This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
File:                     kw7wlbDGjcijfJH_jxM3Bw6pykA.mft (raw, json)
Hash identifier:          2KUV7tlj1roJqHYLeT8gP4qT/F2sk9wtY8STqZspsjg=
Subject key identifier:   BC:E3:54:F2:6A:36:56:ED:10:17:54:BE:04:16:0C:3D:18:95:75:B9
Authority key identifier: 93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40
Certificate issuer:       /CN=A916E1C6/serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
Manifest number:          15
Signing time:             Sat 17 Jan 2026 06:56:04 +0000
Manifest this update:     Sat 17 Jan 2026 06:56:03 +0000
Manifest next update:     Sat 24 Jan 2026 06:56:03 +0000
Files and hashes:         1: kw7wlbDGjcijfJH_jxM3Bw6pykA.crl (hash: rR6N9a2gH82CtX3Z/+dTuC9GFja+5ADX0IIDLaLVaUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=930EF095B0C68DC8A37C91FF8F1337070EA9CA40
        Validity
            Not Before: Jan 17 06:56:03 2026 GMT
            Not After : Jan 24 06:56:03 2026 GMT
        Subject: CN=696b3284-ca3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:f9:6a:9d:c1:59:77:4d:83:f5:b9:a4:6b:
                    c1:cf:c4:64:fc:ae:5c:8d:7a:2b:23:43:f2:5e:83:
                    59:53:98:1e:11:6b:a0:f5:2d:02:5a:b5:6e:37:13:
                    e6:6c:9b:6b:32:80:82:c4:5d:6b:c0:08:c5:51:79:
                    e9:51:c2:8c:dd:4d:e7:ba:b7:e3:ba:fe:e6:6f:30:
                    ce:14:e0:8a:aa:b8:aa:89:ac:4b:e0:6a:c5:c7:41:
                    98:97:2c:04:b4:97:d1:45:8a:04:87:46:66:1a:9f:
                    bb:5d:46:4f:78:2a:73:eb:79:f8:45:d0:4d:33:c8:
                    13:a1:1c:02:6b:c5:b1:b0:d5:5f:e3:2b:e5:35:93:
                    8c:83:aa:2e:9d:da:92:3c:88:b6:ba:3e:77:c6:78:
                    46:61:b3:0d:3b:fa:01:09:47:67:1a:8b:d6:df:27:
                    20:61:c1:71:0c:10:d8:f5:3d:d9:f9:43:f4:ab:d9:
                    4b:7f:d2:ef:df:9a:00:f9:c5:77:9e:47:08:4d:ee:
                    70:05:e4:d1:a2:a9:41:cd:f0:11:a7:33:8c:80:0e:
                    a8:49:49:16:f7:1b:71:dd:c4:77:55:99:7b:e6:50:
                    ae:07:7d:f4:04:21:d2:fd:02:2a:b4:db:3e:0b:3b:
                    86:f5:1e:bc:b5:70:2d:05:9d:1f:43:ed:3b:b0:b7:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:54:F2:6A:36:56:ED:10:17:54:BE:04:16:0C:3D:18:95:75:B9
            X509v3 Authority Key Identifier:
                keyid:93:0E:F0:95:B0:C6:8D:C8:A3:7C:91:FF:8F:13:37:07:0E:A9:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw7wlbDGjcijfJH_jxM3Bw6pykA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/39718462D51F11F087E9B57DC4F9AE02/kw7wlbDGjcijfJH_jxM3Bw6pykA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:c2:d4:a2:1e:ee:cb:18:b3:44:10:32:0c:50:d5:98:0a:
