This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
File:                     ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json)
Hash identifier:          i0oWne0pFttX7lBu1UGqHfUcy8tV4mnvkKqsFxotHyM=
Subject key identifier:   48:16:43:C9:74:87:1E:80:3B:E0:4D:7F:A9:38:B9:B8:3E:F1:A7:D8
Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
Certificate issuer:       /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
Manifest number:          06
Signing time:             Mon 05 Jan 2026 06:58:26 +0000
Manifest this update:     Mon 05 Jan 2026 06:58:26 +0000
Manifest next update:     Mon 12 Jan 2026 06:58:26 +0000
Files and hashes:         1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: RPJu8UWpWxVO4TPprLQAoa5CeA/ZG+18wkvtpNHGxZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 06:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
        Validity
            Not Before: Jan  5 06:58:26 2026 GMT
            Not After : Jan 12 06:58:26 2026 GMT
        Subject: CN=695b6112-45b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:0f:6e:84:1f:59:97:2d:81:05:bf:48:51:
                    75:fb:c2:ce:60:3c:98:bd:05:22:5e:65:7d:9b:45:
                    87:aa:5e:00:e1:f6:4b:71:53:ee:22:56:7b:6c:4e:
                    c4:cb:05:ad:67:8b:5e:87:d7:aa:ff:bd:ea:9d:23:
                    f3:f6:98:f6:8d:38:96:a7:78:c5:75:57:07:47:9d:
                    4d:f4:0a:2e:d2:f9:17:1a:cf:06:3b:14:35:db:30:
                    6d:63:61:b1:d0:ee:6c:c4:9b:97:e4:20:03:22:dd:
                    2f:cf:bf:18:48:4c:e2:64:06:74:d0:35:1a:2b:25:
                    a7:c4:e8:69:5e:3a:d8:1a:3c:16:8a:d4:d8:bf:5f:
                    1c:e6:71:33:c0:f1:08:e3:f7:c5:13:4e:df:11:76:
                    2f:cd:5d:85:4d:d2:54:27:b0:a5:c9:30:dc:94:79:
                    40:34:df:40:cc:3f:1c:20:44:55:48:a8:8c:9e:10:
                    6c:5b:a4:63:7c:d9:c6:23:09:d1:e5:58:a4:65:04:
                    78:58:eb:be:f6:71:f8:9e:85:5f:f8:29:dc:98:3f:
                    46:6d:4b:70:d9:f8:f0:75:67:69:24:5e:5e:85:d7:
                    3a:0e:66:a1:ec:4e:71:69:25:fc:e2:0d:d2:46:2d:
                    6b:1b:81:92:64:f9:9b:64:23:26:2c:05:ac:19:d9:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:16:43:C9:74:87:1E:80:3B:E0:4D:7F:A9:38:B9:B8:3E:F1:A7:D8
            X509v3 Authority Key Identifier:
                keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:e1:b5:4b:9b:f1:59:83:46:a3:07:19:0a:25:65:26:65:
         40:ad:7d:16:d2:51:4c:e2:f0:c1:fc:fc:2e:1e:98:05:c7:74:
         34:9a:4e:87:70:97:72:3d:89:ef:0e:1b:6a:0a:9a:c7:8f:f4:
         39:e3:d1:71:30:1c:8e:f0:ca:16:03:58:31:9c:b2:87:62:82:
         9d:c7:4f:96:e9:f2:02:3a:93:67:ee:c1:34:0a:e2:98:85:9f:
         b9:ff:4d:38:f8:0b:d5:e6:07:bb:97:47:7d:4c:0b:7c:e5:c7:
         a0:8b:b5:02:56:1a:4c:03:16:66:72:d6:a9:5b:2e:a6:16:17:
         d6:49:82:d7:9e:ac:f2:77:ee:a0:5c:b3:92:ce:5a:d9:3a:da:
         ab:19:0c:10:4d:b9:06:20:46:f9:71:91:83:68:da:2d:56:14:
         29:2b:c3:76:16:f3:9e:27:0b:46:6a:b1:bf:57:8e:c1:4a:70:
         4c:20:db:60:bf:49:79:92:8d:06:f7:78:c2:74:79:b0:16:20:
         1f:bb:52:86:15:e4:fd:44:64:f7:31:7b:9f:18:81:77:33:fa:
         30:6b:58:0c:ba:f9:f3:08:6a:97:57:48:62:1d:64:70:77:7a:
         8a:f9:b3:34:eb:04:a9:76:de:77:45:ac:1c:86:8c:9f:40:eb:
         79:f6:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 06:35:13 2026 by rpki-client