This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
File:                     0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json)
Hash identifier:          JkrU5UqLxqr/aneAVxREZWNeieF8SdmkAZpxA9uq04k=
Subject key identifier:   1C:B5:BD:6F:76:81:8B:16:C7:8F:4A:89:1B:A4:68:59:09:BB:3E:85
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Certificate issuer:       /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial:       10E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
Manifest number:          10D4
Signing time:             Sat 10 Jan 2026 17:01:09 +0000
Manifest this update:     Sat 10 Jan 2026 17:01:09 +0000
Manifest next update:     Sat 17 Jan 2026 17:01:09 +0000
Files and hashes:         1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: 004ysOF4vFFqoa+deiNcPIrcyydUKms67ENqKu/yMrE=)
                          2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
                          rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4320 (0x10e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
        Validity
            Not Before: Jan 10 17:01:09 2026 GMT
            Not After : Jan 17 17:01:09 2026 GMT
        Subject: CN=696285d5-8339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:a2:6c:77:03:e3:5f:88:93:d2:5b:a3:5e:
                    1e:cb:8b:37:05:5e:0b:b7:a2:aa:d3:13:7f:d2:bd:
                    ee:ca:83:ff:6d:7e:ba:f6:be:21:ee:7e:7f:0c:17:
                    6a:d5:1a:c6:32:f0:2a:14:66:e1:57:a6:5a:f5:75:
                    5d:b5:53:fa:b6:e1:22:64:e5:0c:f6:0a:dd:b2:b9:
                    8b:2e:e5:8c:49:52:ba:fb:47:83:e0:82:b6:6e:82:
                    71:56:1f:13:77:c2:d6:b3:b7:aa:de:45:bc:21:88:
                    6c:e1:69:cb:af:46:a9:38:45:4e:f1:78:1c:5c:a4:
                    f0:13:5a:29:f6:2e:71:79:eb:4d:b5:55:89:9f:e6:
                    68:ab:f7:e3:a8:11:4a:0d:5d:f0:95:65:4c:14:79:
                    6b:8c:cf:58:95:5c:9d:a5:1d:55:a5:59:2c:06:08:
                    b5:00:7a:66:20:80:6c:6f:4d:9b:3d:43:8a:67:bf:
                    be:38:1a:41:64:9f:40:d7:c9:0f:ac:02:8b:51:49:
                    4d:90:37:b1:0c:66:7c:7b:63:65:2b:0b:17:f7:fa:
                    37:81:43:30:ea:cf:a0:0c:b9:37:c0:29:c6:e2:b8:
                    fd:87:65:3d:08:80:4b:9a:b0:83:78:7d:c5:39:90:
                    b0:e2:a2:7b:62:fe:29:bd:28:33:18:f2:65:89:04:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B5:BD:6F:76:81:8B:16:C7:8F:4A:89:1B:A4:68:59:09:BB:3E:85
            X509v3 Authority Key Identifier:
                keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7f:0a:2a:01:d2:ce:8b:93:05:c1:91:6d:b4:7f:36:4f:c9:
         6f:ce:ac:7b:7b:f4:cd:c0:01:6a:40:03:62:06:85:46:e0:2d:
         bc:64:f9:72:55:43:10:ae:bf:57:93:b7:96:11:65:34:26:21:
         11:2e:e0:c8:d5:48:d7:fd:54:f6:9c:d1:92:88:37:cb:e1:8b:
         b0:c6:7d:17:17:19:18:cc:cb:d9:a9:81:41:fc:61:2d:e0:02:
         36:3c:f4:86:2b:38:4d:df:cb:0e:d2:75:d0:63:db:9a:65:81:
         f1:72:9b:68:d3:c6:1e:b4:f8:24:17:1b:ff:d3:e8:1a:85:f8:
         ea:49:25:1b:05:a1:e5:78:c5:12:b1:ba:60:51:7e:57:b7:8d:
         9e:2d:ff:a8:c0:72:79:dd:d4:44:68:36:61:2e:fe:3d:33:48:
         fd:fc:ef:08:33:fe:a1:f7:e6:b7:6e:3d:32:c4:30:a2:6c:1a:
         cb:96:4d:4f:af:d1:c2:4f:03:d9:02:f0:cd:8d:12:1e:c1:fb:
         79:6b:c8:51:8b:39:cf:c3:35:0a:c4:16:a7:ce:e0:8b:1b:83:
         1e:1b:ec:da:55:41:59:da:b2:e8:57:9a:97:37:88:9c:1d:46:
         e5:71:4b:8e:4c:67:10:b0:73:6e:50:9d:cf:3b:fc:f5:fa:b5:
         8a:1e:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:28:18 2026 by rpki-client