This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          sOO4TLRtWFX1sfhFeH2WohTdj4F8zSXV7ZiVIAAfAc0=
Subject key identifier:   26:52:11:75:14:7A:25:38:7B:5F:1A:26:DF:7D:09:64:A2:37:D5:95
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       30C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          3094
Signing time:             Mon 12 Jan 2026 15:20:34 +0000
Manifest this update:     Mon 12 Jan 2026 15:20:33 +0000
Manifest next update:     Mon 19 Jan 2026 15:20:33 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: Rm1Aa4EFg10EYKhjyBL/GQyGsFmVGhn6F9lmu6wxnnw=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 15:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12485 (0x30c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Jan 12 15:20:33 2026 GMT
            Not After : Jan 19 15:20:33 2026 GMT
        Subject: CN=69651142-7188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:fc:2e:3c:0c:b2:ba:c1:69:dc:d2:01:cd:
                    dd:c7:6c:f8:ca:ae:a6:d2:9b:1e:aa:1d:56:39:39:
                    88:89:40:75:32:d8:e8:d1:90:57:64:5e:b2:09:6b:
                    43:9b:8a:b2:f7:7a:0c:78:c8:fc:7f:b7:57:13:e6:
                    a4:b4:a7:80:3b:5b:26:1e:fc:fa:63:5c:52:03:17:
                    8a:ef:2a:93:01:ab:8d:cb:a3:1e:07:04:69:b9:d4:
                    09:31:13:b4:f6:87:f3:f1:a3:71:f2:88:48:06:be:
                    45:05:8d:e3:af:13:6d:5d:bc:29:c3:38:da:f9:53:
                    01:54:53:6b:bd:3f:53:ee:8e:54:03:c4:5e:54:7c:
                    2a:e6:b2:83:4e:88:9a:f2:c7:0c:28:ba:50:75:83:
                    30:8c:ba:16:8b:a3:ec:f4:a9:57:ae:54:91:9f:71:
                    e9:bf:be:c1:6b:2c:c7:ea:a3:4c:a7:57:3e:02:75:
                    bd:32:8b:e3:62:7a:06:82:1c:31:4d:b9:a3:ec:6b:
                    7f:a1:1c:0f:16:70:32:ac:8d:5d:e1:c5:84:30:6e:
                    eb:c5:99:5b:44:9d:bb:1b:4a:c3:dd:78:e4:0d:9a:
                    2d:da:7a:9a:23:9b:f6:a2:92:0d:8a:ae:58:c1:8d:
                    86:13:42:f2:61:43:57:c5:72:78:32:2e:e6:6b:09:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:52:11:75:14:7A:25:38:7B:5F:1A:26:DF:7D:09:64:A2:37:D5:95
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:25:11:96:7e:1b:03:5f:f8:bb:7e:7c:e7:cb:a3:f6:e0:
         4c:81:9b:9d:96:2a:de:52:bb:06:1c:4f:35:85:bf:66:9d:4e:
         a9:07:57:71:a3:3e:c3:cb:43:36:3a:03:3a:7c:76:c8:a9:43:
         91:ab:17:09:55:31:30:4e:9e:25:4f:23:92:78:4d:d5:06:4d:
         ba:92:ea:15:35:e4:9d:66:98:95:a1:6e:13:c3:cd:e7:4e:1d:
         f1:ae:09:1f:75:60:90:a9:2d:c0:00:18:60:ef:01:19:42:83:
         72:bb:b6:bd:21:70:22:52:07:c9:ed:a9:bd:a5:f2:3d:fe:7a:
         10:5f:c4:01:7a:7d:69:47:4a:5d:cf:f8:60:fe:a4:9d:63:6b:
         cf:a0:6f:b9:15:1e:18:8d:71:18:d0:76:83:29:58:53:b2:96:
         48:77:bf:a7:b0:04:08:22:8d:a6:ec:f8:ac:3b:50:fd:e0:82:
         44:e1:56:ae:8a:67:21:8b:d2:a0:91:3e:54:89:04:37:7e:74:
         f6:3a:4b:d4:99:04:88:03:ac:f2:73:68:88:97:1e:53:44:ec:
         34:4d:88:1b:f2:a3:9c:af:f5:b0:84:65:e0:a3:74:41:56:12:
         53:25:e2:49:63:aa:66:47:49:a8:0d:34:16:4a:aa:8c:98:f9:
         f8:bb:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:01:54 2026 by rpki-client