This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File:                     AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier:          jEFQ5Gdr+/+PDGstsXj16ZwEE9pq/Heyzj/avIvPyPQ=
Subject key identifier:   6F:50:5C:5A:22:4B:01:D3:39:AF:5D:42:DB:AE:73:06:0D:82:0B:D6
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer:       /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number:          27
Signing time:             Sat 17 Jan 2026 06:42:11 +0000
Manifest this update:     Sat 17 Jan 2026 06:42:10 +0000
Manifest next update:     Sat 24 Jan 2026 06:42:10 +0000
Files and hashes:         1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: OPgbn1IIp+qP9MECXJje0BJJ4Mo1/wK+Ha130sxJkN8=)
                          2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: kF3MsF0LKW2hpCo2tc4HdlJWfcSXM3xD20g6oUSt0Tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
        Validity
            Not Before: Jan 17 06:42:10 2026 GMT
            Not After : Jan 24 06:42:10 2026 GMT
        Subject: CN=696b2f43-2c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1d:8f:3a:3e:23:c7:eb:f9:e4:0e:09:13:fa:
                    f9:f8:29:16:4d:84:8d:7e:cb:9d:8b:92:48:a6:ee:
                    73:39:7d:b6:c6:76:66:28:e9:9c:2d:af:15:e0:9b:
                    e0:b3:da:e0:bc:71:05:1d:41:c1:c2:8d:61:0d:de:
                    77:48:b3:fe:b4:71:6f:77:7a:93:f3:b8:c1:8a:59:
                    3f:3b:23:15:67:9f:29:2e:19:79:96:6a:ee:ab:74:
                    0a:d8:31:88:f7:8b:7f:40:77:76:db:77:16:85:4f:
                    08:a8:d8:cc:31:f2:e2:5b:fc:9b:fd:16:76:2a:4f:
                    98:3f:19:33:0d:17:c4:d4:93:bf:55:b0:78:a3:df:
                    74:50:26:1a:b3:3b:fa:1d:44:29:39:8d:01:c1:b9:
                    0d:3c:17:64:17:c9:3a:10:ae:ce:f9:aa:2c:2e:6b:
                    66:53:75:51:c2:b2:c7:8f:2c:5f:aa:e9:2f:fe:2b:
                    04:99:7d:93:4a:97:ff:be:7c:d3:38:52:54:b6:de:
                    5b:ac:02:05:9c:1a:3c:9e:95:e3:c4:01:0e:70:21:
                    b8:8c:6e:ce:10:5c:cf:bf:3c:d4:ea:5a:92:e0:44:
                    43:f1:9a:20:4f:67:b0:d0:3f:a6:97:eb:af:7e:bb:
                    38:df:2a:a5:ec:33:b1:ad:f5:41:79:93:d2:56:4e:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:50:5C:5A:22:4B:01:D3:39:AF:5D:42:DB:AE:73:06:0D:82:0B:D6
            X509v3 Authority Key Identifier:
                keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:90:84:e8:f4:05:85:a2:4d:01:de:72:5f:49:c6:8e:27:
         c7:84:3d:29:2c:13:0e:bf:a1:f7:a5:20:34:5e:40:21:38:92:
         56:a2:0b:63:22:b6:12:35:36:a2:29:da:53:58:b0:9f:99:91:
         2e:ea:ef:fc:97:70:3a:34:31:b9:96:46:6a:a5:68:ac:99:10:
         f5:07:ea:fe:b2:fe:54:21:69:19:6d:a9:f0:ac:dd:b7:52:97:
         df:49:4c:57:33:81:f1:a6:fe:0a:49:d0:09:51:b5:41:f0:14:
         7c:e3:4c:6d:7b:a1:73:54:a7:b2:a4:aa:10:26:f9:45:f0:a4:
         9c:83:7d:40:bf:a7:74:9f:1f:d1:16:e5:5f:f1:44:56:b5:1d:
         0b:70:92:af:e2:26:de:83:f3:79:c4:f8:41:6a:bf:8f:7a:e7:
         cb:61:ff:e3:8f:de:b8:82:15:03:a1:57:c3:95:00:e7:a5:b2:
         04:c4:0a:1d:69:71:7d:7c:07:fb:03:0e:74:b7:da:0d:04:6c:
         93:85:58:e0:50:48:1c:1a:3a:54:af:c6:26:33:b6:2b:02:10:
         ce:06:13:79:6b:ca:f6:a6:97:1e:27:df:34:fe:7c:55:7e:c6:
         b4:54:fd:32:0e:bb:22:bb:48:ff:d2:72:56:33:c4:96:b3:bb:
         97:19:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:15 2026 by rpki-client