This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File:                     sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier:          aGZ8w/KmOgMcv8U76kkaCxpjRwVMtO77Zi8IxRgE+FE=
Subject key identifier:   FA:FB:4F:DF:09:88:4A:85:7E:06:56:E3:2C:A3:EF:0A:F6:C4:BC:36
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer:       /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number:          024A
Signing time:             Sun 11 Jan 2026 01:04:05 +0000
Manifest this update:     Sun 11 Jan 2026 01:04:05 +0000
Manifest next update:     Sun 18 Jan 2026 01:04:05 +0000
Files and hashes:         1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: muvXds4U/js5+B7O6VXhEIPDQkzkWcaDSVZRx7zupAY=)
                          2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: EhuHHxXuz9NZDDEH+Wm0MdYJbkis3Dr/HJw1fYaaEAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
                          rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
        Validity
            Not Before: Jan 11 01:04:05 2026 GMT
            Not After : Jan 18 01:04:05 2026 GMT
        Subject: CN=6962f705-6d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:89:dd:36:2b:ed:21:4b:b7:27:42:93:cc:
                    9f:56:db:aa:d2:48:5a:09:e5:d4:15:51:50:8f:6c:
                    ff:0b:20:ec:b8:74:04:3a:2e:c8:16:6d:5f:a9:b8:
                    be:8b:9c:34:fe:62:e4:84:43:98:a6:4d:23:45:c8:
                    83:60:d8:34:b7:ff:70:9e:74:1c:19:4f:45:5f:d4:
                    7a:ea:ad:85:54:f1:4f:3a:ee:ac:88:45:69:b2:1d:
                    24:fc:0a:d6:7c:8d:44:52:73:1e:03:77:0a:55:96:
                    e6:5e:6e:60:9c:ab:2e:bb:10:c5:94:4f:54:b6:10:
                    c6:3a:e7:91:c3:55:b0:59:fc:7e:4a:1b:ea:fe:23:
                    87:61:e9:7b:7b:11:04:79:12:df:00:2a:29:4d:df:
                    c9:4f:b4:0a:04:5b:77:b0:c6:3b:ff:96:da:1e:a8:
                    b6:f7:4e:ba:57:6c:9f:dd:55:ab:f1:f1:40:df:ba:
                    12:4a:3b:b0:cb:d7:5a:81:c5:58:76:cc:72:e6:63:
                    b8:ba:06:86:81:b6:1f:3c:1f:b6:ec:cd:ad:0d:a5:
                    64:32:be:93:55:8c:cb:6d:fc:b8:0f:57:23:89:e6:
                    41:1e:3f:44:13:7b:8b:02:74:98:15:0e:88:32:86:
                    ed:94:ab:1a:ff:13:bb:f0:e4:5a:4a:5e:d3:73:7b:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:4F:DF:09:88:4A:85:7E:06:56:E3:2C:A3:EF:0A:F6:C4:BC:36
            X509v3 Authority Key Identifier:
                keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:76:bb:f7:ff:42:ec:54:46:0d:c4:08:e8:88:ec:fe:35:88:
         2b:85:99:0a:48:bb:e6:c9:8c:0e:9a:65:75:16:7b:44:54:65:
         65:b6:5e:22:ca:d7:72:cf:9a:51:72:1b:1d:99:7f:37:bd:bc:
         6f:97:b5:d6:95:cb:8a:bd:20:cd:d1:56:64:19:3c:97:f7:54:
         e2:ee:a3:06:a5:ea:c2:0d:4e:d8:28:4f:2f:1d:21:6b:8f:4f:
         b2:87:93:ee:e5:98:30:38:9a:cf:e5:59:b2:96:e8:de:5d:58:
         ce:9b:27:f8:27:6c:e5:af:f0:dc:a8:b4:3d:2e:9a:d2:a4:09:
         26:06:51:c1:f8:21:00:18:d8:e4:58:e2:ff:79:73:79:42:9e:
         2a:51:a3:85:42:dc:69:f5:69:a7:3f:e3:75:ae:4d:d3:e5:65:
         71:99:13:92:43:02:a8:8c:83:0f:b3:6f:60:3f:41:b5:23:6e:
         08:1c:9f:60:9f:cd:0a:ef:75:57:9f:a8:8c:72:ca:53:2c:3d:
         17:c7:e6:3a:b3:65:17:e8:c7:8b:2a:7a:a6:5a:ac:e4:cb:8d:
         7f:3a:fe:8b:0a:f0:4c:e5:3e:23:c8:46:54:95:13:dd:8b:8d:
         13:92:11:9b:09:67:1b:97:64:ea:cb:e4:2b:87:23:b6:1d:73:
         cc:29:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:35:15 2026 by rpki-client