This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
File:                     CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json)
Hash identifier:          1ZAE1lrOpWuvHGKJPeVDHwu0C8dsOnxrndCPm77Dhw4=
Subject key identifier:   18:47:9D:DC:EC:94:61:83:B4:21:EE:D6:D1:9E:17:0D:22:82:0A:DA
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Certificate issuer:       /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial:       169F
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
Manifest number:          1695
Signing time:             Sat 10 Jan 2026 16:26:47 +0000
Manifest this update:     Sat 10 Jan 2026 16:26:47 +0000
Manifest next update:     Sat 17 Jan 2026 16:26:47 +0000
Files and hashes:         1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: IrgHY2EULTSJ5Qdt9Jj5OAMu3hv3vfcOvvof16C0OII=)
                          2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: LPGhf2+lZ/tfy7iMoJQ9mcHsSA792NuIJHPh9NLe0yI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
                          rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5791 (0x169f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
        Validity
            Not Before: Jan 10 16:26:47 2026 GMT
            Not After : Jan 17 16:26:47 2026 GMT
        Subject: CN=69627dc7-8edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:b6:b4:68:b2:ff:3f:4e:d9:6c:68:f5:fc:
                    79:c9:ba:73:b7:a2:fc:d3:2b:16:8b:7e:4a:49:46:
                    86:c2:7c:0e:8e:3a:ef:68:bf:9e:69:30:73:73:b8:
                    33:06:a6:2a:ae:33:95:12:0a:e4:e7:73:9a:19:0a:
                    83:25:58:9f:f1:ee:fe:c4:11:86:04:c8:32:a9:dd:
                    56:27:60:16:87:48:7c:e4:33:bc:b1:27:85:ee:5b:
                    7f:0a:f9:f4:76:32:19:df:0b:d3:0c:16:4f:ea:61:
                    70:bf:35:82:ad:e4:29:d4:1f:f2:e0:51:2d:3d:51:
                    39:4a:55:8c:6a:aa:5f:5b:88:6a:21:fa:b9:59:d3:
                    ff:f7:73:47:89:72:23:02:df:06:cc:c4:86:93:83:
                    0b:36:5b:0f:da:2b:84:3a:50:1f:d7:72:56:47:a8:
                    61:ed:c9:c0:d5:da:aa:08:89:ed:b5:1a:da:e4:b5:
                    a3:7c:38:7e:c2:f8:2b:cc:07:50:68:ca:39:3e:7c:
                    ff:6b:3e:57:c1:86:2e:c0:ea:e6:48:3d:41:f3:56:
                    25:fb:9d:2c:37:0d:40:f3:6b:05:55:90:5c:ad:89:
                    ef:fd:2c:27:2f:65:b0:0e:bc:78:1c:6c:3c:ed:38:
                    10:88:2b:8b:e8:ac:ba:1f:29:48:a8:94:d6:13:93:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:47:9D:DC:EC:94:61:83:B4:21:EE:D6:D1:9E:17:0D:22:82:0A:DA
            X509v3 Authority Key Identifier:
                keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:21:71:be:f4:81:9e:94:2a:b3:ef:fb:5c:74:fb:5e:1a:
         49:72:2b:5a:94:ba:c0:c1:db:67:63:47:bd:73:23:96:b2:9c:
         43:24:f4:98:99:1d:c4:03:15:f3:c9:f9:29:81:a2:dc:65:07:
         04:d5:d4:f5:f3:bd:5d:7d:66:32:ad:ba:25:de:0b:7c:b9:05:
         d7:a6:fc:83:b2:18:12:71:04:65:1b:e6:2d:04:26:40:b6:b8:
         ec:77:f1:73:f3:03:7b:43:85:8e:01:bf:f8:3a:5b:d6:3b:14:
         d4:bf:c3:b7:61:ce:81:af:fb:45:da:6d:47:88:dc:c9:7b:2d:
         c7:b2:ad:b4:fc:33:ce:8f:c9:5b:09:ac:26:98:39:77:6e:1c:
         61:11:8b:a1:c4:8e:bd:37:96:60:dc:ea:bc:fa:3d:e3:0b:b6:
         43:5d:3a:b4:2a:45:9a:06:d4:2b:22:3a:f4:d5:60:ee:9c:5e:
         22:03:6e:9e:14:c1:57:7b:c3:f2:04:fc:df:91:48:8b:1b:90:
         d9:01:34:3e:7a:43:26:51:ba:19:4a:70:13:38:7d:cf:da:5d:
         df:68:fd:dd:cb:ce:bb:95:05:21:77:b8:22:52:79:21:73:69:
         e1:3a:fe:fd:36:2e:13:4f:bc:86:39:b6:c4:bf:f6:6e:c7:a3:
         56:60:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:59:02 2026 by rpki-client