This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
File:                     r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json)
Hash identifier:          l1kV41z1q7/g5zih36t4qRDUCCVUbz4Bp775MtOr/fI=
Subject key identifier:   7F:E8:FD:E3:66:7F:96:99:6E:13:C0:97:06:35:6D:91:BE:B9:C6:D0
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       3897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
Manifest number:          36C4
Signing time:             Fri 16 Jan 2026 14:21:58 +0000
Manifest this update:     Fri 16 Jan 2026 14:21:58 +0000
Manifest next update:     Fri 23 Jan 2026 14:21:58 +0000
Files and hashes:         1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: PWSfScTFiCXEkiZ1dWD1sueSULqqZe6xCWaUdfua7gE=)
                          2: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: sE7POF4sPAWNrqvKGR3XPjh3vRpnxWQR3GBk17yROvM=)
                          3: 6B1F445C781F11F0B7BE0756C4F9AE02.roa (hash: 2VNweA5bL/qHuR9no6uM1dicICzNt/Lgvt99j53zBzQ=)
                          4: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: QUNQFD6Fs6vQ/Xacn/YTyPddDyT2Zj7smjz5kkHqzck=)
                          5: 94AE247A879B11EF9B78224EC4F9AE02.roa (hash: beGHA0T1rToh9I4yqxtOrGtpbpK8Gm/NJNtPJMVcv0k=)
                          6: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: rRCgJL8oGciUh8AlUq1plMpffnbAPeYlKijUPW7pzas=)
                          7: CF09016006A611EAA8819441C4F9AE02.roa (hash: Nbg8apOhpz/ZbutsuWKwBDZ0wlxzKN9/aIfKH1t9opI=)
                          8: 24AC829C476311F0970DF567C4F9AE02.roa (hash: q7CS41rn7/JdKF4Im2iOHVnhzgphtbHSDDYb+9p08i8=)
                          9: 387ABD22614211F0AED25E68C4F9AE02.roa (hash: OTFLC+xsLqw75trai6CwqErooVjsc/BgFHuDOUQCFzo=)
                          10: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: YX0PeVbwnE20xWaiX2nr0sozgOjfm9aCwEd0B6uYVnQ=)
                          11: 7C5F5278589611F084D9AA7BC4F9AE02.roa (hash: FOolRrR20/q0F6XvV7yCzqolfjRuktnsRoMJ0vyCQC8=)
                          12: A62428E820B211F09941D114C4F9AE02.roa (hash: fcDJ/ZruqRqMthD4UyDytuO1DIXDnB08fy1+uiAiXPg=)
                          13: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: 5kXCjaK7+LQcCcI/C1WuTADPPcJscpEH0U09SHcv4eM=)
                          14: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: sYUwQlOLcFH2Qzgi6OqjZe1I3jOQTOg2npEZQTWLY/A=)
                          15: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: Xmn9rKXqawcB/ajmntmSYWXo/n1a94MI1ePlNWCx+l8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 14:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14487 (0x3897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Jan 16 14:21:58 2026 GMT
            Not After : Jan 23 14:21:58 2026 GMT
        Subject: CN=696a4986-934c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:da:3f:6f:06:db:a7:d5:46:c3:93:61:96:
                    09:58:81:ee:19:b7:08:40:8a:cd:d2:61:32:e3:31:
                    ab:60:0d:e4:9d:28:19:b2:34:05:48:6d:32:19:74:
                    b8:6c:ef:3a:2f:58:09:ae:58:05:0c:c2:71:64:50:
                    39:6f:40:d5:9c:3d:5a:af:69:9a:74:e7:a5:42:ce:
                    91:a2:92:ac:17:e9:37:c0:2e:a2:8d:96:fb:62:68:
                    3a:34:b9:3e:87:d8:55:12:d8:54:8b:b0:db:e2:f2:
                    46:be:56:94:37:48:c5:44:86:e7:31:c3:b8:40:a9:
                    d7:d4:04:9c:69:40:49:89:8e:c3:d6:d0:fe:12:5a:
                    a0:1e:4e:45:bd:73:53:51:48:44:24:7c:56:19:f2:
                    6a:86:b7:5d:3d:03:2a:44:eb:5c:c2:86:a7:00:8c:
                    04:49:a2:51:9b:c1:f3:75:69:9c:db:9f:84:5c:98:
                    7e:4c:6e:26:4e:da:a1:09:76:a9:e2:7f:a9:95:bc:
                    b7:98:8d:de:e1:43:6e:6e:4a:e7:4d:77:ff:f2:dc:
                    63:cd:5b:82:2e:32:a0:6c:10:27:4f:61:b7:14:26:
                    26:32:09:68:f1:28:76:9d:58:c6:e8:de:9b:24:19:
                    63:5f:06:a2:1a:9d:14:b0:9d:b1:d1:86:ed:3d:7c:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E8:FD:E3:66:7F:96:99:6E:13:C0:97:06:35:6D:91:BE:B9:C6:D0
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:86:21:51:f0:28:f1:76:e1:53:8f:34:18:6e:86:84:10:a1:
         48:64:f9:95:aa:ae:10:ba:11:07:17:34:aa:f3:4f:c8:35:64:
         f0:cf:c4:48:9f:a5:03:04:5d:c2:dd:c4:4a:aa:00:af:15:01:
         be:78:41:e2:19:e8:24:84:f5:04:d7:44:0b:a9:c0:b3:20:0c:
         c0:08:f5:f5:ef:0b:12:72:d1:cd:d2:0d:3e:ff:b7:33:8a:5b:
         b0:9b:74:fe:00:29:1a:c3:15:e6:bb:8f:31:b7:38:4b:ae:d9:
         01:78:8d:37:71:ef:7d:dc:86:55:66:56:73:d7:e1:e9:ae:b3:
         2d:97:07:6c:22:07:85:60:b7:93:ce:82:c3:17:49:55:35:04:
         0d:1a:93:33:6d:2a:5e:22:80:ac:2a:cd:6a:85:da:92:a6:d0:
         35:ee:80:b3:8e:23:82:e6:4d:ad:16:7f:25:18:56:db:1a:0b:
         33:2a:47:66:42:e7:8d:2f:46:b7:3e:a6:d6:19:6b:b0:1d:ef:
         f5:54:9f:c3:8b:46:1b:52:4e:39:36:7d:7d:27:d5:d9:5b:2c:
         39:5b:fb:87:c3:1a:76:38:bf:d5:da:51:6e:35:8d:20:ce:6d:
         59:2b:e4:65:c2:c2:8f:e6:ff:1f:23:66:85:9e:dd:7a:56:a8:
         68:d3:78:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:10:47 2026 by rpki-client