This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
File:                     usyV7haoNg4u685zU3tvmszfLq0.mft (raw, json)
Hash identifier:          NGzDo/gx3KdlvJgnLGCsLDeEBJdtoOOUU3bBnaBMpEk=
Subject key identifier:   67:1A:E9:0B:02:02:0E:B4:01:89:80:67:5D:B8:71:19:DC:4C:17:7D
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Certificate issuer:       /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
Manifest number:          0D
Signing time:             Sat 17 Jan 2026 07:02:55 +0000
Manifest this update:     Sat 17 Jan 2026 07:02:55 +0000
Manifest next update:     Sat 24 Jan 2026 07:02:55 +0000
Files and hashes:         1: usyV7haoNg4u685zU3tvmszfLq0.crl (hash: jy3hxgQYAwCvH3Ms5nGLWXuUn+hPsyCkuOnR+Qt9sns=)
                          2: 9D379516E54D11F092458985756F56BC.roa (hash: /LKlwnOxeCo/Ilem0jke/2L8MamtiSej0oig7H5kp2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
        Validity
            Not Before: Jan 17 07:02:55 2026 GMT
            Not After : Jan 24 07:02:55 2026 GMT
        Subject: CN=696b341f-5698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:7f:82:ee:79:0d:11:66:88:9c:a1:81:3d:
                    92:40:0e:ad:7c:3c:d2:98:33:b3:b5:e9:07:bc:fc:
                    f9:c2:36:2a:ca:a4:46:7d:91:35:91:58:a4:13:1a:
                    cc:82:6b:e6:18:66:49:fd:2f:e3:d2:a8:b0:20:48:
                    2a:c3:85:94:d0:23:78:8c:9d:f2:4d:21:eb:3e:2f:
                    70:00:f0:f6:dc:b9:a7:42:61:55:39:19:49:4d:17:
                    7a:3a:43:f7:d6:c8:46:36:25:31:67:95:2a:0a:a9:
                    f5:73:0f:f0:b0:b7:52:dc:6c:ec:66:4b:c7:c1:af:
                    f9:e2:46:b9:40:1b:2f:be:c9:7b:a3:6a:df:62:d5:
                    af:05:93:b6:13:c7:22:ea:a4:a7:fc:fb:6d:87:7e:
                    81:29:eb:42:52:6d:89:31:a2:83:60:85:4d:9a:7a:
                    fd:9b:5c:25:f1:7f:fe:ae:96:a2:b5:61:6c:a3:59:
                    0c:89:a2:41:01:96:f3:51:e2:ea:4c:8b:d5:8b:ba:
                    54:e9:99:9f:45:be:2d:17:9b:ac:42:33:b3:94:1e:
                    1a:0a:58:81:b2:bc:4c:e6:ce:b7:ab:95:f3:60:29:
                    1d:d2:32:d2:33:63:af:bc:2d:db:57:99:c3:08:06:
                    74:a3:db:b8:cf:5e:70:4b:b8:41:4c:ad:c6:96:49:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:E9:0B:02:02:0E:B4:01:89:80:67:5D:B8:71:19:DC:4C:17:7D
            X509v3 Authority Key Identifier:
                keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b1:71:2c:17:e0:6d:8e:d3:fe:11:1b:27:0e:a9:14:25:7e:
         4e:38:6d:4b:a1:2b:55:7a:f2:d9:dd:0a:d6:da:a7:b9:f8:b4:
         bb:64:3b:fb:24:bd:ae:5a:ec:44:0d:98:df:88:32:ad:91:76:
         aa:92:e4:42:c2:3a:8e:aa:ee:f7:fa:61:4b:f0:ac:a6:6a:b9:
         81:7d:10:c8:24:09:5a:6b:d5:c3:e9:b3:4a:35:66:b5:1d:6c:
         33:b2:b6:a7:cf:5e:cc:4b:a3:b8:67:69:11:e4:ba:cf:3e:8f:
         5d:9a:1f:ff:8d:c7:ad:64:1c:1b:f4:01:50:34:af:23:71:65:
         e7:43:1c:5d:1a:5c:28:70:48:17:59:44:e5:db:12:17:c4:2c:
         61:5d:c6:7b:aa:3c:5a:f2:34:30:af:49:4b:0f:87:c6:cf:ba:
         ca:60:bc:b3:15:3b:92:ea:b2:b6:37:a1:d5:fc:01:3a:bb:64:
         ee:77:45:ff:02:ba:bd:31:df:67:f5:8b:f4:70:96:a8:d0:ac:
         bd:25:42:9c:d4:3f:b6:9e:6e:98:cb:5a:8a:93:d3:04:5a:0f:
         39:36:ab:3f:c9:6b:08:39:de:68:54:f2:ef:8f:cb:35:fe:9d:
         75:76:3f:34:5c:92:f8:44:e5:41:49:d6:3e:69:22:03:0c:b5:
         3a:bc:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:53:50 2026 by rpki-client