9c:
                    64:fa:72:f6:de:7a:7b:6f:8f:27:02:47:96:5e:9b:
                    7a:23:40:5a:0a:14:e0:57:aa:2e:49:86:4e:7e:82:
                    ea:9f:a7:76:80:15:ed:c7:38:ce:c4:a2:44:73:33:
                    bd:08:1b:c1:ed:72:53:4f:b7:d3:83:63:0c:9f:bd:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:DB:84:03:51:4F:CD:34:B2:50:11:FE:90:D1:AB:DA:BE:83:AE
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:11:d4:96:e2:cc:bd:85:f5:a1:ff:97:ba:30:17:7b:40:
         58:75:9e:35:6c:07:ff:2d:b6:0f:88:ff:7a:0b:8f:46:a2:9e:
         7f:80:19:a1:1f:34:4f:a9:76:52:8c:f1:d4:26:66:46:5b:b7:
         fd:64:8a:6a:95:7a:36:ba:c7:91:1d:2f:de:12:c3:32:78:fd:
         07:b7:45:45:99:1f:ee:84:dd:fb:32:b4:ad:0f:76:a5:88:6d:
         d8:28:4f:89:39:96:5c:ad:38:a4:98:b1:2d:1f:29:6c:d9:b3:
         ca:fb:da:9e:46:3d:47:e4:75:bd:0a:90:3a:af:6b:b4:8e:68:
         7b:be:5f:0f:f7:2b:f0:4c:dc:d1:fb:74:b9:60:b4:21:28:d1:
         60:52:e9:f3:18:23:fd:4f:b4:7d:fe:1f:b0:56:ba:e2:0d:26:
         f6:56:de:16:23:00:21:5b:19:1c:bf:df:70:e0:ba:88:9c:58:
         ad:7c:21:d7:c1:a1:94:f6:99:ef:f4:64:96:7a:96:1e:94:7a:
         27:08:ba:87:21:33:8d:86:e2:f9:89:b7:8d:01:6f:24:f4:c1:
         6b:4f:81:51:5f:75:a1:77:f1:4c:b3:e5:c8:c0:0f:46:6f:c5:
         b1:b1:4a:42:df:28:d4:e2:88:e5:94:3e:cb:8d:73:94:d2:46:
         11:90:d4:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3Q0QxMTAvBgNVBAUTKDAzRjRERTAzQTFDOTg1QzM0REM2ODI3MkY5RDc3MzVC
MzNGQTZBREUwHhcNMjYwMTExMDQxNjMwWhcNMjYwMTE4MDQxNjMwWjAYMRYwFAYD
VQQDDA02OTYzMjQxZS1iZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3lMPgeVZ0PAIGV9efrH9+3yssqGex1UJjePyRN3GRfK3eBkdAfVAunG3I8++
57mFBfdx9lSpRYFE7BSbhHWZsF5DyPmicUIukJ2MjkuARsTChRI+x8EqaWjNd/5e
3I9+vtJ0rtdA8siy63Pz58H/tQatVtWjsUchtKpkgSoMdrVbvLLbnCcDlyMAPuO/
AJZej0OfOc3x0yMnGm2P1mLYUBKVDkElyMGl0UHJ+XVAG4fwrjatQM3LtuEnN9Ol
Ytmk5Jxk+nL23np7b48nAkeWXpt6I0BaChTgV6ouSYZOfoLqn6d2gBXtxzjOxKJE
czO9CBvB7XJTT7fTg2MMn72hmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9A24QD
UU/NNLJQEf6Q0avavoOuMB8GA1UdIwQYMBaAFAP03gOhyYXDTcaCcvnXc1sz+mre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ERjBCNjg2QTVF
QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhjTk54b0p5LWRkeld6UDZh
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzdDRC9ERjBCNjg2QTVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhj
Tk54b0p5LWRkeld6UDZhdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM5BHUluLMvYX1of+XujAXe0BYdZ41bAf/LbYPiP96C49Gop5/gBmh
HzRPqXZSjPHUJmZGW7f9ZIpqlXo2useRHS/eEsMyeP0Ht0VFmR/uhN37MrStD3al
iG3YKE+JOZZcrTikmLEtHyls2bPK+9qeRj1H5HW9CpA6r2u0jmh7vl8P9yvwTNzR
+3S5YLQhKNFgUunzGCP9T7R9/h+wVrriDSb2Vt4WIwAhWxkcv99w4LqInFitfCHX
waGU9pnv9GSWepYelHonCLqHITONhuL5ibeNAW8k9MFrT4FRX3Whd/FMs+XIwA9G
b8WxsUpC3yjU4ojllD7LjXOU0kYRkNQL
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:54:35 2026 by rpki-client