This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          zZdbYukPnpB/LqkW8ngyLLour/Yg/2hu3QLiQsSpGaE=
Subject key identifier:   59:63:9C:C5:17:5E:66:7E:E6:B6:09:BA:27:8C:D2:36:C2:53:B6:D8
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       1877
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          183A
Signing time:             Sat 10 Jan 2026 16:18:14 +0000
Manifest this update:     Sat 10 Jan 2026 16:18:13 +0000
Manifest next update:     Sat 17 Jan 2026 16:18:13 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: dPk0iChCavWirFW/W8FXPcJy/WEDi/Ew0Cw7Edsd4Bw=)
                          2: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: qSYX58YUi/t29Rj5CNxgsbdiJZimc4AX4OZ3x3Ve/1w=)
                          3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: lB+0Won2W52qFiIX78aKCDT4TVBNhzzzQWZnSrga5a8=)
                          4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 0gJZp0PXKtDjKPtPzwnBpDeKuAEvgrYbUVy7O+9x6zE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6263 (0x1877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: Jan 10 16:18:13 2026 GMT
            Not After : Jan 17 16:18:13 2026 GMT
        Subject: CN=69627bc5-a02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:e3:a5:87:8b:41:3d:b1:de:ee:ed:3a:d1:
                    6f:45:bb:c7:b7:9d:8a:29:b6:d4:aa:36:ac:c4:b3:
                    34:1c:39:16:84:8b:b8:1f:19:69:29:1d:3a:f1:0b:
                    cc:2b:6f:1d:50:43:79:14:cc:3b:9e:26:95:98:8a:
                    e4:07:2a:cc:65:a4:98:7f:9e:06:1e:d7:89:7f:38:
                    0f:cd:5c:f9:76:d6:71:7a:23:de:4a:48:88:cd:c0:
                    76:30:b7:6c:c8:4b:7c:a1:fd:4e:5b:74:70:3f:a1:
                    5d:95:2e:89:cf:ee:14:12:8d:f0:c5:5d:d1:f3:1b:
                    db:f0:9d:56:6b:a4:44:fe:7e:df:75:11:13:a4:a2:
                    fe:4d:54:88:0e:f8:e8:00:60:0e:28:a0:cc:bf:21:
                    1a:33:f0:55:80:24:f7:02:63:5c:a1:ae:1e:e2:b2:
                    ba:09:cc:96:67:a1:c7:21:c6:de:ce:ee:62:ab:62:
                    45:a7:52:65:3a:3f:3d:ed:b5:46:b7:7a:67:39:a7:
                    22:4c:8d:24:15:96:c4:f5:fc:ea:9f:ee:81:f8:fc:
                    54:03:b7:16:a3:df:21:ad:25:4f:e8:c9:a9:f5:f3:
                    1f:f9:24:c5:a2:28:2e:ba:f9:e9:3b:fc:df:29:9c:
                    00:c9:8c:69:e5:da:5b:c8:8e:cf:90:78:2e:23:72:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:9C:C5:17:5E:66:7E:E6:B6:09:BA:27:8C:D2:36:C2:53:B6:D8
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8e:41:2f:c9:82:a2:3b:ea:d4:b2:9b:89:d2:5c:4d:00:ca:
         e5:a6:9a:3f:a9:62:71:03:38:2e:7d:d3:87:01:ca:4f:f6:d1:
         84:ef:c8:44:e6:fc:97:3b:f2:4c:1e:ee:d3:b6:46:70:7e:f0:
         3f:18:de:33:0d:d1:bd:6f:3b:f7:22:61:c3:93:af:37:5a:60:
         5f:b5:57:59:8a:e5:d7:74:29:fd:19:47:bd:77:50:cb:08:8b:
         18:cc:4e:44:44:19:72:5d:17:97:af:22:b2:47:a4:66:db:44:
         b5:5d:2c:92:60:72:d1:94:98:cc:30:37:5e:5f:20:09:0f:bb:
         19:61:7f:17:b0:e6:bc:0c:b4:4a:2b:cd:dd:c2:46:e8:c5:83:
         01:85:cb:fa:5b:1a:b5:95:6a:06:9d:7c:04:ed:52:6c:82:e7:
         4b:8c:01:0b:1b:83:82:5f:b3:a5:c5:12:09:44:26:d3:3e:26:
         30:f2:74:32:33:54:df:0e:a2:1d:8f:d9:24:3e:27:95:13:33:
         a9:f7:23:fe:f7:34:d7:98:b2:f3:54:6b:7f:ae:0e:3e:51:5c:
         e7:0a:a9:d5:6b:aa:12:6f:9a:08:fc:9e:96:34:75:e0:cb:53:
         10:45:66:3c:5b:bf:e6:e6:7d:71:5a:52:96:60:5b:4b:01:ec:
         c8:b5:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 14:40:25 2026 by rpki-client