This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          0hNIHzM6rnKimNS05WzhwA0c8mFgq19czL7L342iy9o=
Subject key identifier:   0C:12:98:A4:F8:94:A1:F0:F3:56:15:41:B5:E4:35:AF:F8:9A:89:35
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          0651
Signing time:             Wed 21 Jan 2026 09:22:59 +0000
Manifest this update:     Wed 21 Jan 2026 09:22:59 +0000
Manifest next update:     Wed 28 Jan 2026 09:22:59 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: V8UNQ/rAwozlVOmD1hrL4FW9cCyz3wXYmDmGMMdmZ+A=)
                          2: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=)
                          3: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: jBj8tUje/J9yoZyIY1hd6S/+kLstKeE/As7y2q686ZY=)
                          4: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=)
                          5: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=)
                          6: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=)
                          7: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=)
                          8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=)
                          9: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=)
                          10: 794C3D9C5BCC11F0A828900BC4F9AE02.roa (hash: +hhc1vU/hwtyqqXhRydHqQzyCbASENDU33IqDuhp3QQ=)
                          11: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 09:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Jan 21 09:22:59 2026 GMT
            Not After : Jan 28 09:22:59 2026 GMT
        Subject: CN=69709af3-20c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:17:86:44:9a:45:ee:7b:43:2e:79:2b:38:
                    93:bd:3b:7b:3a:f8:74:4c:66:c9:61:88:fd:de:1d:
                    f6:f6:3a:3d:74:02:ab:9f:dc:de:9c:c8:f9:d5:52:
                    07:62:5d:e5:85:77:56:db:9d:1a:4c:d4:72:ed:88:
                    3f:65:04:c4:08:ae:70:c5:73:d8:01:dc:41:86:ea:
                    f2:9a:64:55:7d:fc:23:82:7b:b9:d8:ab:ae:b9:38:
                    5d:6a:c1:f4:5c:86:ec:c1:27:c8:2c:02:99:54:69:
                    ec:14:3b:15:f8:68:bf:be:98:46:de:27:27:1a:e8:
                    2e:db:1a:d4:64:53:64:22:cf:8d:56:33:57:ad:5f:
                    44:73:a6:3a:c5:4c:2c:49:10:97:8a:29:03:09:99:
                    a5:da:a5:60:f1:d0:f0:9d:eb:b5:cc:a5:0d:39:0f:
                    55:54:6d:54:7b:ec:c3:0b:d5:3f:cd:1f:d9:b5:a6:
                    7d:59:d8:a0:11:86:3e:9b:15:ee:83:4e:2f:3a:4c:
                    1b:3a:85:90:3c:b2:4c:b6:c6:9d:95:b2:3c:13:c9:
                    a3:0c:46:51:09:7a:da:3a:7e:ad:39:43:08:80:d2:
                    25:99:7a:ba:66:15:f4:66:d7:11:e3:e9:f0:f2:f3:
                    10:11:1e:6b:18:16:65:f3:10:c7:d6:7c:e7:e2:8e:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:12:98:A4:F8:94:A1:F0:F3:56:15:41:B5:E4:35:AF:F8:9A:89:35
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:26:36:a2:f1:6e:57:76:46:2d:be:71:ec:d3:5c:09:86:
         08:0d:2f:b5:3b:28:82:97:c1:39:ff:27:3a:b5:e2:39:23:b9:
         c4:20:69:d5:00:0d:87:1e:02:86:4d:44:56:34:f9:11:78:89:
         6b:fc:d1:80:d7:01:cc:f7:2f:00:84:75:8a:47:7e:aa:09:6f:
         ea:38:76:b6:30:0c:91:c6:d3:5a:3a:5e:8a:ee:76:41:4e:32:
         91:f8:33:d6:ec:97:5a:27:04:67:bf:f0:6c:ff:cc:bc:63:54:
         d6:37:b4:32:93:1b:00:b5:7b:5d:94:a8:3e:5e:9f:8f:7e:22:
         7d:56:3c:e9:e3:00:64:1c:9c:a7:17:e0:6e:68:d7:e5:3d:ec:
         c0:17:1d:98:b1:a9:36:5e:f7:28:9e:80:14:57:72:4e:43:a5:
         10:35:27:ad:73:17:15:10:c5:bc:6e:20:c5:4d:63:8e:1a:4e:
         21:c7:87:fe:06:72:df:59:6a:d5:fe:b2:b0:b5:4f:54:23:7e:
         dc:c7:d3:e3:99:fb:c2:16:ef:ab:59:66:df:94:3c:be:cc:af:
         d3:51:1c:5e:63:6d:7a:99:15:5a:91:39:66:ef:95:95:b8:e1:
         bb:fb:9a:69:68:6c:72:1c:2a:99:df:e4:5d:45:fc:65:14:fe:
         68:8a:74:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0
RUFDQjFFN0MwHhcNMjYwMTIxMDkyMjU5WhcNMjYwMTI4MDkyMjU5WjAYMRYwFAYD
VQQDDA02OTcwOWFmMy0yMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslIXhkSaRe57Qy55KziTvTt7Ovh0TGbJYYj93h329jo9dAKrn9zenMj51VIH
Yl3lhXdW250aTNRy7Yg/ZQTECK5wxXPYAdxBhurymmRVffwjgnu52KuuuThdasH0
XIbswSfILAKZVGnsFDsV+Gi/vphG3icnGugu2xrUZFNkIs+NVjNXrV9Ec6Y6xUws
SRCXiikDCZml2qVg8dDwneu1zKUNOQ9VVG1Ue+zDC9U/zR/ZtaZ9WdigEYY+mxXu
g04vOkwbOoWQPLJMtsadlbI8E8mjDEZRCXraOn6tOUMIgNIlmXq6ZhX0ZtcR4+nw
8vMQER5rGBZl8xDH1nzn4o61CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwSmKT4
lKHw81YVQbXkNa/4mok1MB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1
MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTYxMy8zMDk5MjY2OEU1MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJX
ZV9GSGRWRm5vNjFPckxIbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4zyY2ovFuV3ZGLb5x7NNcCYYIDS+1OyiCl8E5/yc6teI5I7nEIGnV
AA2HHgKGTURWNPkReIlr/NGA1wHM9y8AhHWKR36qCW/qOHa2MAyRxtNaOl6K7nZB
TjKR+DPW7JdaJwRnv/Bs/8y8Y1TWN7QykxsAtXtdlKg+Xp+PfiJ9Vjzp4wBkHJyn
F+BuaNflPezAFx2Ysak2XvconoAUV3JOQ6UQNSetcxcVEMW8biDFTWOOGk4hx4f+
BnLfWWrV/rKwtU9UI37cx9PjmfvCFu+rWWbflDy+zK/TURxeY216mRVakTlm75WV
uOG7+5ppaGxyHCqZ3+RdRfxlFP5oinTQ
-----END CERTIFICATE-----
Generated at Thu Jan 22 02:20:06 2026 by rpki-client