This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
File:                     T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json)
Hash identifier:          NSy3gKYl5l9Gx0ApQb8BpeYAdGNcnzSugBQfrL4JkLE=
Subject key identifier:   86:3C:84:C1:98:08:E2:E0:88:77:A5:B3:19:0D:EA:74:0A:7D:20:2D
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Certificate issuer:       /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
Manifest number:          CA
Signing time:             Sat 17 Jan 2026 04:57:37 +0000
Manifest this update:     Sat 17 Jan 2026 04:57:36 +0000
Manifest next update:     Sat 24 Jan 2026 04:57:36 +0000
Files and hashes:         1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: yFvsO81Q5RCRWs4FaDR6oyXtudTLvMggexFQ9lK03bI=)
                          2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
                          rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
        Validity
            Not Before: Jan 17 04:57:36 2026 GMT
            Not After : Jan 24 04:57:36 2026 GMT
        Subject: CN=696b16c0-3928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:74:3a:7a:8e:b9:ec:78:e8:5a:0f:0f:fc:
                    97:a0:1f:34:be:4f:ea:5c:89:5b:c4:a6:9c:30:1c:
                    c5:e6:80:62:7c:75:4c:1b:a4:b8:ff:4e:d9:91:a1:
                    e4:47:1f:99:3f:3b:f9:dd:99:09:5c:38:93:f7:4e:
                    6c:af:d0:ac:59:a2:bf:6e:83:67:27:b3:5a:a5:f4:
                    d6:36:9e:73:0b:2e:48:c1:54:50:96:03:fa:7d:f0:
                    37:e8:1c:1f:ca:ad:0c:5d:22:50:82:1c:fb:95:7a:
                    73:9f:64:a7:43:46:de:c9:14:9e:5f:22:13:bf:f5:
                    9a:98:fa:8f:c0:3c:59:b0:ff:aa:d0:bf:65:f0:20:
                    b0:b4:47:8f:f3:0d:ac:6c:72:5f:45:79:17:c4:e6:
                    28:c1:5b:2f:06:a1:b4:17:73:2b:22:27:3e:54:98:
                    4d:37:ef:86:d8:3f:f2:f2:e9:05:f9:12:c8:fb:ad:
                    3e:89:6a:3e:2f:63:e8:c8:cd:5f:89:86:8d:ec:9f:
                    2f:1d:f8:5d:95:c6:58:e6:16:92:08:05:27:93:db:
                    76:c2:6e:3c:a8:3c:5b:26:e2:3e:fd:48:6f:cd:54:
                    57:3e:06:46:78:29:d0:05:88:bd:62:bd:60:1d:b0:
                    e4:58:63:ba:0f:cf:c0:85:78:6a:c9:e5:3f:6c:a3:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:84:C1:98:08:E2:E0:88:77:A5:B3:19:0D:EA:74:0A:7D:20:2D
            X509v3 Authority Key Identifier:
                keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:75:a2:c7:da:b1:e5:44:a9:6e:f2:5a:ff:be:f6:ec:b5:
         1f:62:7c:23:e0:67:2d:07:ec:a8:95:8f:f2:be:af:0e:6c:09:
         7d:4a:24:9e:65:41:da:4f:d0:2f:bc:b2:bc:31:b1:ac:dd:52:
         3a:d7:0f:48:6c:a6:15:d4:13:bc:cf:0d:fb:b5:05:43:39:9b:
         b3:e1:d6:6e:03:0a:64:61:7f:d3:2f:bb:43:74:bd:95:08:9b:
         ed:76:06:58:ce:c6:c0:5e:1b:f6:af:de:f8:00:3d:5e:7b:ff:
         2f:d8:79:c2:78:27:c7:27:ed:01:37:2e:06:d3:d4:6b:19:39:
         31:1d:20:84:72:15:48:e4:08:24:49:ce:12:b8:94:e6:fa:de:
         49:77:ca:8c:4f:ed:0d:b7:15:5c:ba:a6:a5:86:a5:e2:61:56:
         b7:a0:9c:0a:c7:93:b5:c3:ce:b6:23:0a:b9:f5:a9:7a:4e:0f:
         53:d0:6b:5e:75:6f:36:08:c9:7e:95:9b:5a:98:0c:8a:f5:ed:
         45:4c:95:a8:23:c5:41:f3:4b:d5:05:28:09:f3:fd:e3:0a:e4:
         44:13:fe:7e:e5:c6:b4:a0:8c:d5:13:d4:65:8a:34:8c:cb:58:
         b1:d1:d1:b7:f9:79:5a:b9:49:b1:9d:a4:6c:ad:ad:06:71:16:
         dc:24:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 22:10:00 2026 by rpki-client