This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File:                     PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier:          0L5lJUV7p3WwRlN8US2zUzzKYMoKaKP5dGRkp71/jgk=
Subject key identifier:   31:DF:8A:3C:2D:FB:76:C0:EB:C5:2B:47:E6:78:62:1B:79:80:1F:9E
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer:       /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial:       02EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number:          02EA
Signing time:             Sun 11 Jan 2026 00:26:08 +0000
Manifest this update:     Sun 11 Jan 2026 00:26:08 +0000
Manifest next update:     Sun 18 Jan 2026 00:26:08 +0000
Files and hashes:         1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: D79/GcVTQGJy34jKx10g020GK/hfcbUaDAcpbmBH+ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 00:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
        Validity
            Not Before: Jan 11 00:26:08 2026 GMT
            Not After : Jan 18 00:26:08 2026 GMT
        Subject: CN=6962ee20-2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:fc:c3:94:6b:5e:2a:c9:06:5a:2d:9f:d4:
                    94:2c:ce:aa:88:6c:40:e8:f4:97:e8:be:3d:23:8e:
                    bc:71:e5:17:e0:02:4f:3b:03:95:65:0c:f4:d1:ed:
                    c1:ea:60:5d:02:0a:2c:bd:35:1a:2f:5e:e4:b1:9b:
                    48:1f:24:b7:3d:10:de:aa:30:21:d8:0e:8d:81:9a:
                    fd:52:30:98:be:d2:9e:ce:1b:86:7e:5b:60:ad:49:
                    e9:de:71:bd:dc:d5:3a:58:43:bc:09:2c:fd:d9:c5:
                    2a:d6:51:15:e0:10:38:37:6d:13:cc:7a:be:0d:6c:
                    9a:72:46:8e:06:74:c8:4c:57:12:17:25:92:88:1e:
                    0f:15:ae:2e:62:f4:9c:9d:c2:66:cb:ec:da:d6:47:
                    18:4b:5c:a1:39:49:55:e8:5f:27:0a:f2:29:e5:f5:
                    91:2a:3b:a3:04:04:d6:b6:66:ec:1b:8d:8d:32:4f:
                    d0:b4:ca:7f:e2:23:aa:c2:f0:d2:86:ee:c0:98:4a:
                    cc:cb:10:f4:fa:7b:bd:5f:d9:6c:3c:2e:df:35:ac:
                    81:15:b0:08:9c:a7:a0:71:79:36:42:6d:a1:2d:81:
                    35:99:c2:c2:38:ec:d0:ce:db:9a:65:82:4a:59:47:
                    d4:7f:7b:b6:61:90:79:35:fa:bb:58:b8:88:05:cf:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:8A:3C:2D:FB:76:C0:EB:C5:2B:47:E6:78:62:1B:79:80:1F:9E
            X509v3 Authority Key Identifier:
                keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:d6:ea:e5:3a:0d:83:e1:be:62:88:77:ec:90:bd:19:53:
         de:16:fe:d1:81:31:3c:b8:a1:2b:e3:b4:55:4a:32:9e:b9:4b:
         47:dc:d3:6f:aa:9e:ae:2b:db:3d:ab:9c:d6:c4:f9:f0:f5:ab:
         c3:e4:93:81:8e:b6:59:ba:6c:29:f7:86:91:ec:39:f5:f8:8b:
         7d:a2:a1:c9:f0:ef:b7:41:ec:3d:56:74:e4:a1:63:bb:72:14:
         5f:c4:73:5f:92:e9:12:01:d1:33:a8:16:e5:d2:0c:ad:06:cb:
         e4:3f:97:a1:2f:20:b9:bf:4f:a3:3d:a3:39:a9:ac:7a:44:c6:
         a2:48:4d:5c:47:d6:28:a0:0a:f4:d7:c4:d9:fe:d1:21:12:0e:
         68:ea:e9:e6:1f:d8:8a:ea:4d:a4:13:1e:5b:99:83:9b:5d:2e:
         1e:65:86:8c:d1:d2:75:0b:fc:91:6e:b2:9f:f2:36:8a:dc:a6:
         3b:a8:03:f1:5f:ce:04:42:19:af:d3:ba:84:f9:e6:1a:25:94:
         30:fb:a0:94:5a:49:f9:d9:f1:2a:2a:6c:f6:3e:ad:e9:e5:92:
         9f:28:1e:49:c3:ea:0d:04:71:2f:47:0a:5f:15:b7:b9:71:4f:
         60:c5:d0:aa:d8:ae:30:d8:15:49:0e:3c:c1:f5:c2:2f:8a:f3:
         d6:c0:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:46:39 2026 by rpki-client