This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          MOXmmpQNqcJEGwknnR0CJZhHzVNchb2Ny3PAjKSA8Ak=
Subject key identifier:   92:F9:34:82:55:C8:2F:D9:3A:15:FD:53:CA:D5:ED:00:58:E2:0A:0D
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       06A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          06A7
Signing time:             Fri 16 Jan 2026 21:38:13 +0000
Manifest this update:     Fri 16 Jan 2026 21:38:12 +0000
Manifest next update:     Fri 23 Jan 2026 21:38:12 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: zUo7eWjuVjnqx1wtgJ+OiJNIstWV5j/3IsLjlSGNY40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
        Validity
            Not Before: Jan 16 21:38:12 2026 GMT
            Not After : Jan 23 21:38:12 2026 GMT
        Subject: CN=696aafc5-cc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:76:7b:98:62:25:8d:09:96:b0:2a:c3:4a:
                    45:04:7a:20:a3:fa:54:d7:ff:80:48:55:49:21:cd:
                    1f:8b:84:fc:c1:f7:0e:e2:fb:b5:83:3f:fa:ba:99:
                    bc:7b:3f:36:0c:28:a9:c5:07:c0:8f:e8:24:d5:67:
                    f7:b9:d5:da:df:db:d4:81:2b:e1:86:d0:42:05:3a:
                    90:86:10:46:e9:9b:1c:79:99:bb:47:fa:c7:da:86:
                    b9:5d:f1:f3:86:5f:84:b1:33:fc:dc:a1:77:8c:4d:
                    d2:4e:a5:5a:29:f6:af:44:ae:f8:7a:3c:88:19:b1:
                    1a:b4:9d:da:d3:a1:17:e9:0b:17:1e:c7:5b:a4:7f:
                    22:fb:7b:c7:67:54:53:e5:b1:5a:ba:71:b2:56:0b:
                    52:18:3f:45:db:4a:f1:81:60:03:07:2a:88:6b:a1:
                    19:80:19:6a:42:74:7f:9e:1a:20:98:db:58:f4:c3:
                    36:c5:b6:29:75:87:8b:c5:5b:53:07:98:18:00:ac:
                    b2:47:17:fb:df:f2:84:d3:01:5b:97:8d:f8:c3:d9:
                    9a:be:f6:6d:b2:3e:98:3f:16:f8:3f:c6:56:20:bc:
                    bf:ef:2a:de:ee:06:5b:17:3e:a0:e5:46:f4:e8:0b:
                    03:64:3b:0f:cb:38:d0:8f:b6:46:dd:a3:3c:9d:ef:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:34:82:55:C8:2F:D9:3A:15:FD:53:CA:D5:ED:00:58:E2:0A:0D
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:ca:44:35:3b:6c:95:58:ae:fc:af:ba:6e:31:b3:3f:7e:
         9f:93:ff:c1:0d:f6:84:f8:b6:93:b9:ca:9a:fa:52:56:7b:d2:
         35:78:4b:61:84:0e:ae:e7:c4:9f:5b:c6:fa:5d:eb:15:ed:0c:
         75:90:78:dc:ec:cf:6e:43:b2:bf:6e:a4:19:c4:56:37:03:34:
         55:d0:bc:9b:30:9a:b9:95:ef:e0:d7:7a:ed:86:d6:04:b9:91:
         59:1e:1e:ee:38:a9:e8:38:4e:03:4b:c1:6b:c2:de:fe:d9:e9:
         71:83:c1:2f:68:ec:a1:ea:9d:ab:6c:a5:70:f6:ca:f7:13:de:
         c5:e8:25:3b:36:95:a3:64:25:7c:c4:36:e4:fb:62:d2:a1:26:
         5c:f1:ca:8f:b1:54:13:f1:ba:7d:29:bd:7a:e6:5a:4c:33:eb:
         b2:04:6c:9b:62:41:88:38:e0:46:3f:e8:ed:09:1c:ed:6f:20:
         0a:27:8b:3a:63:d3:9e:f8:7b:13:c0:8d:da:b8:fc:3e:ca:92:
         9b:ed:07:47:f3:a4:81:78:6b:36:80:67:39:54:26:6d:9f:05:
         9f:3c:88:a5:70:98:7e:2f:dd:79:77:91:52:4d:84:ed:35:ba:
         f8:57:a9:10:ab:c7:19:ae:82:fa:cf:b1:ed:a4:78:2c:02:38:
         4c:69:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:55 2026 by rpki-client