This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File:                     ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier:          uLq6RXmoV9ppeKwW1OtOTwVO8XWpr8fHs+dnS1nW/Pk=
Subject key identifier:   BF:D0:14:5F:42:BB:E2:59:19:59:67:A4:79:16:3F:05:A6:3D:D3:6B
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer:       /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial:       0796
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number:          0789
Signing time:             Fri 16 Jan 2026 20:57:09 +0000
Manifest this update:     Fri 16 Jan 2026 20:57:09 +0000
Manifest next update:     Fri 23 Jan 2026 20:57:09 +0000
Files and hashes:         1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: P5cSjzrIOQIg/3nLflQZajpqVYMYUGM1gfH9ryHrv8Y=)
                          2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
                          rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 20:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
        Validity
            Not Before: Jan 16 20:57:09 2026 GMT
            Not After : Jan 23 20:57:09 2026 GMT
        Subject: CN=696aa625-add1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:1c:86:a4:1c:a2:d6:c0:4d:d1:43:fc:8f:
                    83:03:82:5f:22:dc:03:25:58:d0:88:25:bb:27:db:
                    ef:b2:6a:33:9e:de:cb:e1:a3:bc:6b:48:61:e4:4b:
                    08:ef:45:a8:97:fa:5b:15:ae:46:61:b0:de:97:f6:
                    53:9b:3d:00:6b:06:5c:5d:ae:5b:68:d6:2c:c8:8c:
                    fa:f9:28:49:de:ab:b8:6c:da:e5:d1:dd:a4:ce:1f:
                    8d:3d:7b:20:76:57:4a:01:97:4b:85:cb:ec:b8:ba:
                    15:f8:96:cf:ac:0a:47:af:25:25:e0:6c:05:5f:fd:
                    54:1a:61:2b:77:e4:6e:54:89:69:72:3d:e7:4d:93:
                    90:e8:e9:96:32:ee:1f:29:cd:fa:4a:0b:d4:ba:28:
                    2f:f9:23:b2:d8:b5:0d:e0:b5:93:9a:8c:ae:a3:53:
                    00:c4:2b:23:02:0e:75:47:c8:83:18:e7:c9:8b:af:
                    04:59:44:1d:23:c7:8d:2a:6e:55:ac:ff:aa:28:da:
                    de:f2:8a:f0:0b:c6:57:2d:fa:f5:89:c2:f5:84:7e:
                    77:03:4c:aa:18:58:ea:82:1b:3d:16:75:28:0e:40:
                    6f:2f:7e:ec:dc:06:8d:e1:e1:da:9f:09:78:7c:47:
                    0b:44:3a:da:08:d7:2f:e3:10:d4:ab:f7:f6:25:05:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D0:14:5F:42:BB:E2:59:19:59:67:A4:79:16:3F:05:A6:3D:D3:6B
            X509v3 Authority Key Identifier:
                keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9f:6c:dc:48:89:f8:a8:dd:18:85:ee:75:b2:e2:ff:ff:44:
         50:1f:c9:dd:1b:54:e0:9a:b9:77:d5:bb:75:bf:d5:11:bc:86:
         6b:50:4b:93:b8:df:0a:69:c1:73:2c:e9:8e:95:ae:0e:26:ce:
         ec:bd:30:3c:fe:75:8b:fa:7b:30:43:e9:60:f8:b2:96:2f:e1:
         fb:b6:74:1c:ae:87:05:eb:14:c3:50:dc:55:1a:4a:3a:0e:19:
         8b:2e:b5:e2:c9:fe:f1:34:b6:dd:d4:88:c6:5a:0d:66:7c:04:
         e4:a6:29:2d:33:fd:0b:2d:8b:bd:4f:6d:7a:00:75:c2:27:f5:
         72:65:20:7e:ae:b3:6a:2e:8f:07:65:0c:57:a2:c8:b8:ce:86:
         ec:9f:bb:d6:6e:53:e2:dc:34:43:e7:50:e4:c9:3b:4c:99:4e:
         9e:ad:e7:74:aa:c6:b9:01:11:11:37:9f:ef:92:6b:2b:9f:ea:
         ed:d0:99:30:98:ea:8a:12:62:87:65:f0:65:c7:13:9b:a2:1c:
         98:dc:d1:e3:97:ad:0e:9f:9c:58:cf:a7:33:99:37:b8:1e:c7:
         bd:55:5b:87:0d:f9:bb:63:a3:e6:a6:62:4a:f9:1a:0b:81:ee:
         5d:98:56:01:6e:6a:da:30:ba:b4:6c:44:90:c4:d6:78:45:9f:
         e9:a8:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:26 2026 by rpki-client