This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
File:                     PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json)
Hash identifier:          8285zgIEal6O4F5VM+Q4ilqRqYgtlIsUIkiAciU9OXM=
Subject key identifier:   48:AE:0F:62:0A:F2:71:B3:D2:41:6F:6C:E3:75:C3:37:93:DD:71:52
Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D
Certificate issuer:       /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
Manifest number:          06EC
Signing time:             Mon 26 Jan 2026 21:18:29 +0000
Manifest this update:     Mon 26 Jan 2026 21:18:28 +0000
Manifest next update:     Mon 02 Feb 2026 21:18:28 +0000
Files and hashes:         1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: cRRB+IEzgI8e/4EMwTwbRNc0RfpUFFZV6vBJ7u9GVHk=)
                          2: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: h6cfh4R2DSVctuRgtsUmGsASm4gMo0dIEjDPej0xQNc=)
                          3: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 0CvjA6RG6CwLDhsi+lvIuB2qC+UIcfKPm+dtie8AJzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl
                          rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 21:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D
        Validity
            Not Before: Jan 26 21:18:28 2026 GMT
            Not After : Feb  2 21:18:28 2026 GMT
        Subject: CN=6977da25-33c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:63:7c:81:43:2f:8c:2b:60:5e:f6:b2:93:
                    08:e8:9e:32:9b:0b:e9:94:75:48:2f:6f:09:1e:b3:
                    72:be:29:15:68:6b:ef:b9:13:88:b2:82:e5:45:a5:
                    0d:3a:a9:4f:d9:40:a1:e2:97:8e:75:d8:22:63:8b:
                    53:de:88:37:06:37:5e:d8:7f:3d:2c:9e:95:44:d8:
                    9b:d4:1e:c7:98:09:61:ba:96:7f:99:d9:55:4a:2d:
                    42:b8:6d:62:f7:16:6a:88:cc:fa:ad:da:9c:60:01:
                    af:2e:a7:ce:77:ad:fe:dd:34:2e:49:38:59:2c:c7:
                    12:c8:95:16:74:22:de:76:76:5f:93:d3:13:77:f2:
                    74:45:99:1f:b6:74:05:40:f2:f8:fa:4b:bf:1b:f5:
                    5f:06:ef:d4:e1:4d:e1:2c:dc:80:e3:17:2c:38:79:
                    cb:7e:e6:d9:d7:52:a2:fc:13:1d:59:2f:44:ee:da:
                    37:9b:76:71:8a:8a:a2:58:d0:6b:da:1b:4b:64:68:
                    60:99:41:31:95:b0:85:d6:c3:dc:42:eb:57:72:ab:
                    48:0f:6a:e4:93:76:e7:72:c8:f5:49:5f:8f:44:0e:
                    f4:a0:0a:4a:fd:10:ac:3c:7c:e7:8a:82:5f:7b:6d:
                    b8:94:a2:92:2c:c2:4f:40:59:6d:bb:62:d5:b3:60:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:0F:62:0A:F2:71:B3:D2:41:6F:6C:E3:75:C3:37:93:DD:71:52
            X509v3 Authority Key Identifier:
                keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:c7:04:b6:29:be:1f:f3:27:8a:76:a8:9d:9a:1d:2d:1e:
         f5:ee:bc:cd:1f:24:34:f3:64:b6:86:7d:ba:95:3f:12:af:05:
         8d:f2:10:30:76:c5:29:ef:cb:5b:7b:16:01:20:63:91:1a:1e:
         1c:d6:a6:18:02:6a:b5:4c:d7:3c:04:ce:46:f7:ff:8a:a7:15:
         d6:b4:53:a0:01:f6:e0:8a:31:b6:10:50:0d:30:13:62:11:f6:
         0d:af:3c:01:fc:d2:3c:1e:f8:3b:48:47:e4:6c:e1:b4:44:38:
         e5:59:d7:21:08:9a:62:23:9a:b1:02:c0:6d:f6:06:05:94:89:
         28:89:9c:e2:da:a0:ee:10:a7:87:2e:26:40:ca:9f:e4:14:73:
         d7:8c:d1:bf:72:1b:6e:75:42:81:6c:e8:56:e1:8e:7b:da:1d:
         41:a4:29:97:87:c3:2d:b1:9e:ed:95:4e:09:8d:d2:c8:a8:a5:
         10:aa:8d:ed:c2:f3:e9:37:6e:ef:be:ac:30:02:bc:0c:78:2e:
         b4:08:ac:bc:1a:75:37:70:4e:7f:f8:3a:c6:09:09:f5:ec:71:
         90:6b:54:ae:ae:1a:d9:79:12:41:2f:20:1f:e1:48:eb:b6:11:
         9d:1a:0c:90:e8:91:d4:2b:fa:31:1d:bb:ca:c5:78:51:2d:82:
         02:df:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 09:59:22 2026 by rpki-client