This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
File:                     D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json)
Hash identifier:          LMbr6VYc7vBZ0mGtpyTQ2EYRvev14BwJ1f1b9DRBefE=
Subject key identifier:   BA:81:EB:7E:C5:1C:55:3A:6E:49:3C:5A:11:32:3C:49:A6:79:FC:F7
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Certificate issuer:       /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
Manifest number:          084A
Signing time:             Mon 26 Jan 2026 20:09:48 +0000
Manifest this update:     Mon 26 Jan 2026 20:09:48 +0000
Manifest next update:     Mon 02 Feb 2026 20:09:48 +0000
Files and hashes:         1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: Qqjji9i6pXZbRRo0PmEV8uTNEslMvuosuqNmY4e0ETk=)
                          2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: ypu19bei6HfdziAUkQKrmGrUpzhyQcDpqvAElnhFxJ8=)
                          3: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: IN3RfDkD8NjweSOu/JOBHYJplR97v1OTcMrbU5p1LVw=)
                          4: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: 2VJGwp3cB6SQYB5sCKPYP1OXIy417U6bgx3FYDkVNxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
                          rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 20:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
        Validity
            Not Before: Jan 26 20:09:48 2026 GMT
            Not After : Feb  2 20:09:48 2026 GMT
        Subject: CN=6977ca0c-d216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:fb:f6:94:81:ac:41:78:7f:4b:0b:40:2a:
                    11:02:a5:62:9e:8e:ff:9f:1c:5a:7b:09:ad:fb:f2:
                    cc:20:c6:45:13:0d:db:f1:f9:12:e5:3e:e8:8c:c2:
                    39:83:5e:9e:8c:5d:25:c4:e0:50:47:fc:b2:2f:05:
                    eb:c2:3a:b1:66:32:e8:f4:74:5a:78:80:fd:71:5e:
                    0e:4c:72:65:1a:17:d4:64:ea:6f:ef:83:56:12:b1:
                    e8:b4:2e:f0:46:0c:ed:be:ca:32:1e:3c:d7:21:44:
                    96:1a:9f:65:ac:59:e5:6e:92:af:e8:4a:9c:8a:8d:
                    bd:89:66:31:5d:76:e7:c4:60:e3:c0:c5:da:a1:d9:
                    a6:b7:8f:83:d2:ad:24:81:51:15:b6:78:5f:46:33:
                    9d:7f:4a:c3:18:64:a9:87:b2:60:44:10:d5:0b:b7:
                    79:02:e0:b4:0a:c7:5f:14:00:af:19:7f:de:1d:27:
                    02:f2:6f:b0:e0:a4:c4:cc:db:b9:3f:b0:e1:46:ac:
                    eb:67:3d:a2:8b:17:20:66:b1:10:e1:b4:12:98:93:
                    2a:55:60:24:80:a1:3c:e5:8a:4d:83:13:e5:81:9b:
                    03:ff:4e:ae:75:25:62:95:01:30:60:02:0a:e2:67:
                    d4:69:16:86:83:82:ca:79:26:c4:0e:38:c6:49:06:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:81:EB:7E:C5:1C:55:3A:6E:49:3C:5A:11:32:3C:49:A6:79:FC:F7
            X509v3 Authority Key Identifier:
                keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:40:66:df:fe:ec:9e:1a:2f:2b:a0:da:28:3f:04:37:67:
         5e:1b:e3:1b:89:a9:d5:3d:06:67:4b:44:7f:a8:bf:1b:46:f7:
         fe:7f:ea:15:ed:5e:c9:55:bd:6e:ba:45:49:84:09:f8:5d:28:
         c3:9c:7b:8a:56:53:3a:8e:e7:d5:4b:89:4a:ca:72:72:32:cf:
         1a:aa:23:9b:89:71:55:1e:10:28:b2:02:fa:d1:f2:c8:0d:60:
         8f:65:dc:c4:c4:4f:02:a5:5c:f2:d5:0d:52:ca:1c:80:aa:6d:
         7d:8d:9b:94:32:99:30:0d:dc:e2:77:49:b2:a3:97:29:09:2b:
         42:69:36:22:32:57:03:d9:eb:6c:a9:3b:1d:e4:97:8a:39:50:
         d6:c6:65:9f:04:6b:5d:04:14:83:23:f3:c5:88:93:68:77:73:
         74:ce:54:4e:3e:77:df:7f:d7:37:54:c6:fb:e6:c1:ff:87:13:
         c1:6e:fe:0e:01:cd:80:d2:89:dd:c3:60:91:f0:55:3e:54:8a:
         18:3c:52:7b:16:03:7f:f3:5a:57:23:e1:6a:8a:6a:5c:b5:ea:
         7c:36:3f:71:4c:39:df:c5:73:43:b9:ed:c1:f2:5e:7c:1c:64:
         2c:b6:99:fb:be:69:83:37:1a:19:58:e4:8e:26:99:9f:c0:12:
         81:d4:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 05:34:46 2026 by rpki-client