This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File:                     9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier:          uFWVBmCt50ZgSVUfA3aV0L+giKyqVtuSnARof6pnk7k=
Subject key identifier:   84:CE:14:3B:B1:A8:52:DD:12:62:50:74:48:C3:84:0D:3F:BD:7E:B8
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer:       /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number:          011A
Signing time:             Tue 03 Feb 2026 04:33:55 +0000
Manifest this update:     Tue 03 Feb 2026 04:33:55 +0000
Manifest next update:     Tue 10 Feb 2026 04:33:55 +0000
Files and hashes:         1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: UxkJ8SDkcaxSXzYIjGLge/k8KpgY8UqtvnWki7/wY28=)
                          2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: Zes3MyKxaKdmoa0HmjM9ZOOYn6wyTLdeG3HU+rCiAJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
                          rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 04:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
        Validity
            Not Before: Feb  3 04:33:55 2026 GMT
            Not After : Feb 10 04:33:55 2026 GMT
        Subject: CN=69817ab3-8b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:02:76:ed:3d:dc:7e:98:24:2b:9c:8b:ce:
                    74:44:61:67:30:09:85:06:f4:82:e1:5c:61:8f:62:
                    0d:53:56:2f:1f:6b:b8:2e:25:92:1b:62:51:9a:a2:
                    38:07:47:1b:ff:2c:dd:87:48:7c:a5:aa:f4:56:85:
                    f6:38:92:2e:ac:5d:dd:a8:6d:d9:b5:56:77:b5:ea:
                    06:09:c1:d2:02:5f:c3:e8:32:1e:01:d6:30:f7:63:
                    4f:15:53:8d:c2:b2:a8:d5:94:3c:54:56:05:5f:01:
                    86:0f:e2:a6:28:75:d5:9a:39:a1:d2:f7:a7:ed:c0:
                    81:6f:d3:97:18:0a:a0:cf:21:c5:0d:72:03:e6:a1:
                    39:3c:7b:4a:9d:ce:54:36:e0:b5:fe:4f:4d:34:de:
                    8b:f3:96:5d:f6:ba:ad:d0:8e:8b:c0:bb:5a:d8:f7:
                    2e:bc:fa:ca:6c:54:39:14:e9:f0:ae:5b:45:84:92:
                    76:d6:c3:e9:c7:5e:a5:63:88:f5:a7:67:17:1e:55:
                    ad:a8:54:75:59:23:b8:28:4e:1a:a1:e3:bd:3b:8f:
                    39:59:10:f2:a5:ab:64:65:92:9f:4e:ce:a5:97:39:
                    a5:cb:b2:91:7e:23:c2:f8:7c:5e:29:6c:e6:31:6b:
                    27:14:79:51:9e:10:c6:40:fd:2d:12:85:69:08:91:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:14:3B:B1:A8:52:DD:12:62:50:74:48:C3:84:0D:3F:BD:7E:B8
            X509v3 Authority Key Identifier:
                keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:ed:74:1b:79:bf:87:b3:06:b6:e2:1d:26:a6:5b:23:13:
         98:24:e3:a8:84:23:2b:93:a0:fb:5a:9d:02:74:2b:06:9d:f0:
         b4:91:95:36:60:6a:0e:e2:ee:12:9b:29:f1:c6:b2:33:46:d6:
         c3:1d:6f:87:96:be:92:17:51:43:b2:35:c3:62:af:eb:6c:5c:
         44:bb:d1:5e:ad:ef:a1:0f:6a:48:dd:a9:82:df:d0:aa:3a:d7:
         a6:2a:fa:1e:12:ba:9a:fa:fe:10:49:be:93:37:a2:68:72:f4:
         f1:dd:c4:b5:49:b2:2d:f9:00:e0:a6:62:a3:93:8e:7f:16:fc:
         e4:c0:d7:24:55:42:b5:5b:3a:28:20:74:8e:41:56:e7:19:50:
         34:82:ed:76:8b:1d:db:08:52:4f:82:c7:2c:b7:cd:84:24:93:
         ef:ba:1a:d4:74:53:e5:39:cc:ab:8b:49:39:16:39:e2:73:f1:
         69:d4:ba:13:10:80:27:bc:47:6f:29:8f:fc:7f:af:98:c2:6d:
         5d:37:5a:99:ef:c7:89:07:c0:18:29:36:72:51:b2:8f:ab:24:
         4d:03:44:67:b0:73:47:e5:47:7b:ee:23:71:eb:60:b9:07:1c:
         0e:cb:e8:75:7e:6a:60:7f:b3:d8:35:05:fc:0b:6e:ab:25:c5:
         bc:46:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:56 2026 by rpki-client