This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File:                     9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier:          rwyDzo01cpTWhbl5eJ9tajAeLVV8XDAVxt0GgEf3nnU=
Subject key identifier:   5E:04:3C:B6:0A:0E:5B:92:EF:02:6A:EB:9F:C2:DA:BA:06:01:EA:F9
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer:       /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number:          036F
Signing time:             Tue 20 Jan 2026 23:43:40 +0000
Manifest this update:     Tue 20 Jan 2026 23:43:40 +0000
Manifest next update:     Tue 27 Jan 2026 23:43:40 +0000
Files and hashes:         1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: LxtZDNGXfKFx6yRzQfmsm6futxGTCycpmo1TNG5kP/4=)
                          2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: X05nJ1j9oFxXKovC7MyWIX4IdW9s4NwJbF0XevapeM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
        Validity
            Not Before: Jan 20 23:43:40 2026 GMT
            Not After : Jan 27 23:43:40 2026 GMT
        Subject: CN=6970132c-e397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:b7:1b:6a:7c:da:f7:97:3d:ac:7d:42:92:
                    35:a1:7b:fa:c5:74:c9:2b:ca:d8:c1:22:74:d0:e0:
                    1a:85:03:d3:a8:9c:21:81:56:a5:d3:fe:2c:c9:be:
                    e2:21:4a:bc:60:2b:8b:24:88:47:13:ce:25:64:91:
                    ea:4b:2f:87:ab:a4:bf:7d:5a:a9:a8:aa:e3:4c:dc:
                    64:ce:cc:48:a0:df:f9:b2:70:33:42:f3:34:9a:ea:
                    b3:13:de:c6:6e:4b:8e:21:89:b8:7a:57:22:73:8d:
                    0c:be:24:aa:10:a6:ba:5e:27:e5:df:23:b3:24:ac:
                    e9:74:4e:6f:43:72:4e:81:a6:f2:60:80:49:1a:2e:
                    a9:e3:cd:3f:6e:e8:b0:2b:a6:27:78:34:04:fc:8c:
                    39:6b:79:94:43:bd:b6:64:08:36:d5:4d:fd:ca:a6:
                    20:14:d4:2d:5e:ec:fd:1f:28:f3:0e:a2:2b:ba:6b:
                    1b:cb:cc:0a:ef:01:98:1e:9e:14:bc:11:08:f6:0e:
                    b9:06:07:73:6c:45:7e:03:a7:1e:c9:c6:fa:32:6b:
                    47:ef:60:9b:b8:d0:8d:a7:bd:75:e2:26:b7:3f:7f:
                    e2:c6:4f:75:21:69:8b:82:05:14:ca:5d:93:23:26:
                    9a:c1:7a:74:5a:46:27:86:9e:42:dc:ff:0b:23:63:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:04:3C:B6:0A:0E:5B:92:EF:02:6A:EB:9F:C2:DA:BA:06:01:EA:F9
            X509v3 Authority Key Identifier:
                keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:98:7e:83:92:5e:6c:94:6e:f4:26:18:f5:71:a1:81:cd:
         49:69:f2:3e:c8:83:25:b7:eb:08:14:a2:d5:07:0b:18:2a:17:
         4a:cc:4a:85:2d:e0:0f:3d:b1:b5:f3:6b:8a:d4:c3:72:ac:7d:
         a0:20:66:57:a9:bb:ac:d5:69:2b:6a:4d:43:14:ba:b9:6e:9b:
         b8:e4:c2:4b:92:81:94:67:d8:f7:eb:d9:74:71:fb:e9:68:8a:
         94:6b:19:3b:2a:bd:a4:f7:a4:8b:8e:07:fb:b3:5d:30:05:cc:
         6d:e7:5f:fb:60:1b:a7:56:56:77:21:6c:e0:83:51:ad:9c:19:
         01:fa:4b:5b:2f:01:b2:1b:31:da:60:1d:21:0e:47:9d:94:78:
         29:3b:57:0a:ba:78:74:c6:52:a7:a5:d7:b3:12:f7:3d:d4:d3:
         9b:33:97:f9:c8:3d:0f:ae:95:bb:5e:39:70:c3:4b:c0:79:af:
         55:69:0f:6a:48:c2:d9:39:7a:a7:60:76:42:fd:bc:33:15:0b:
         de:de:30:6a:cf:f9:d6:33:4d:6f:51:10:30:b2:e2:8c:bb:68:
         35:91:60:cd:85:ee:e9:c2:6f:83:3d:46:2a:88:5a:e0:3e:79:
         37:b5:32:5d:27:ab:ac:ca:0b:18:60:b1:ea:c9:95:82:9c:7e:
         23:ea:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:52:25 2026 by rpki-client