This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
File:                     n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json)
Hash identifier:          alcbhnyKSjccmWOWhdoFeKfLassjxlYFfYHkwQV7wjg=
Subject key identifier:   62:CA:1C:A1:50:28:BA:65:2E:75:B9:BF:C7:A5:97:CD:6B:80:D0:52
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Certificate issuer:       /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
Manifest number:          01F3
Signing time:             Sun 11 Jan 2026 01:52:28 +0000
Manifest this update:     Sun 11 Jan 2026 01:52:27 +0000
Manifest next update:     Sun 18 Jan 2026 01:52:27 +0000
Files and hashes:         1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: B+ErF9hD2RlRAGxzvM2A0lbm3eFmzBszvZ1PBmpXsvc=)
                          2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: ITYEhnuTHbSOT5pXrKzWCMAzAI5Kyc/8PF7B1lAL6A8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
                          rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
        Validity
            Not Before: Jan 11 01:52:27 2026 GMT
            Not After : Jan 18 01:52:27 2026 GMT
        Subject: CN=6963025b-727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:df:52:26:53:04:21:e2:cc:11:81:20:32:
                    34:4d:82:23:b9:27:63:7a:ee:09:07:32:89:0b:ea:
                    da:fc:ee:25:34:25:0f:ec:39:42:02:f2:2d:42:48:
                    cb:4f:b4:6a:9b:b0:a8:98:51:fa:5e:77:10:53:18:
                    b2:46:e5:42:11:7d:15:86:d6:8c:40:27:09:fc:cd:
                    33:b1:4a:2c:e2:ce:fc:9a:b9:0c:af:66:50:19:73:
                    f0:62:8b:fe:cf:10:98:f1:d0:dd:5f:83:bd:ef:9d:
                    74:01:28:fc:2b:0e:b7:84:e6:4e:d3:12:ba:02:9d:
                    b3:7e:1e:b7:9c:e3:93:0d:1b:84:0d:7f:c4:20:d4:
                    91:0f:b3:06:06:92:9a:3f:c4:b4:5a:84:59:8d:9a:
                    d5:0d:ae:56:4e:80:76:26:04:ae:bb:96:51:ab:d7:
                    0a:e5:47:da:44:d3:e5:09:c0:89:e0:fc:e5:4c:38:
                    da:1f:47:a9:a8:03:2a:5f:94:d0:4c:f2:6f:82:9a:
                    ba:40:96:a5:b3:38:3e:a2:e5:54:20:09:fd:5e:07:
                    af:c1:3d:5b:18:c5:f6:03:ee:9b:4d:bb:37:8c:3f:
                    eb:91:cf:e3:ae:1f:f3:74:47:30:49:3b:3d:11:4a:
                    b0:6e:6c:b7:ba:48:58:fa:76:c3:17:29:f2:d9:c0:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:1C:A1:50:28:BA:65:2E:75:B9:BF:C7:A5:97:CD:6B:80:D0:52
            X509v3 Authority Key Identifier:
                keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:71:71:cf:ae:72:6c:60:04:6b:26:9a:84:a8:fc:42:9d:f3:
         7c:a9:b9:e3:84:a4:57:c9:7a:cf:6f:ce:d7:db:58:ad:86:4f:
         df:48:5a:1d:ec:99:43:12:c0:2a:c9:f5:47:c9:12:9f:61:58:
         4c:ee:f2:22:f5:e0:1d:62:38:19:b0:d8:3d:13:84:eb:f1:f8:
         19:92:c1:a4:59:1c:7a:78:fe:0a:73:63:cf:76:3c:b0:7d:6a:
         c4:73:38:85:23:43:d5:9d:c4:4d:a7:2d:ee:77:87:06:b0:c8:
         9e:ab:00:55:ff:71:65:cb:f9:a2:80:df:a0:8e:b3:0a:fe:dd:
         88:8d:13:23:2a:69:82:b8:6c:6b:80:7b:69:73:10:9d:fc:8b:
         82:f8:9a:be:b4:dd:3b:d7:c6:d1:22:cd:82:c1:82:ce:c6:5f:
         0b:5f:81:8a:6e:79:67:a9:26:2e:28:cc:8b:77:8e:df:21:b2:
         0f:cc:ab:10:56:b3:c9:8a:c0:90:52:99:5a:a5:79:6d:d6:2b:
         7f:20:e9:fb:e9:3c:21:f0:50:fc:61:dc:16:f9:94:d0:ba:70:
         b8:42:e1:4b:3b:db:eb:bf:38:5c:b3:39:39:05:1f:45:7a:16:
         80:ae:d4:23:89:e5:86:06:e2:67:10:ae:d1:20:79:29:b8:95:
         ff:e2:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:51:05 2026 by rpki-client