This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          okNp8A1Rx/ovcy7rLwncv/viwxAYERmkHuJg3slekF8=
Subject key identifier:   CF:6C:02:3D:8D:4A:81:8E:2F:89:28:18:B3:A8:D7:C4:11:75:27:C2
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0D17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0CF9
Signing time:             Mon 26 Jan 2026 17:44:49 +0000
Manifest this update:     Mon 26 Jan 2026 17:44:49 +0000
Manifest next update:     Mon 02 Feb 2026 17:44:49 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: X5mQnRPWGRP5HT0jrTD3QZIyCoj+odV/SiHr4vl97g8=)
                          2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
                          3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
                          4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
                          5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 17:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Jan 26 17:44:49 2026 GMT
            Not After : Feb  2 17:44:49 2026 GMT
        Subject: CN=6977a811-0eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:a6:c4:e0:07:a5:c9:cc:d6:06:26:0d:bb:
                    70:f4:58:ce:50:9c:7a:18:9d:5d:8b:03:3f:1b:7c:
                    a6:65:32:ed:13:35:20:46:bd:8a:09:ee:6c:7c:81:
                    55:3f:28:8d:a3:28:82:cf:cb:83:fa:58:1f:70:e6:
                    5a:c1:bd:fe:b8:7c:08:c9:43:f4:46:23:a6:8b:84:
                    21:bd:6b:f3:e2:43:95:c7:09:cd:20:59:4d:38:1e:
                    da:f9:15:03:75:96:8d:d4:04:25:31:3e:31:9f:b7:
                    40:02:3f:b4:af:06:d3:f4:4a:93:c3:e8:e4:50:d9:
                    c1:2c:93:d5:12:6d:34:fc:54:e6:e7:a4:17:03:0c:
                    d5:91:90:e6:5e:90:59:a5:d1:35:15:3e:97:fc:83:
                    5e:70:38:22:2d:ff:24:4f:5a:e6:5f:67:55:58:95:
                    46:3b:7b:4d:11:0d:5a:df:b4:d5:ef:76:8d:b0:76:
                    2a:c3:21:6b:4b:b2:9a:ab:54:08:1c:ce:35:93:06:
                    ec:55:08:89:4f:0a:b4:d5:3f:2a:a3:77:19:5b:e7:
                    70:2c:f7:75:6d:a9:60:5b:f2:a6:29:17:67:86:4c:
                    26:32:de:3f:db:af:e9:ee:17:ec:90:fc:9b:46:f8:
                    1f:d2:09:51:7f:25:87:56:33:2d:70:06:dc:9f:85:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:02:3D:8D:4A:81:8E:2F:89:28:18:B3:A8:D7:C4:11:75:27:C2
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:59:6b:80:53:60:9e:c7:bc:62:4e:02:77:c3:20:76:46:25:
         71:b6:9a:2a:33:61:ee:ad:2c:ec:05:5f:18:0a:b6:0a:31:bf:
         f0:e1:e0:15:d7:23:18:e1:1b:0b:0c:b4:3a:1d:79:c8:9d:ad:
         1e:d0:3b:c3:a3:6d:2f:31:1a:5a:9b:f8:2f:8b:09:d5:78:c1:
         c8:e8:ef:9a:0b:e7:20:77:46:b3:b9:27:9e:12:18:be:b4:2c:
         83:78:ad:71:8c:ea:10:c6:52:97:31:7a:0d:ae:7e:a6:47:bb:
         1b:ed:75:d2:04:5a:73:f1:c4:20:0a:52:d7:8e:53:23:b8:1b:
         5c:1e:96:66:b2:96:ca:72:26:c3:28:d5:5b:3e:72:ed:63:b5:
         bf:6c:f4:80:26:bb:73:a8:e3:a5:ec:87:90:f9:63:22:b0:ac:
         57:72:dd:a8:16:f2:21:21:ae:33:50:d3:27:c3:c0:96:1e:d9:
         88:43:86:54:b3:59:25:32:d4:ce:11:74:e3:89:e3:b0:c2:28:
         61:73:1b:77:59:f2:b0:8f:95:7c:06:79:19:c1:fc:82:f2:5d:
         0a:e5:d2:ed:64:64:31:07:38:fe:24:1e:53:a7:9f:55:53:8f:
         d9:65:46:ad:e7:a7:7a:f3:f7:f1:e4:f3:c3:db:a7:f9:5d:71:
         dc:40:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 13:38:31 2026 by rpki-client