This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File:                     1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier:          brxtEZaVdP8TtZLH7VAcWrVAYClm+ap8EmzCRrWFPlw=
Subject key identifier:   39:3D:FD:B0:85:20:4C:67:5B:B5:9B:97:BB:D7:FC:30:9C:1E:6E:74
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number:          07DE
Signing time:             Tue 20 Jan 2026 20:51:17 +0000
Manifest this update:     Tue 20 Jan 2026 20:51:17 +0000
Manifest next update:     Tue 27 Jan 2026 20:51:17 +0000
Files and hashes:         1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: eQM3TEIBJ3ppL+FGC8VJfqjYOMJUJ2yDISfCaXKGBwU=)
                          2: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M=)
                          3: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: VPyjHXIlyfKXrjtRepxZP54GhoJ+eI58uZbgIe9Td2M=)
                          4: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: fcLk74mhI/vJXY1ktCkvuDEMWDBzEh5+AvgLMjlAcms=)
                          5: 490B8F5ED66D11F08B3B5B8162D3641D.roa (hash: rLw3EbIfgoGiztlFFdbyvVyP4GwcGL32tZbAZb2z65Q=)
                          6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: Ixq9geRxUKKGOgHHhaiXOEHSRL++Qm2+qsdIs46ukkY=)
                          7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: I61epdoS7NgSvCNgvdHOLFptBBSx5JIqUPN5lG/cUj8=)
                          8: 386060F6F19F11F0AA4D8F58706F56BC.roa (hash: gs2RtrwgdVgur9ChmmRSP6P5ng7+OTzxZq3YA+0ko5A=)
                          9: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: aL/kODOLIDHuNmCnLe8Qvybv/SiBsmo7P+ETCMyOtcA=)
                          10: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: rFNdBE/l2Q3OnzMQ6TN5aUj23PCHorUgqebxmyTEGXU=)
                          11: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: qln4gvIuOP7tepjN2xzQIyOgSArueoVOrTlqRA/GgZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: Jan 20 20:51:17 2026 GMT
            Not After : Jan 27 20:51:17 2026 GMT
        Subject: CN=696feac5-d907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:3a:a9:df:d1:e9:c4:ce:23:0c:56:95:22:
                    d9:18:1a:fa:40:e0:3a:aa:4e:71:36:13:6b:b1:01:
                    d4:c9:28:82:7a:74:a5:87:a2:7d:41:de:4f:e1:10:
                    db:08:d0:e8:ee:62:31:82:1f:1f:28:fe:0e:a0:0b:
                    02:8a:fe:8b:1e:4d:09:64:05:ed:0d:e8:0f:90:21:
                    5c:9d:f5:85:79:c3:a5:04:b4:e3:f5:76:2c:d7:40:
                    79:48:f1:be:49:b3:79:be:ea:3f:a0:73:45:4f:39:
                    be:15:84:e3:a6:cb:63:47:a4:29:6f:a2:04:1d:da:
                    38:53:02:f4:f1:e3:10:01:08:29:dd:19:14:70:e6:
                    56:b1:03:cd:cd:13:34:f1:37:3b:be:f1:db:70:dc:
                    e9:1b:8e:d9:4f:34:ac:d2:54:ae:f1:21:58:6e:cd:
                    a5:a1:bd:6f:4d:46:74:ab:3f:a9:fe:c3:28:a1:c1:
                    1c:29:09:a4:bf:da:48:c8:c7:a2:51:3c:28:f2:56:
                    c8:b6:9f:42:c6:9b:a3:ed:d0:6e:c3:f1:8a:a1:af:
                    4a:94:1d:cc:8f:4c:ac:b2:c7:6e:6c:4b:b3:7b:dc:
                    df:23:c1:c7:0e:c2:cf:d4:13:ca:6f:4f:3f:26:97:
                    31:8e:f1:a4:4a:f5:f5:af:1a:9e:ed:05:80:db:73:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:FD:B0:85:20:4C:67:5B:B5:9B:97:BB:D7:FC:30:9C:1E:6E:74
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:49:ed:91:0c:1d:e2:71:f6:a4:58:6e:5b:a1:ed:cc:9b:
         cd:e0:8e:e3:95:02:03:53:c0:0f:98:9d:08:2a:11:bb:25:91:
         2a:bf:d3:25:38:39:a3:8b:30:6a:36:a5:70:96:61:53:a2:b8:
         ed:95:00:b2:7a:c9:3d:0c:a0:cb:f3:c3:02:67:36:7b:00:ed:
         dc:9c:5e:3d:5b:0f:cc:16:b2:25:76:a8:ef:79:90:fc:ca:04:
         54:a3:c0:f7:ad:b0:81:aa:6e:ad:2f:43:38:34:a0:b9:55:85:
         cc:6d:7c:51:53:45:6a:5d:9c:aa:28:b0:6c:b1:e4:ff:24:98:
         56:be:6e:6b:a9:dd:f9:27:48:15:c8:bb:47:d6:18:16:3e:fa:
         f2:89:c5:21:c2:a2:86:02:54:28:48:9c:bb:2c:93:2d:e2:4b:
         b8:89:8d:f7:01:ff:37:29:57:49:89:14:65:12:87:25:4b:b3:
         cc:61:ba:f6:e5:98:aa:2a:4a:91:b2:c7:7d:fb:8f:b3:19:83:
         8d:b5:d3:c3:99:0e:b3:1f:48:08:54:6c:9b:2e:53:91:8f:0e:
         cd:53:25:32:74:cb:51:bf:5e:6c:27:81:ca:83:2c:08:e2:2a:
         b3:32:e7:37:74:7b:45:1e:30:da:64:3b:81:a0:00:c8:f9:f6:
         fd:4d:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:48:43 2026 by rpki-client