This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
File:                     RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json)
Hash identifier:          5e3nJUl08ixvpPQY25Pf1Q9v6fNteDO1Hza08Fw8r00=
Subject key identifier:   A9:81:69:3E:42:F3:FC:06:A2:4E:A7:05:B2:BB:D9:F3:83:2D:1C:5D
Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
Certificate issuer:       /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
Manifest number:          19
Signing time:             Sat 17 Jan 2026 06:53:54 +0000
Manifest this update:     Sat 17 Jan 2026 06:53:54 +0000
Manifest next update:     Sat 24 Jan 2026 06:53:54 +0000
Files and hashes:         1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: I75XuejfaflZ8PcgtcQ4Cq/dn93gAP4hvkB+G0XgwDU=)
                          2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: KEDuB0fCQDUlpa61Kum8U1+z81WHmNVyBobvxXJKyg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
                          rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
        Validity
            Not Before: Jan 17 06:53:54 2026 GMT
            Not After : Jan 24 06:53:54 2026 GMT
        Subject: CN=696b3202-38bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:35:6f:6e:24:9d:a2:6f:da:f9:ae:7d:ad:
                    6a:ce:e8:dc:42:5d:9f:6f:96:49:ff:3b:11:c5:eb:
                    99:80:91:d3:e6:56:6d:3b:dc:68:6e:0a:9e:52:59:
                    f9:fe:9e:ba:ca:74:7e:49:da:97:68:e2:45:5f:b5:
                    cb:90:1f:a0:35:42:cc:4d:e2:b8:ae:e0:5b:7f:1f:
                    5b:e5:d7:5f:6f:c8:cc:dd:02:e9:3c:92:f0:a6:14:
                    b0:24:47:72:38:e6:4a:45:9a:0d:75:20:43:ac:ef:
                    08:71:b8:cf:cd:91:3e:0b:63:65:14:06:c5:3d:62:
                    3c:ae:a4:ff:70:33:a7:93:2f:1b:0e:e4:27:a0:d1:
                    d2:35:5c:7c:e2:ca:14:2c:5d:7c:3c:ae:a3:77:92:
                    9f:2b:fa:11:69:87:17:31:de:e0:2c:8d:0f:a1:7e:
                    9f:de:3c:d6:09:72:6f:49:b8:ad:eb:90:2e:ea:8b:
                    17:c2:39:52:97:60:25:e1:f5:b1:9e:55:08:4e:cc:
                    d0:d9:f7:07:f2:3e:7e:03:8f:ad:fe:ea:f0:68:62:
                    9c:75:69:cb:02:4c:20:2d:f7:14:df:98:53:a0:8f:
                    20:3d:28:70:e8:7f:07:04:f8:47:f9:ae:c1:ae:e9:
                    f7:92:6e:b1:0a:28:2b:70:a1:09:26:f9:b2:ef:79:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:69:3E:42:F3:FC:06:A2:4E:A7:05:B2:BB:D9:F3:83:2D:1C:5D
            X509v3 Authority Key Identifier:
                keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:81:2d:99:4e:ec:aa:4c:6b:1b:6e:f5:7e:ef:cc:42:f0:
         bd:e9:ef:62:43:f1:2e:bc:da:9e:70:ab:37:a6:cb:3e:ff:70:
         9f:a4:6c:50:4e:59:f0:38:9e:97:15:95:03:95:33:85:49:99:
         07:94:82:73:c9:67:ff:c5:45:81:17:1c:1b:45:e4:9a:54:1e:
         9a:17:c6:95:ee:05:46:be:28:b3:13:27:2d:83:82:fa:35:c9:
         43:28:36:a8:bd:f4:c8:51:ae:94:c0:d5:36:67:9b:66:b5:d8:
         ab:96:51:e9:ba:af:53:99:0b:7b:38:48:0b:c7:9c:2a:58:3b:
         ac:51:59:72:e5:6c:0a:bd:b4:a4:92:53:c0:c4:ea:65:8b:97:
         82:84:11:34:d2:26:5e:dc:d1:26:c8:00:5f:7d:5c:18:98:3e:
         81:be:99:c4:c8:de:b2:6d:46:2c:34:e3:d3:be:09:39:50:e5:
         2c:4a:20:c7:fa:d0:08:5f:f0:09:36:8f:67:a4:f5:5e:74:6c:
         af:34:56:18:93:4f:37:33:47:78:0b:40:b6:27:54:ab:d2:99:
         91:e7:64:bc:f3:c2:61:4a:f2:44:e3:7b:2b:23:b1:d9:06:8e:
         64:3b:0a:9b:f7:54:44:c8:6a:49:e2:cf:e9:7f:48:fa:0d:85:
         20:d4:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:45:25 2026 by rpki-client