This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File:                     d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier:          GeKlToa+hqh26+rLXUfLIsTGKCsOBKA+nyTgKCQQKtk=
Subject key identifier:   5F:00:8C:04:F3:EA:67:F4:9B:D7:69:9E:2C:25:EF:23:10:AD:1F:71
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer:       /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial:       0AC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number:          0AC2
Signing time:             Thu 08 Jan 2026 18:59:32 +0000
Manifest this update:     Thu 08 Jan 2026 18:59:31 +0000
Manifest next update:     Thu 15 Jan 2026 18:59:31 +0000
Files and hashes:         1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: pibXc20csXpq/9hYBlqy0HPusMKYESyRXmUHoFEwBFA=)
                          2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
                          rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 18:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2760 (0xac8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
        Validity
            Not Before: Jan  8 18:59:31 2026 GMT
            Not After : Jan 15 18:59:31 2026 GMT
        Subject: CN=695ffe94-1981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:09:8b:5f:00:0a:ea:b9:c0:d8:f4:c7:80:
                    a7:a2:99:18:b1:96:0b:55:f5:78:db:4a:de:b3:d3:
                    cc:dc:44:26:6b:40:68:59:44:6a:3d:c9:78:9a:be:
                    73:9e:b8:eb:b2:0d:a8:54:5f:0e:58:07:90:5b:08:
                    5f:2b:60:e5:48:a6:9a:d6:d1:de:bf:e1:5c:a3:e4:
                    b8:3e:9a:9e:5d:e8:a5:9c:95:e3:50:87:23:a0:c4:
                    b4:9d:76:b6:d2:fb:84:74:3c:a2:f2:f2:75:9e:b2:
                    3b:72:66:91:b8:9c:e1:2c:24:b0:e1:50:c8:4b:53:
                    2c:fd:6d:32:c4:91:88:a8:4e:d1:29:f3:71:7e:25:
                    03:0f:6d:e7:86:a5:b6:00:04:af:af:83:ef:5a:7e:
                    30:97:74:c5:32:0f:13:e4:1f:91:64:4d:44:a8:56:
                    06:2a:2c:dd:48:96:f1:f4:d0:63:ae:3a:ed:c4:5b:
                    ad:21:56:e1:36:01:a2:e0:6f:15:8f:21:f6:9d:00:
                    de:73:34:5f:0f:a7:d7:a5:6d:0b:0a:82:99:40:5e:
                    89:a9:26:b3:72:bb:4a:6e:61:4f:53:13:85:4e:e5:
                    16:34:16:ba:fe:16:69:0c:3f:b7:3b:a3:18:7d:7a:
                    17:55:86:a7:e7:0e:d4:03:4c:00:8f:ca:a3:4f:b5:
                    25:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:8C:04:F3:EA:67:F4:9B:D7:69:9E:2C:25:EF:23:10:AD:1F:71
            X509v3 Authority Key Identifier:
                keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:a4:75:f3:40:f0:f9:bc:fe:06:0f:17:0c:8e:b7:82:f0:
         f1:b4:92:61:87:86:ba:3a:f6:c1:8f:27:3e:ec:ab:71:1b:c0:
         00:1c:17:32:38:95:f6:bc:9d:9d:b8:4c:09:2c:3a:37:e2:d3:
         4a:b6:5c:c8:c1:d2:c4:06:63:a9:6d:8e:8f:45:a8:a4:08:60:
         ca:c3:99:7d:c9:28:53:f3:fa:e1:53:71:02:fc:1a:88:79:8d:
         95:f6:bb:6d:d6:43:6a:44:95:de:d1:12:30:51:f6:28:40:bf:
         c2:43:5f:d9:bb:f4:f8:8e:32:75:15:c1:11:02:de:14:38:23:
         2f:af:e1:c7:a6:9e:b7:00:a1:f9:03:0d:c1:c2:7e:9e:4f:08:
         19:d8:dd:d9:73:92:50:a3:30:b5:48:6b:5b:c7:87:17:c0:fb:
         71:0d:9a:d3:db:10:3f:dd:0d:cc:aa:ef:12:db:68:16:91:00:
         30:17:18:44:78:6e:25:fd:9e:5c:62:db:38:b2:4e:85:ce:41:
         05:9c:c5:79:67:24:95:52:e6:de:2d:a6:35:5a:8b:6a:5a:40:
         b8:19:30:f6:69:54:25:b3:ac:a4:dd:87:e7:eb:44:6f:52:40:
         af:16:57:0a:49:93:f0:52:ce:9e:85:3b:53:27:d0:79:52:5f:
         dc:fb:99:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:51:34 2026 by rpki-client