This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
File:                     PfacqYyxMelltbxKM_znG50156g.mft (raw, json)
Hash identifier:          ExSh4cafwZuakBfJRXaVlCN2+6mkpSHNsiWUoHbn1FM=
Subject key identifier:   E0:E3:25:25:3D:9E:D5:67:58:39:AD:9E:32:DD:3E:84:CA:19:3F:8F
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Certificate issuer:       /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial:       07CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
Manifest number:          07BE
Signing time:             Sat 10 Jan 2026 20:44:12 +0000
Manifest this update:     Sat 10 Jan 2026 20:44:11 +0000
Manifest next update:     Sat 17 Jan 2026 20:44:11 +0000
Files and hashes:         1: PfacqYyxMelltbxKM_znG50156g.crl (hash: gRSrF1cMqGH64KJwW8W5GKqdyvulm1Dingff4dj6OHw=)
                          2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
                          rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
        Validity
            Not Before: Jan 10 20:44:11 2026 GMT
            Not After : Jan 17 20:44:11 2026 GMT
        Subject: CN=6962ba1c-f4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:3d:7f:c1:ad:35:fd:51:8c:ed:c4:56:35:
                    11:12:84:85:05:54:cf:fc:d3:4e:d8:7c:dc:1b:54:
                    fe:51:56:c6:65:e8:6e:d8:a3:7a:cc:32:a9:b3:d6:
                    1b:32:63:41:c5:92:7f:8b:9a:ca:47:f6:07:f3:40:
                    8a:b7:05:7e:b8:55:68:8d:5a:54:0b:39:b5:dc:92:
                    22:eb:7b:94:4c:53:13:21:9d:fb:0d:5e:bd:0f:62:
                    a7:a9:96:6e:71:3f:9d:a9:5e:2c:47:2a:6a:7b:b7:
                    6a:df:d7:55:ab:1c:5f:f5:1f:4f:ad:3f:b8:52:d8:
                    24:87:42:45:fa:0a:2a:2d:99:ef:68:e3:12:86:b0:
                    68:c6:a5:ee:b5:59:33:63:f9:18:8c:29:ad:8e:a3:
                    f3:f3:5d:31:fd:45:cb:df:9c:15:8b:51:8c:3b:7e:
                    94:b8:81:e4:d6:9f:e5:ab:aa:86:c6:55:6b:40:02:
                    47:28:8d:00:b3:01:9e:ae:b9:38:f3:4b:52:a8:61:
                    cd:08:7f:7b:7b:7e:9a:e2:f4:07:7b:04:2c:63:b7:
                    4f:7a:79:90:b1:92:ab:0a:f4:74:20:b4:9a:50:a0:
                    75:ad:08:ca:ad:4f:26:9c:35:80:9e:67:c3:35:d4:
                    15:c2:a2:92:94:91:eb:f6:47:b3:44:b4:12:63:f7:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E3:25:25:3D:9E:D5:67:58:39:AD:9E:32:DD:3E:84:CA:19:3F:8F
            X509v3 Authority Key Identifier:
                keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:db:38:83:5a:bc:c3:2f:6c:37:01:2e:ee:fd:47:a8:e8:9d:
         29:e7:58:fc:00:93:d4:ad:e1:56:88:3c:c9:34:c8:24:6a:1e:
         fa:f4:9f:dc:4f:da:65:06:41:ab:66:fa:e8:a5:08:7c:78:45:
         c9:c1:0d:21:09:3e:21:23:bc:3c:98:c2:6d:9b:55:0b:92:ea:
         4d:af:0f:d9:28:87:3e:7a:14:44:4a:a9:d7:96:3d:37:83:05:
         14:00:a1:8a:c0:ee:22:a7:da:20:70:53:99:b0:e3:46:f1:b7:
         bb:8c:5a:b3:19:2e:8f:f3:8a:85:1f:75:ba:88:56:c5:eb:86:
         4e:bd:9b:09:ab:43:85:f8:ac:84:f3:cf:7f:15:aa:d7:46:94:
         d9:6b:2b:16:74:5b:a8:a5:bb:43:43:2e:bd:89:76:6a:44:67:
         26:f6:36:9c:6d:f3:9b:81:28:de:f9:50:9b:47:d7:a6:51:19:
         57:25:24:1f:cf:d9:d9:78:45:56:77:87:04:f4:5c:20:68:ec:
         67:3e:dd:fa:24:73:d9:17:cc:32:d8:a7:76:cc:a9:e1:c6:d8:
         c6:3e:a4:00:30:b4:56:e7:0f:33:6e:2c:dc:c6:d5:ae:43:e9:
         03:9c:75:ed:51:df:c8:47:34:19:e7:35:9f:40:ee:f7:91:6b:
         d2:f2:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:22:05 2026 by rpki-client