This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File:                     mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier:          KdNkgmeCHl/AcpWjbxfVmmLroD6ur0e88Lq3YRIdTpU=
Subject key identifier:   3D:AC:53:D2:ED:3B:21:08:23:8B:7B:58:1F:FB:2E:F7:31:F4:26:0A
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer:       /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number:          0614
Signing time:             Mon 26 Jan 2026 22:04:52 +0000
Manifest this update:     Mon 26 Jan 2026 22:04:52 +0000
Manifest next update:     Mon 02 Feb 2026 22:04:52 +0000
Files and hashes:         1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: CeA60QjV+Ez/LmMd8+solGwciYICqSZq7XNZdML/XNk=)
                          2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: v0ecUflCYhVKX7WWipZns2LjtpkfsuPLOo5CXM1V1Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
                          rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 22:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
        Validity
            Not Before: Jan 26 22:04:52 2026 GMT
            Not After : Feb  2 22:04:52 2026 GMT
        Subject: CN=6977e504-ef55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:56:c3:72:9a:2b:ac:57:f2:2f:26:31:7d:
                    18:86:dd:11:27:c9:d5:35:ca:38:7f:59:da:47:f8:
                    b7:30:e7:b3:5a:34:62:ff:38:e8:66:42:7c:76:f7:
                    f1:9f:d4:e0:02:8b:0b:fd:64:1e:66:be:97:09:4a:
                    71:8a:25:94:dc:a7:15:42:1f:58:af:d3:4e:43:2a:
                    dd:99:c4:c7:49:ab:e6:2d:f7:88:69:af:d3:b6:a1:
                    84:e7:3f:05:e1:3e:90:df:64:9b:ea:a2:40:7f:27:
                    5c:4a:25:08:b0:8c:f6:05:fe:5b:96:34:fd:70:31:
                    1f:53:f1:8b:5d:66:9b:1b:f4:71:22:ed:f3:df:a9:
                    3a:fa:4a:b8:5f:49:1b:84:4a:2d:53:c7:a7:3e:a7:
                    da:99:e4:85:64:b8:9a:8e:f8:51:2e:68:a5:b9:84:
                    0c:3c:c4:69:cc:70:8b:48:7e:81:cd:2d:bc:57:3e:
                    e0:3f:f9:6c:72:13:ba:da:cc:b8:86:23:e4:71:86:
                    88:71:a1:6c:77:fe:5b:c6:01:95:2c:76:65:74:5b:
                    8c:1a:ef:8f:39:39:ee:81:03:ff:59:0a:6a:29:58:
                    4b:5a:ff:fe:60:75:7b:50:9f:e7:fd:75:06:7f:8b:
                    9a:a7:15:f2:9d:20:3d:18:83:54:bd:e9:4b:9d:8c:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:53:D2:ED:3B:21:08:23:8B:7B:58:1F:FB:2E:F7:31:F4:26:0A
            X509v3 Authority Key Identifier:
                keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:80:31:19:91:b9:2a:55:5f:fb:17:40:e2:de:a5:59:ff:a3:
         36:62:b0:44:4f:05:e2:d3:80:92:55:e8:e0:45:4f:a2:b3:cd:
         c7:49:9c:ab:7f:3b:29:c3:41:3c:25:55:ae:2f:3f:72:3d:bc:
         22:f8:0c:d2:8d:38:69:7d:84:db:53:a7:16:a0:d2:75:38:89:
         5e:62:7f:97:00:c4:09:94:cc:76:0d:c8:99:ba:ac:45:22:1f:
         53:37:e7:25:98:79:cc:a6:5b:05:1c:58:fc:64:a5:cc:32:42:
         c1:2e:cf:02:0b:6c:de:e4:87:53:e9:d7:77:a8:52:02:7e:41:
         54:5c:20:2c:ba:90:ef:4b:6e:2d:34:80:d1:18:7a:18:6d:bc:
         42:9d:f4:d7:76:b8:82:34:57:ba:c3:0a:38:7a:39:ed:0b:df:
         f4:57:0d:9c:2c:d7:e7:cb:94:4c:8d:2f:09:be:83:61:1a:c3:
         06:97:c4:04:e3:9c:64:f1:60:ed:47:8c:f9:a6:7f:81:9d:38:
         3d:84:fc:49:f8:21:f9:eb:1c:21:15:c8:ce:4b:a3:91:5d:af:
         79:1c:20:9f:79:bd:01:78:15:e5:cb:3b:e7:ff:94:6c:18:fd:
         eb:b1:93:8c:ec:2b:6a:c9:0e:21:b9:f7:09:64:5b:88:52:3d:
         89:24:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:36:48 2026 by rpki-client