This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
File:                     edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json)
Hash identifier:          uAyzwT4FYv+MSektL/6re3Qsd1UIsair9zXP6iUB6mU=
Subject key identifier:   75:F0:87:1E:7D:68:C9:EA:CD:20:D9:8D:6A:F7:3B:C3:E6:45:AF:9C
Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
Certificate issuer:       /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
Manifest number:          0153
Signing time:             Sat 17 Jan 2026 03:19:48 +0000
Manifest this update:     Sat 17 Jan 2026 03:19:47 +0000
Manifest next update:     Sat 24 Jan 2026 03:19:47 +0000
Files and hashes:         1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: jINTpq/6OHJDXBMHeXmu0xcBjakHPRX3pyJofJwLpOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
        Validity
            Not Before: Jan 17 03:19:47 2026 GMT
            Not After : Jan 24 03:19:47 2026 GMT
        Subject: CN=696affd4-8d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:8f:23:ee:f6:04:55:27:0a:37:67:af:f6:
                    2c:39:98:67:92:d5:50:22:fe:90:03:3c:82:a1:e3:
                    6b:5c:40:f9:4f:9b:07:8a:dc:d8:54:cc:62:d0:2d:
                    c9:3d:61:c8:2f:ff:fb:9a:c1:33:81:33:8a:fb:89:
                    55:dc:d8:3c:8b:72:97:ed:fb:f4:b3:61:45:4e:e0:
                    e7:8f:07:cf:41:8b:37:93:1b:b4:48:76:c6:07:8d:
                    79:0f:99:e2:c6:71:24:9c:ea:ce:ff:a6:6c:48:e5:
                    b5:9f:52:15:43:85:5e:96:1b:6d:8d:65:92:d6:ab:
                    41:96:92:82:91:1f:aa:64:10:0a:39:87:ae:a9:59:
                    63:62:38:b7:80:dc:2f:df:4a:55:3d:1a:0d:ed:2c:
                    51:c0:44:ed:b6:8a:69:49:52:93:55:d5:22:1b:9c:
                    9f:f4:e5:cc:a3:fb:88:e2:e5:65:83:2b:87:1b:43:
                    12:d6:dd:3c:51:72:fb:44:ff:3b:a6:b7:02:17:04:
                    1e:f7:74:09:8f:f3:4f:87:c4:a6:51:90:45:73:b0:
                    0b:e9:5e:7f:93:8f:b7:e2:f7:f0:4a:3b:a1:29:39:
                    9b:55:56:29:dd:21:9b:0f:1f:a9:66:32:74:f1:2e:
                    2c:09:af:ab:9d:af:e4:b7:7b:cb:51:02:e9:10:1d:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:87:1E:7D:68:C9:EA:CD:20:D9:8D:6A:F7:3B:C3:E6:45:AF:9C
            X509v3 Authority Key Identifier:
                keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:fb:92:3b:dc:03:0d:04:ee:3a:00:56:65:63:4c:b5:44:
         bf:79:ec:da:b0:a2:ed:10:70:f7:ee:39:45:00:61:06:d3:11:
         01:af:42:82:e7:55:bb:0f:cd:31:b9:89:94:22:80:93:d4:16:
         9a:8f:40:89:7f:52:c4:5c:4b:8f:c7:d3:83:b1:3c:20:c7:3f:
         14:18:1c:c1:a2:d5:b8:99:a2:2d:76:ea:ad:72:da:b2:b7:53:
         09:42:fc:ac:99:9f:3d:9f:31:38:dc:52:5d:21:83:50:f1:71:
         43:e2:f3:c5:eb:b1:bf:ac:0e:23:6c:4a:84:cb:e5:8f:cb:f4:
         8a:2b:7c:e0:59:c7:4a:6f:63:67:4b:ed:da:f9:a3:2b:b7:e1:
         45:f4:a4:8d:77:cb:fd:9b:37:67:9d:87:52:46:cf:cf:4a:33:
         e1:d9:34:e6:b4:f1:0a:f9:f2:0f:5a:4e:be:c1:df:c4:83:c5:
         90:52:45:d4:b3:46:78:66:9f:15:7c:55:fb:60:e6:48:ad:72:
         5f:85:80:bb:cb:05:a4:b6:a4:52:6a:e8:bf:71:be:cd:9d:d7:
         82:5d:d2:52:31:16:d3:89:91:99:7c:34:a5:bb:57:24:fa:af:
         23:9e:5f:5a:c0:43:b8:d0:a0:d9:37:3c:ce:6f:5c:ad:bc:96:
         1d:22:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:15 2026 by rpki-client