This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
File:                     3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft (raw, json)
Hash identifier:          MLxQxZkIDLi9UT1SVlVOI7uy1BKVkrmgONwaCAGz7jw=
Subject key identifier:   E4:2A:EF:72:93:27:56:C4:1A:66:46:B5:37:E7:29:1B:3B:CC:C5:DF
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Certificate issuer:       /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
Manifest number:          04
Signing time:             Tue 20 Jan 2026 12:54:26 +0000
Manifest this update:     Tue 20 Jan 2026 12:54:26 +0000
Manifest next update:     Tue 27 Jan 2026 12:54:26 +0000
Files and hashes:         1: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl (hash: +5r2Pi1NaddqZ1A94Ia9nNxpYvPvUrWK0ezkzUMBgPo=)
                          2: E7A0471CF5FE11F091C416DF536F56BC.roa (hash: VZSusW1SvePvDsCFgC57GSQjHr5EAW11L+shBHd32fA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
        Validity
            Not Before: Jan 20 12:54:26 2026 GMT
            Not After : Jan 27 12:54:26 2026 GMT
        Subject: CN=696f7b02-e79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:ad:25:35:ed:4b:68:04:4e:3d:a6:62:d6:
                    92:5c:45:42:56:ae:f5:ae:8b:05:80:59:5f:f2:97:
                    45:0c:d1:fd:18:fa:67:a7:ba:3a:18:8d:fc:4f:57:
                    17:11:db:a3:1b:5e:00:41:61:9a:08:94:0d:56:2c:
                    d2:ce:92:f4:7d:70:87:16:db:1c:eb:c8:d7:e4:38:
                    33:f4:77:1f:16:75:7b:22:83:fd:69:ac:b4:7e:2f:
                    94:4a:58:0e:96:4d:a9:5d:e0:c4:e9:9c:d5:b1:6e:
                    b5:5a:93:a3:3d:e8:bc:cb:3f:96:80:a1:ac:18:1a:
                    6f:1d:ba:91:ae:e7:b2:1b:7f:80:e9:f7:55:99:30:
                    3a:41:10:50:bb:71:cf:24:39:4a:ce:40:ef:b5:c0:
                    3c:d9:c4:8e:7b:fe:0d:ea:86:94:3a:9f:a7:6d:73:
                    8a:89:77:ab:61:da:77:2e:03:83:c1:f6:98:e5:b0:
                    72:2b:14:39:f8:8e:6d:1b:8a:54:58:81:bb:f8:94:
                    21:bd:53:fc:34:47:e7:5f:97:38:9a:c4:f8:32:49:
                    22:ba:30:7f:0e:54:f4:86:22:a7:21:bc:9f:d8:13:
                    ec:a1:36:dc:17:0f:d9:60:fb:dd:90:1a:e8:8a:14:
                    b9:88:1b:2f:12:64:0e:89:d4:5f:f9:98:30:3d:5b:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:EF:72:93:27:56:C4:1A:66:46:B5:37:E7:29:1B:3B:CC:C5:DF
            X509v3 Authority Key Identifier:
                keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:36:ec:57:de:35:59:68:07:18:ea:ab:84:0e:74:e5:1b:
         a1:b0:c7:87:1a:90:14:39:f0:42:9d:c8:2b:bc:53:f9:92:0c:
         2b:6a:2c:19:22:03:c5:a7:b4:e8:41:a7:31:15:ec:d0:d9:5c:
         9e:b5:f0:5b:2d:b6:5a:2e:40:8f:93:96:08:69:30:65:66:4c:
         4f:df:0e:23:b2:a9:a6:c0:36:ed:bd:9e:c1:86:45:7f:31:40:
         51:1e:32:08:76:3c:62:09:a8:c1:aa:44:26:04:0a:7d:52:a5:
         b5:7c:74:16:24:17:c0:9f:a9:19:59:65:25:18:5d:24:32:c0:
         d6:e7:5f:b7:07:94:7c:c4:91:5e:df:d1:c0:c1:f5:8e:29:ed:
         c8:cc:88:38:9f:cd:d0:9c:b1:c6:38:b4:9d:10:18:4e:81:e0:
         01:9a:3e:6b:95:fd:34:f2:18:b8:b2:13:32:d5:72:0e:c3:02:
         58:07:c7:1b:69:f0:6b:d9:5d:65:2c:16:ff:56:44:79:e9:3b:
         4a:d7:f6:34:10:94:d5:f3:af:b2:37:35:04:f7:8c:1a:0c:8c:
         21:1a:66:da:56:1a:f5:f0:8b:27:63:1b:3d:4d:a3:67:62:be:
         c0:a6:2e:a6:e9:9e:35:f6:74:32:15:5b:c3:04:62:5e:da:49:
         ea:18:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:47:48 2026 by rpki-client