This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
File:                     F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json)
Hash identifier:          y6KvUuB6dSCNvr+MtHQmsye1BsJAQYAoEoVG4113Vbo=
Subject key identifier:   17:31:87:A1:8C:98:C7:A4:19:A5:E9:DD:70:B9:7B:30:68:62:37:ED
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
Manifest number:          4F
Signing time:             Fri 16 Jan 2026 16:12:16 +0000
Manifest this update:     Fri 16 Jan 2026 16:12:16 +0000
Manifest next update:     Fri 23 Jan 2026 16:12:16 +0000
Files and hashes:         1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: aB0eVYznf8xmLKv+zA3fzRP95VTvXVVBKigEtEMF+7o=)
                          2: 6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (hash: rHMVmuHlGcAJ9rF7Bi/K5y8f08f2S8PIfG+MCG+CXao=)
                          3: 404053A882BE11F0ADD6D367C4F9AE02.roa (hash: nsvKh5OpF7zkyCTrJCJ8QZA4sK2TVgvtoo9ZmQ1ZusA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 16:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: Jan 16 16:12:16 2026 GMT
            Not After : Jan 23 16:12:16 2026 GMT
        Subject: CN=696a6360-1831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:7c:d8:e4:01:67:68:d5:96:bc:4c:92:3e:
                    09:29:36:a4:7f:2f:8d:8a:1e:75:d8:44:4c:b3:7a:
                    a7:4f:4b:1f:ed:46:7e:3d:23:6b:b3:1e:26:06:fa:
                    a3:cb:8f:aa:88:ca:bc:58:c5:a5:91:13:5e:8f:97:
                    28:09:2d:3e:27:cf:2d:03:3f:6c:5f:2d:c0:84:b3:
                    8b:83:84:6c:a3:be:49:4b:29:25:ca:5c:e8:2f:29:
                    83:d9:36:35:f9:89:cc:0c:49:f3:8d:97:ce:9b:36:
                    14:1e:4f:dc:a2:fc:8b:e8:af:8b:73:4b:d9:8e:fb:
                    87:ee:a0:5f:cc:74:21:75:4e:e7:46:01:c0:8f:95:
                    cd:ba:bd:a1:24:36:3e:4a:2e:f3:05:41:51:f0:32:
                    37:fc:eb:a7:f1:c0:93:58:be:ef:39:b2:32:60:cf:
                    62:55:ad:0f:b2:80:1b:34:c1:11:b9:f9:99:0f:6d:
                    4e:32:80:1c:22:73:04:9e:fc:fe:df:ba:1a:1c:d4:
                    e5:bc:55:7e:a3:d1:ae:60:73:54:05:a8:36:bd:6d:
                    5f:af:b0:25:50:51:c5:20:2e:30:06:4e:8a:27:18:
                    32:c6:72:5b:c5:bb:1c:98:25:07:b1:19:04:a2:71:
                    c7:7f:e8:a5:0e:66:79:17:5d:84:11:84:89:84:ba:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:31:87:A1:8C:98:C7:A4:19:A5:E9:DD:70:B9:7B:30:68:62:37:ED
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:c2:7c:a9:36:ee:b7:83:d1:8a:5c:7f:c2:de:ec:50:8a:
         21:99:d1:9b:a6:b9:f7:86:11:8d:3b:96:6e:3a:e1:1d:2a:8c:
         40:e2:7a:99:54:c2:c3:7b:d7:b6:60:9e:f0:05:15:37:26:ba:
         55:21:7d:57:40:37:1b:ff:c1:b5:0d:a2:ba:53:bd:fc:97:c5:
         d7:48:14:ed:29:56:67:b0:74:24:29:30:57:1c:c3:17:17:09:
         22:12:b8:9d:55:ef:0b:97:32:2e:36:03:a7:2c:c9:65:be:a4:
         af:d1:50:93:58:75:36:9d:d5:ed:be:fd:84:61:4c:ac:04:7b:
         39:50:13:20:c8:84:c1:7d:5a:88:37:f3:cf:9d:c1:b3:44:5d:
         f8:37:e6:3c:bf:ed:be:62:0b:91:4d:92:79:e8:3a:02:2a:64:
         ef:0d:4a:c8:b1:6f:7b:e3:e2:11:c3:29:63:af:ea:f2:cf:93:
         5f:20:ff:fa:a9:32:94:a7:27:a9:8d:34:f3:64:71:c3:f5:c2:
         58:85:cf:ba:8d:4d:a6:73:3e:7a:d1:6b:50:62:76:82:57:61:
         4c:a9:39:ac:12:af:07:f1:35:15:0e:b9:2e:ec:28:12:2b:2d:
         ed:cd:15:db:31:0c:9e:1f:d3:96:db:92:88:d5:e6:e2:bf:5a:
         de:d4:3f:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NkFENzExMC8GA1UEBRMoMTdDMjA1MDAzRTJFQjkxRTNEQzQ2RUFBQzg5MEY2RDBC
NTBERTZFMjAeFw0yNjAxMTYxNjEyMTZaFw0yNjAxMjMxNjEyMTZaMBgxFjAUBgNV
BAMMDTY5NmE2MzYwLTE4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSXXzY5AFnaNWWvEySPgkpNqR/L42KHnXYREyzeqdPSx/tRn49I2uzHiYG+qPL
j6qIyrxYxaWRE16PlygJLT4nzy0DP2xfLcCEs4uDhGyjvklLKSXKXOgvKYPZNjX5
icwMSfONl86bNhQeT9yi/Ivor4tzS9mO+4fuoF/MdCF1TudGAcCPlc26vaEkNj5K
LvMFQVHwMjf866fxwJNYvu85sjJgz2JVrQ+ygBs0wRG5+ZkPbU4ygBwicwSe/P7f
uhoc1OW8VX6j0a5gc1QFqDa9bV+vsCVQUcUgLjAGToonGDLGclvFuxyYJQexGQSi
ccd/6KUOZnkXXYQRhImEur9jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFzGHoYyY
x6QZpendcLl7MGhiN+0wHwYDVR0jBBgwFoAUF8IFAD4uuR49xG6qyJD20LUN5uIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QUQ3Lzk4Q0U4ODEwN0Y3
NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0OXhHNnF5SkQyMExVTjV1
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRjhJRkFENHV1UjQ5eEc2cXlKRDIwTFVONXVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
QUQ3Lzk4Q0U4ODEwN0Y3NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0
OXhHNnF5SkQyMExVTjV1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGE6wnypNu63g9GKXH/C3uxQiiGZ0ZumufeGEY07lm464R0qjEDieplU
wsN717ZgnvAFFTcmulUhfVdANxv/wbUNorpTvfyXxddIFO0pVmewdCQpMFccwxcX
CSISuJ1V7wuXMi42A6csyWW+pK/RUJNYdTad1e2+/YRhTKwEezlQEyDIhMF9Wog3
88+dwbNEXfg35jy/7b5iC5FNknnoOgIqZO8NSsixb3vj4hHDKWOv6vLPk18g//qp
MpSnJ6mNNPNkccP1wliFz7qNTaZzPnrRa1BidoJXYUypOawSrwfxNRUOuS7sKBIr
Le3NFdsxDJ4f05bbkojV5uK/Wt7UP6E=
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:10:29 2026 by rpki-client