This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
File:                     rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json)
Hash identifier:          7/7LBOg8nOyTGY7gG8WqA4dL/ixuZ3UHcqxPjdPB1Bc=
Subject key identifier:   34:EE:ED:DC:F5:F8:A8:33:D5:90:7E:88:30:D1:CA:45:4A:92:84:D2
Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1
Certificate issuer:       /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
Manifest number:          0231
Signing time:             Thu 01 Jan 2026 01:35:14 +0000
Manifest this update:     Thu 01 Jan 2026 01:35:14 +0000
Manifest next update:     Thu 08 Jan 2026 01:35:14 +0000
Files and hashes:         1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: HcWwY5dlV/Ln58SFG/3ZfOJFBFRntCLjAfl20KvHGdA=)
                          2: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: OCV4bYH3X6n3Gb49xPR0lidOH2XxGNObq/1usAZiyZY=)
                          3: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: ub4GE7dyU71opPZpKx7RwK40Vk9bhcpFETdQ+Cyxz8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl
                          rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 01:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1
        Validity
            Not Before: Jan  1 01:35:14 2026 GMT
            Not After : Jan  8 01:35:14 2026 GMT
        Subject: CN=6955cf52-b3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1e:7c:3b:1c:35:c8:ee:a6:f4:8e:49:60:14:
                    d0:f9:1e:12:d4:5f:8c:55:83:08:e2:5d:42:68:6b:
                    b6:81:02:58:96:47:27:55:29:cc:42:6c:21:09:19:
                    45:2e:4d:43:15:52:9d:34:6b:09:fc:6b:bb:d7:c4:
                    fb:31:10:04:43:b5:11:d2:16:07:83:2a:94:01:ac:
                    8b:1c:dc:ab:d0:f3:48:92:00:de:ab:ef:9c:ab:c0:
                    99:7c:52:84:0f:62:d3:95:38:2e:87:14:c2:63:fc:
                    0b:fa:f2:ed:ab:0c:45:4f:94:09:17:9e:64:d4:86:
                    f7:f9:b6:f5:99:c6:86:b0:2b:1e:6d:a8:e1:bd:27:
                    34:80:ed:23:ac:d6:35:3e:84:71:b7:17:8f:21:13:
                    05:6f:86:06:b2:7e:9f:69:e2:c4:78:50:2b:6d:ad:
                    4b:1e:33:1a:b8:35:11:4c:ca:8c:f7:e3:82:92:6a:
                    25:62:25:ae:50:6f:1a:91:76:56:a5:43:b9:68:98:
                    93:8a:f7:4b:de:5e:62:cf:6a:e1:68:99:c4:7f:ef:
                    74:e4:2e:11:6f:14:23:74:be:a0:2e:d7:e0:f6:1a:
                    f2:fa:54:02:7d:ca:4b:fe:05:00:4a:43:ba:34:41:
                    56:29:8e:1f:d6:33:53:16:d7:7c:5b:86:31:47:1d:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:ED:DC:F5:F8:A8:33:D5:90:7E:88:30:D1:CA:45:4A:92:84:D2
            X509v3 Authority Key Identifier:
                keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:1a:bc:4e:2c:f0:78:39:14:8b:44:98:1a:5f:7e:20:8b:
         34:b0:ff:70:98:ab:75:74:82:70:fc:95:cc:9e:36:0c:54:60:
         84:60:be:6a:bf:2f:84:fd:6f:2d:ab:10:17:0e:27:3e:27:f8:
         13:f8:0a:61:96:f6:1e:a9:b8:3b:aa:33:e1:e1:fe:ed:3e:4c:
         58:53:bd:1c:75:42:d5:3b:db:96:c1:30:ec:d5:94:a4:67:6e:
         09:20:3b:2a:01:16:91:51:41:91:f6:00:87:41:39:59:95:b5:
         b9:41:9b:83:10:4e:3c:11:0a:17:9b:6a:64:3a:70:d7:92:15:
         c3:67:f4:d1:20:4e:d2:2d:c3:9e:9b:0e:2a:15:bf:1d:5a:3b:
         54:63:4b:d5:96:52:0e:25:b9:06:47:53:e2:d0:dc:ba:32:6a:
         12:bc:98:cb:d1:24:53:b4:ee:ee:46:94:be:5c:fd:f2:6d:9c:
         54:7f:3d:d4:2e:80:47:8c:42:4f:a9:bb:3d:95:6b:5f:30:c3:
         bd:96:0d:ec:6e:42:b0:f3:85:ee:b3:61:5a:94:1d:23:a9:cb:
         70:59:14:ba:a2:b9:68:d7:bd:ef:c5:98:86:14:50:73:71:2b:
         09:58:53:b0:55:c1:18:f6:f7:eb:76:4d:cb:6e:f8:0f:22:18:
         99:cb:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:32:39 2026 by rpki-client