         ea:23:b9:42:82:34:1e:f5:d4:03:31:29:5d:1a:e6:36:bb:06:
         93:24:25:f9:4d:b5:01:1a:68:9d:fd:6f:6e:5b:8b:0c:3a:17:
         c7:db:bb:0f:e3:7e:d8:3a:3a:14:e0:45:95:7c:ec:48:3d:6c:
         89:3d:18:c2:55:62:01:50:d6:94:a2:78:cf:1c:aa:8f:31:af:
         5f:ff:ba:8e:8f:30:91:07:9e:de:dc:16:72:88:29:f2:07:25:
         2e:67:6a:95:b8:57:fa:fa:bd:4d:50:f5:6b:71:10:b2:2f:32:
         30:29:40:49:83:1c:55:37:33:06:bc:2c:19:40:6f:2e:0c:59:
         e4:5e:ce:6a:de:04:98:ac:55:aa:93:1a:55:9d:cf:ce:14:29:
         c1:f5:36:49:3f:c2:ff:59:f5:fb:11:18:26:dd:44:5a:fb:2f:
         70:4b:8a:19:d0:59:db:30:9f:62:4f:25:5b:26:9d:87:0d:55:
         60:46:4a:2e:55:85:62:06:1f:db:ee:d7:e6:ab:c6:57:a3:fc:
         a2:3d:5b:f4:9b:e3:5c:4d:dd:5b:9c:ec:c4:db:95:6f:ec:d7:
         e6:f6:57:b5:3e:40:41:bb:07:a9:64:8b:dc:05:2f:b8:bd:44:
         f4:41:53:04
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RTFDNjExMC8GA1UEBRMoOTMwRUYwOTVCMEM2OERDOEEzN0M5MUZGOEYxMzM3MDcw
RUE5Q0E0MDAeFw0yNjAxMTcwNjU2MDNaFw0yNjAxMjQwNjU2MDNaMBgxFjAUBgNV
BAMMDTY5NmIzMjg0LWNhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMAflqncFZd02D9bmka8HPxGT8rlyNeisjQ/Jeg1lTmB4Ra6D1LQJatW43E+Zs
m2sygILEXWvACMVReelRwozdTee6t+O6/uZvMM4U4IqquKqJrEvgasXHQZiXLAS0
l9FFigSHRmYan7tdRk94KnPrefhF0E0zyBOhHAJrxbGw1V/jK+U1k4yDqi6d2pI8
iLa6PnfGeEZhsw07+gEJR2cai9bfJyBhwXEMENj1Pdn5Q/Sr2Ut/0u/fmgD5xXee
RwhN7nAF5NGiqUHN8BGnM4yADqhJSRb3G3HdxHdVmXvmUK4HffQEIdL9Aiq02z4L
O4b1Hry1cC0FnR9D7Tuwt+CzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvONU8mo2
Vu0QF1S+BBYMPRiVdbkwHwYDVR0jBBgwFoAUkw7wlbDGjcijfJH/jxM3Bw6pykAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMUM2LzM5NzE4NDYyRDUx
RjExRjA4N0U5QjU3REM0RjlBRTAyL2t3N3dsYkRHamNpamZKSF9qeE0zQnc2cHlr
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIva3c3d2xiREdqY2lqZkpIX2p4TTNCdzZweWtBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF
MUM2LzM5NzE4NDYyRDUxRjExRjA4N0U5QjU3REM0RjlBRTAyL2t3N3dsYkRHamNp
amZKSF9qeE0zQnc2cHlrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKWqwtSiHu7LGLNEEDIMUNWYCuojuUKCNB711AMxKV0a5ja7BpMkJflN
tQEaaJ39b25biww6F8fbuw/jftg6OhTgRZV87Eg9bIk9GMJVYgFQ1pSieM8cqo8x
r1//uo6PMJEHnt7cFnKIKfIHJS5napW4V/r6vU1Q9WtxELIvMjApQEmDHFU3Mwa8
LBlAby4MWeRezmreBJisVaqTGlWdz84UKcH1Nkk/wv9Z9fsRGCbdRFr7L3BLihnQ
Wdswn2JPJVsmnYcNVWBGSi5VhWIGH9vu1+arxlej/KI9W/Sb41xN3Vuc7MTblW/s
1+b2V7U+QEG7B6lki9wFL7i9RPRBUwQ=
-----END CERTIFICATE-----
Generated at Sun Jan 18 02:55:32 2026 by rpki-client