This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          EWQEExvsAjxjDVguDgrpFBzW7HS5/iJ5G1wUj+lQhcw=
Subject key identifier:   DD:6C:FC:52:DB:06:CF:35:EB:44:E6:4B:4C:D8:33:EE:04:A3:7C:83
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       32E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          31B9
Signing time:             Tue 20 Jan 2026 15:19:41 +0000
Manifest this update:     Tue 20 Jan 2026 15:19:40 +0000
Manifest next update:     Tue 27 Jan 2026 15:19:40 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: oIZd/8jrgxOrwBL3fUrhosXWJnTqRrAmHXrlmyh9/vU=)
                          2: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          3: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          4: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
                          5: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          6: 6DCD9050DCB011F09F01EF94466F56BC.roa (hash: 7DK+tVxrbc+F4WWee1kH7dGPoKIU0F+nqV3+jMxDG5g=)
                          7: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
                          8: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          9: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          10: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          11: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          12: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: LkKthVN2NGZ11gVfD97EOSoSXQUBcS4N7rCfnw05jvw=)
                          13: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          14: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          15: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          16: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          17: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          18: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          19: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          20: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13024 (0x32e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Jan 20 15:19:40 2026 GMT
            Not After : Jan 27 15:19:40 2026 GMT
        Subject: CN=696f9d0d-ec60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:ef:1d:a0:7c:71:19:90:18:12:d0:bc:30:
                    8d:7f:9f:61:57:cd:e9:ee:62:34:21:1c:88:0d:b7:
                    79:7d:0b:91:d1:9a:7c:ff:43:09:23:76:ea:b1:a7:
                    be:6e:15:e9:31:b9:f4:bb:c3:5d:c6:60:ac:e8:68:
                    83:f2:c0:66:e5:d1:b0:2f:a3:ae:d6:2e:13:5e:3d:
                    52:ef:d8:2c:e3:5d:9d:40:9a:81:ea:63:2f:72:1a:
                    4a:d9:84:ca:ef:e0:b2:73:22:f9:d2:5d:11:1d:5d:
                    1d:25:52:db:5c:71:d9:aa:49:5b:fa:af:91:28:0e:
                    b4:db:2a:97:4e:b1:c8:16:18:3a:c1:0b:0b:c9:dc:
                    d9:79:e5:b9:e2:75:f3:26:2c:9c:86:77:47:64:d9:
                    40:a2:a3:59:4e:ea:76:6d:68:a9:32:24:2f:93:30:
                    cb:43:c5:a5:29:4a:0f:61:ee:4e:31:fa:e1:9e:66:
                    37:df:27:8e:9d:db:3a:71:40:27:da:99:8e:dd:83:
                    dc:2b:c4:34:23:54:12:44:2e:69:a3:28:f8:1a:d8:
                    24:db:a8:eb:a9:5a:d3:90:5c:c0:94:0c:ce:b7:ac:
                    4d:c8:ac:4d:c9:b8:b4:b0:5f:39:cc:90:b7:fe:90:
                    b6:b8:55:17:e6:80:49:b7:e1:a6:20:09:4f:66:49:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:FC:52:DB:06:CF:35:EB:44:E6:4B:4C:D8:33:EE:04:A3:7C:83
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:de:44:07:54:38:4b:2b:42:fa:9a:03:86:ff:d9:f9:51:a7:
         c3:ce:aa:0f:c5:fc:f7:7d:5d:3c:36:bd:14:25:65:28:f2:19:
         a2:3f:fd:62:9c:c4:e5:3c:37:9f:e5:82:30:ed:00:8e:99:51:
         dc:a1:fd:91:a2:04:92:b5:fd:bd:7e:ee:4d:ba:83:46:a5:59:
         c5:7d:5a:21:2e:52:45:64:8b:cd:e8:89:5e:ca:52:b3:01:7d:
         90:83:31:ef:eb:d5:21:fd:e5:59:f2:57:08:7d:28:c4:22:2d:
         e1:cd:ec:c9:71:be:fa:16:0d:6a:f9:03:76:cc:7f:db:32:5b:
         d6:5d:f6:ce:d0:92:d0:e4:a4:50:a4:45:0c:7f:92:fd:dd:52:
         2f:e2:72:73:d9:88:03:57:7b:49:96:2d:22:be:27:2c:6e:1f:
         9e:71:9d:b8:55:ad:20:16:36:60:2a:9d:07:f2:25:87:87:55:
         d6:6a:70:e3:c9:ec:93:5d:73:81:1c:75:d0:81:11:af:b8:6b:
         83:20:9d:94:03:ea:e8:6e:89:3b:c0:3e:39:5d:b8:ca:a6:ed:
         d2:60:96:43:88:ba:4f:e2:29:74:f8:e5:a9:74:50:52:7c:94:
         2f:a4:c0:3c:7f:33:0b:72:f8:f2:46:5e:3f:3e:6c:f7:4e:fb:
         54:56:0a:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjYwMTIwMTUxOTQwWhcNMjYwMTI3MTUxOTQwWjAYMRYwFAYD
VQQDDA02OTZmOWQwZC1lYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuv7vHaB8cRmQGBLQvDCNf59hV83p7mI0IRyIDbd5fQuR0Zp8/0MJI3bqsae+
bhXpMbn0u8NdxmCs6GiD8sBm5dGwL6Ou1i4TXj1S79gs412dQJqB6mMvchpK2YTK
7+CycyL50l0RHV0dJVLbXHHZqklb+q+RKA602yqXTrHIFhg6wQsLydzZeeW54nXz
JiychndHZNlAoqNZTup2bWipMiQvkzDLQ8WlKUoPYe5OMfrhnmY33yeOnds6cUAn
2pmO3YPcK8Q0I1QSRC5poyj4Gtgk26jrqVrTkFzAlAzOt6xNyKxNybi0sF85zJC3
/pC2uFUX5oBJt+GmIAlPZkmLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1s/FLb
Bs8160TmS0zYM+4Eo3yDMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0U3NS9EMjJFRjNENkZGNEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdE
SmJlLUNCX1pLR3g1dnFhb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ3kQHVDhLK0L6mgOG/9n5UafDzqoPxfz3fV08Nr0UJWUo8hmiP/1i
nMTlPDef5YIw7QCOmVHcof2RogSStf29fu5NuoNGpVnFfVohLlJFZIvN6IleylKz
AX2QgzHv69Uh/eVZ8lcIfSjEIi3hzezJcb76Fg1q+QN2zH/bMlvWXfbO0JLQ5KRQ
pEUMf5L93VIv4nJz2YgDV3tJli0ivicsbh+ecZ24Va0gFjZgKp0H8iWHh1XWanDj
yeyTXXOBHHXQgRGvuGuDIJ2UA+robok7wD45XbjKpu3SYJZDiLpP4il0+OWpdFBS
fJQvpMA8fzMLcvjyRl4/Pmz3TvtUVgq6
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:56 2026 by rpki-client