This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File:                     MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier:          eT9Rv7cjCwebJ0PrfuQjJkV3D/clVoxTUhsUKC8+5/s=
Subject key identifier:   CD:AC:05:1D:A0:74:0C:31:FA:0B:20:9C:1E:32:E4:D6:DA:DE:3D:59
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer:       /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number:          68
Signing time:             Sat 17 Jan 2026 06:02:51 +0000
Manifest this update:     Sat 17 Jan 2026 06:02:51 +0000
Manifest next update:     Sat 24 Jan 2026 06:02:51 +0000
Files and hashes:         1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: +7vL+VCKPGXmqB2fwgDb3nsNuz9Xl7WeL9mCaJGypSU=)
                          2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: RjBz7DM9PWj4EYARJmqJIScM3PQCM6ck/UDuntxMtmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
        Validity
            Not Before: Jan 17 06:02:51 2026 GMT
            Not After : Jan 24 06:02:51 2026 GMT
        Subject: CN=696b260b-a5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:73:5b:6d:2f:fb:6d:c7:89:5d:13:f4:44:
                    cf:d4:3c:0a:72:6d:a2:31:2c:e9:a1:71:21:61:b9:
                    75:54:76:3f:49:ff:1a:d9:41:08:d9:36:06:79:24:
                    01:b8:55:74:57:fa:ae:cb:6f:cc:f3:60:59:72:a9:
                    c0:1b:75:53:5b:68:7a:9d:6f:bc:c2:bc:f8:81:b3:
                    fb:1b:c1:1c:4f:80:08:6f:62:f4:a2:6f:34:81:96:
                    05:bb:6c:fb:65:62:0c:bb:ca:66:57:cd:fd:40:7d:
                    28:fa:43:d6:8e:eb:91:dd:c7:31:dc:1d:d1:5c:39:
                    9e:f4:81:d7:a0:3b:35:47:cc:02:3c:d1:13:b0:f4:
                    38:43:dd:46:48:8a:29:f1:9e:22:de:da:26:21:1b:
                    0d:24:29:fa:97:14:65:9b:69:53:97:de:a5:b2:44:
                    59:f8:b0:ba:f1:a7:c4:94:06:b8:84:40:12:53:fa:
                    71:04:13:4b:6e:fb:a1:dc:69:6c:74:7b:06:96:6a:
                    6b:cf:7a:95:12:e8:33:f1:5b:48:96:4d:9d:b2:5b:
                    dc:5f:12:86:4a:e2:55:3f:d5:67:48:8c:4b:86:1e:
                    15:a9:f5:76:fe:f1:1c:7c:82:7b:fe:29:45:61:c3:
                    6b:fc:2e:86:5f:67:9c:5f:f9:78:27:3a:5a:15:9f:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:05:1D:A0:74:0C:31:FA:0B:20:9C:1E:32:E4:D6:DA:DE:3D:59
            X509v3 Authority Key Identifier:
                keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:87:d8:c5:1c:0b:fc:2a:d3:33:3e:65:4f:8b:c3:2b:d3:2c:
         a1:51:ab:57:29:2a:e5:70:df:9a:79:d2:03:8d:4c:ac:18:00:
         68:30:9b:f5:24:3e:dd:66:df:94:f5:f3:31:52:a4:a7:3d:e2:
         6e:d6:84:a9:06:6c:c3:f0:b0:c4:23:86:17:d8:00:fd:62:71:
         81:2a:a5:d0:3a:85:f5:8b:3c:c1:a1:fc:93:24:5b:9b:73:61:
         0c:33:bc:23:6c:37:41:38:2c:03:99:2d:65:c2:1b:ac:f8:24:
         61:13:8b:95:5b:79:3c:72:26:26:63:c9:c9:b1:52:37:3a:20:
         02:76:c8:df:8b:24:cc:a9:9e:9e:13:63:44:06:b5:79:0b:ae:
         2c:f5:80:fe:18:2c:8b:5b:b9:18:42:88:29:45:a5:7b:34:84:
         6f:52:fd:f6:c7:63:bd:44:58:5d:93:e1:b1:0e:26:c6:4d:61:
         fb:32:ca:39:9e:71:7d:7f:c2:c5:94:aa:1c:a4:ef:87:ac:c7:
         8d:5c:10:36:f1:d2:cf:67:d9:44:1d:37:09:a0:c5:a3:f8:5f:
         fb:03:a3:a7:f3:8e:a1:03:1b:90:89:26:d8:28:6b:b8:d2:3e:
         bc:54:e7:fd:ee:68:9e:4b:b2:5a:f0:ee:1a:89:ec:54:a7:6d:
         81:12:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:57 2026 by rpki-client