This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
File:                     19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json)
Hash identifier:          wX3p0gcrBXO0nh7K+FaHzvroYS07zFeUIIgh9nrKSSs=
Subject key identifier:   D4:F6:86:DA:55:0A:E3:26:76:FE:51:1D:E8:BF:7C:C0:1F:59:CF:AE
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Certificate issuer:       /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
Manifest number:          4A
Signing time:             Mon 19 Jan 2026 06:19:33 +0000
Manifest this update:     Mon 19 Jan 2026 06:19:33 +0000
Manifest next update:     Mon 26 Jan 2026 06:19:33 +0000
Files and hashes:         1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: JcWcq7qrDjGI9nDRPYKTcKBMo2geogfjgUwYwqm8pJU=)
                          2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: qwmBjBXdhINRMbu8C02+qQrB2XprMuxYRY2RAr648Jk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
        Validity
            Not Before: Jan 19 06:19:33 2026 GMT
            Not After : Jan 26 06:19:33 2026 GMT
        Subject: CN=696dccf5-5dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:83:60:d8:3a:62:c4:b4:89:97:9b:99:5c:
                    12:7f:e6:49:df:24:4b:6b:53:35:39:45:c8:16:6d:
                    aa:57:4c:65:58:71:dc:4e:1b:af:71:f1:8b:fd:a1:
                    d1:a3:b4:70:3e:aa:66:fd:ba:2f:73:a5:eb:b3:f6:
                    ab:43:d3:14:e9:87:e2:f7:ae:58:17:72:6b:75:b3:
                    33:c1:0d:ec:33:e6:dd:e6:3c:93:e2:15:85:c7:85:
                    cf:e3:38:b3:9c:79:4e:84:ef:99:fa:06:72:10:ce:
                    8a:24:63:79:ca:8c:95:17:11:10:1f:43:b7:7d:61:
                    d3:25:d0:b0:0f:2a:6c:18:0d:09:e8:fb:1e:85:e9:
                    14:f9:06:3c:a3:d2:14:4d:f6:06:b7:4e:a7:6b:1e:
                    8c:15:d2:3e:18:8f:ba:6c:f4:89:4c:c0:20:2c:ca:
                    2a:e0:ea:35:67:81:a4:a6:2d:8d:b3:84:a4:0e:cf:
                    fd:3f:5d:9a:2b:38:85:b9:dc:3f:d9:e7:e9:8f:ad:
                    d5:4e:7f:ec:c7:2a:5f:ff:7f:6f:b4:0a:09:d8:77:
                    e0:be:fa:50:64:c6:27:e7:4d:d3:65:27:21:e6:cf:
                    b5:e2:66:35:7f:7b:7c:b9:99:b1:29:6e:50:f5:ff:
                    a9:4d:d6:25:2c:91:43:4b:3f:95:a2:35:47:6b:fd:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:86:DA:55:0A:E3:26:76:FE:51:1D:E8:BF:7C:C0:1F:59:CF:AE
            X509v3 Authority Key Identifier:
                keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:f2:48:9b:d2:0f:ba:d1:30:ab:19:71:0c:64:10:93:d0:
         d3:8e:b7:15:46:8f:81:9b:9b:d0:4e:1a:1d:d1:30:a6:b2:48:
         7a:06:08:ae:5b:d9:47:1a:09:76:66:c9:bf:08:b8:00:fe:89:
         ed:6f:a4:2d:12:bc:d6:b5:a7:3f:5d:43:bf:7b:33:5d:4c:c2:
         cd:b5:c5:c9:46:a8:d3:ba:83:48:0e:60:98:62:00:aa:63:d7:
         ff:cf:47:73:f0:b4:2a:93:dd:c6:42:cc:dd:6c:02:81:a5:c3:
         24:3f:2c:bf:f2:ca:ab:5c:0f:4a:d1:0c:97:6f:02:4a:21:a2:
         1b:a2:f5:bc:af:16:bd:fb:6e:13:df:53:9b:99:67:97:94:7d:
         fc:c6:99:83:37:00:10:0c:24:68:da:63:2c:c7:e4:fa:e7:1d:
         fc:cd:98:82:ef:2a:4e:49:3e:6f:a5:a1:cf:82:c8:4e:f1:e9:
         45:cc:de:85:57:a4:69:0f:4e:41:60:64:3e:8c:52:e9:54:ad:
         d7:fe:89:b0:29:6c:d1:7a:b0:18:5c:2f:b4:35:0a:32:f4:94:
         dd:fe:88:ec:32:41:ad:ca:a2:01:c5:2b:00:be:a5:02:3e:74:
         12:af:c2:4b:43:65:fd:f8:ae:45:42:93:e7:cd:42:08:a7:8d:
         9d:7d:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:34 2026 by rpki-client