This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
File:                     af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json)
Hash identifier:          FxTJKK/9hT/DZigQQqRt2CUKQXEvKaiQqQua1T8bZ68=
Subject key identifier:   8A:B1:A6:32:30:A4:FE:DE:AF:23:F6:02:85:DB:C7:5F:35:08:28:45
Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B
Certificate issuer:       /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
Manifest number:          90
Signing time:             Sun 25 Jan 2026 05:38:55 +0000
Manifest this update:     Sun 25 Jan 2026 05:38:54 +0000
Manifest next update:     Sun 01 Feb 2026 05:38:54 +0000
Files and hashes:         1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: 1LAVOtuMMkNry90LPrUaVT6UdT4qFOXcs/2qH35L9cQ=)
                          2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl
                          rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B
        Validity
            Not Before: Jan 25 05:38:54 2026 GMT
            Not After : Feb  1 05:38:54 2026 GMT
        Subject: CN=6975ac6f-f439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:77:d3:6a:2f:d9:ea:bb:5b:29:18:cb:be:6d:
                    f2:b4:69:10:7d:27:86:58:fa:b7:7e:d4:3e:73:19:
                    0d:c4:bb:86:b9:31:b9:ee:76:2a:3e:26:ac:82:d7:
                    7c:fb:10:7b:b3:9d:45:f2:15:11:13:60:86:c9:21:
                    11:00:d0:49:70:de:e8:81:76:0a:7e:76:e2:f1:82:
                    0e:c7:ee:67:ee:82:5b:a1:b9:2f:bd:21:33:4c:49:
                    01:76:9e:76:98:3d:72:10:58:97:17:15:50:55:f6:
                    1b:5f:a3:dc:a3:64:e8:68:e6:f3:6d:7c:34:ce:6b:
                    7a:9f:ab:ad:14:02:1b:9a:7b:7d:68:a5:bf:c8:bd:
                    06:db:4f:93:94:41:a0:06:87:de:e3:6a:55:d4:a9:
                    bf:3d:a7:12:01:da:87:ed:43:3d:04:48:99:4d:13:
                    be:de:f7:14:12:f7:da:d1:78:be:09:dc:b4:fa:25:
                    fa:a8:f2:94:41:19:e4:f9:13:24:3a:87:ea:c3:34:
                    9c:ff:fc:cd:b9:32:e8:a6:c0:e1:d5:9e:65:11:34:
                    eb:60:33:bb:c9:fa:76:6e:7f:e7:95:fe:8c:cd:75:
                    9e:97:76:33:b8:41:83:f8:1a:e9:ef:d0:88:0e:dc:
                    93:7b:a5:8b:45:57:61:56:26:da:9a:e1:3e:36:0b:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B1:A6:32:30:A4:FE:DE:AF:23:F6:02:85:DB:C7:5F:35:08:28:45
            X509v3 Authority Key Identifier:
                keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9b:40:d6:e2:63:35:5c:2e:f7:42:dd:16:01:82:74:07:12:
         31:71:38:ec:17:54:cc:8b:58:4f:bf:2b:94:6f:be:9e:86:4f:
         74:17:8c:ca:92:b4:13:80:fb:6f:c2:c1:4a:3c:ea:92:50:23:
         36:1b:aa:3d:e8:de:bb:a6:a9:e9:be:14:b2:70:06:f2:08:53:
         65:70:70:83:0d:b7:ca:2e:bf:05:76:15:b6:2b:2d:8a:2e:46:
         de:cf:9d:c5:e7:e4:36:6d:0d:c2:36:5b:2a:67:de:23:da:72:
         14:9f:d8:17:8d:3d:25:12:e5:0b:e8:14:3d:d5:53:52:d3:7f:
         3a:1d:a0:9e:06:99:31:76:db:5a:5b:a4:af:c2:4a:88:3f:f8:
         95:0a:d9:d2:dd:7a:8d:e2:40:c5:62:15:c3:21:79:03:13:30:
         c1:25:81:64:0b:fa:94:be:a4:9f:a7:9d:a7:b8:4f:ac:42:61:
         f3:a4:a3:41:ed:43:ff:dd:d9:fc:58:e5:12:af:13:46:34:21:
         55:1c:05:53:38:a7:21:91:fc:92:77:e4:aa:81:8b:19:3e:b5:
         a0:92:83:86:41:b5:26:26:77:25:7b:cd:fb:93:cf:cf:16:dd:
         fa:a5:4d:fa:80:e5:96:ac:c5:7d:9a:59:2d:8c:5d:99:f9:c0:
         87:8a:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:02:25 2026 by rpki-client