This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
File:                     JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft (raw, json)
Hash identifier:          ymsA0NXPtaUUWpP9DtIR5qPNgsAKLai4z2O4gy/OkKg=
Subject key identifier:   07:FA:A8:0C:B4:E4:A0:C8:13:91:F4:05:0A:29:E0:59:4F:A2:BB:56
Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
Certificate issuer:       /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
Manifest number:          0A
Signing time:             Fri 09 Jan 2026 07:18:19 +0000
Manifest this update:     Fri 09 Jan 2026 07:18:18 +0000
Manifest next update:     Fri 16 Jan 2026 07:18:18 +0000
Files and hashes:         1: JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl (hash: /0KOkEbAkAtcN2ywk8PqYiTuig8dTupwrTHQRkdaHxw=)
                          2: B8C57E86E40511F09F69296D616F56BC.roa (hash: cObjfouAz2/TsES3hmR6MNhl426gs6di7MnI+fpvu6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl
                          rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
        Validity
            Not Before: Jan  9 07:18:18 2026 GMT
            Not After : Jan 16 07:18:18 2026 GMT
        Subject: CN=6960abbb-40fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:12:40:9e:0f:84:98:b5:b5:e0:1e:46:b5:
                    92:ff:16:72:90:00:4f:e7:7b:45:72:b4:c0:74:43:
                    b8:1a:b7:1e:04:7f:f0:3d:87:10:87:74:67:63:2b:
                    d1:9f:75:fa:66:70:d5:aa:c6:00:c2:74:72:e1:e4:
                    84:75:2b:91:31:0f:fc:f8:3e:12:d7:ff:78:07:b0:
                    a1:73:cc:9b:0d:db:3a:63:e0:d9:fa:db:c3:98:d8:
                    c6:21:64:7e:d0:a0:2a:13:d6:88:d7:68:50:a8:ab:
                    22:74:90:e7:76:cc:e8:41:e9:48:69:b2:ea:4b:b7:
                    e9:0f:43:10:94:13:ae:d9:95:d7:09:39:e1:8c:bf:
                    03:6b:7b:9b:28:5d:aa:cb:cf:db:5c:31:b0:98:a6:
                    76:29:57:b3:84:5a:5e:0e:e7:0a:c1:98:75:1f:26:
                    bb:4e:7f:e3:7b:c2:16:ba:44:cb:ca:f8:20:2e:b7:
                    66:cd:a7:c5:22:34:88:20:d7:72:9f:41:a9:d0:91:
                    f1:49:2e:14:60:9f:8c:7b:62:c2:dd:e0:80:1e:45:
                    95:d3:af:34:47:e0:80:81:c0:05:78:4f:30:b7:47:
                    ac:73:39:6f:76:73:4a:1e:cf:d9:e1:28:fe:4c:66:
                    f2:d2:91:6c:17:c2:9a:dc:bc:c7:4e:b3:ad:ca:68:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:A8:0C:B4:E4:A0:C8:13:91:F4:05:0A:29:E0:59:4F:A2:BB:56
            X509v3 Authority Key Identifier:
                keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:75:b4:bb:ff:b7:70:35:7b:0c:9a:bc:35:38:44:24:f8:b9:
         2e:0e:02:49:fc:2a:81:a0:e4:fd:f1:19:65:ee:52:a8:54:9a:
         7f:0f:63:48:08:df:7d:a8:a6:79:77:43:7b:c2:3e:89:f0:d9:
         2e:4f:b7:ad:4c:10:06:5e:a6:35:1a:82:09:ba:ce:c7:86:08:
         0d:83:e8:af:d4:de:28:31:d6:00:2e:c7:52:3c:92:e3:f1:9d:
         64:71:43:9e:c9:93:19:aa:6a:e3:a4:0e:4a:4a:30:ef:51:1a:
         b0:6b:61:98:af:9b:94:13:91:c3:ca:71:20:35:a4:72:f8:9a:
         db:52:32:5e:06:ea:11:11:b1:6f:61:16:f2:2d:75:d6:ea:ad:
         a8:dc:b0:d9:7b:9c:e0:fe:83:8d:db:52:81:4e:bc:83:ea:94:
         dc:b9:9f:18:80:f9:70:dc:a2:38:83:ab:ef:3c:3d:b7:14:3a:
         fe:21:0e:92:20:9c:74:36:7d:08:28:41:d3:6b:d6:71:6e:8b:
         3d:bd:1e:23:f6:d8:a5:f5:fd:b0:74:b5:f4:bc:4f:41:a3:a5:
         16:65:68:12:d5:0c:e8:38:41:79:f7:e2:22:48:85:c8:63:e8:
         71:d0:36:e4:17:1e:6b:31:f2:d2:f7:2c:41:d3:e0:74:03:df:
         de:c7:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:24:38 2026 by rpki-client