This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File:                     sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier:          RVNM6edWnT24IYD/4dEgIaXQVT0+3nyHXNPvSAKxDy8=
Subject key identifier:   E0:01:48:3D:73:07:11:84:E4:95:F6:80:7B:BD:F4:B1:4E:26:94:7A
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer:       /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial:       0312
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number:          0303
Signing time:             Sat 17 Jan 2026 00:19:37 +0000
Manifest this update:     Sat 17 Jan 2026 00:19:36 +0000
Manifest next update:     Sat 24 Jan 2026 00:19:36 +0000
Files and hashes:         1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: plrHaFlvDFXIVYBGMQ+pHCrBqAsW+y0G8mgWxht2Mqw=)
                          2: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: J6hrcFh7WhWZaOUjv//ch7y6xSAesYjPuueLW+CqB+U=)
                          3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
                          rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
        Validity
            Not Before: Jan 17 00:19:36 2026 GMT
            Not After : Jan 24 00:19:36 2026 GMT
        Subject: CN=696ad599-d123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:ab:32:6e:13:81:61:11:35:41:f8:6a:be:
                    d6:5b:4b:6a:93:1f:4b:de:c5:0a:b4:4d:8f:f9:4c:
                    51:dc:33:20:72:e5:1b:d6:be:92:36:78:11:24:9d:
                    ba:de:e0:b1:47:60:79:02:7f:2e:bd:c8:d2:8a:f6:
                    45:05:dd:e8:b1:f3:47:dd:f7:df:a4:f4:35:d6:72:
                    af:8b:63:d1:66:7c:d8:65:cf:28:6a:ea:a0:d1:68:
                    80:12:a3:8e:13:70:9d:d9:cc:e4:b4:bb:3d:53:6c:
                    d3:74:a9:08:26:82:e7:48:3a:58:e8:8a:91:4e:0a:
                    02:66:4c:ba:ae:ee:65:a7:0f:92:60:53:b0:ba:13:
                    48:36:80:53:d0:d5:ec:dd:eb:7b:ca:95:50:b0:af:
                    a6:f5:55:fd:97:66:7b:dd:4c:70:5d:c5:06:25:1a:
                    1d:1f:62:4b:16:39:32:98:07:01:35:93:2d:70:42:
                    0f:bf:0d:fb:54:c9:2b:29:bc:cc:bd:cb:ba:ed:d0:
                    d1:74:ec:47:d3:2a:04:d8:cd:d1:0c:8b:7d:68:8e:
                    6c:37:3d:ef:98:30:c8:99:97:e9:5d:fd:6a:20:46:
                    54:2f:34:c8:06:2f:58:28:b8:ea:87:ba:5e:22:66:
                    c8:0d:51:8b:ea:22:48:cc:a4:94:67:49:89:90:1d:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:48:3D:73:07:11:84:E4:95:F6:80:7B:BD:F4:B1:4E:26:94:7A
            X509v3 Authority Key Identifier:
                keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:37:62:1a:07:fd:6d:01:22:d7:a9:ab:0f:8c:b6:54:a3:
         11:a9:93:7c:62:e4:54:ec:b6:61:a0:6a:88:7c:1e:be:86:bf:
         bc:d8:3b:5b:b6:53:ae:a3:4a:8d:06:e5:0c:5c:6f:7f:51:75:
         8b:6a:43:84:e1:a2:ca:4f:2a:80:40:e3:c9:94:a0:04:4c:72:
         4a:04:ec:24:61:96:58:ab:80:4c:e0:40:26:d4:1e:c2:fd:ec:
         ef:56:9f:45:e6:5f:2e:d0:4e:4f:a2:5d:6f:d1:26:0a:b0:37:
         a0:b9:df:de:e8:c8:80:bd:e9:07:af:da:18:c5:b8:48:c6:0a:
         24:eb:eb:39:c3:5a:ee:fb:14:1c:dc:ca:ec:a4:b1:2a:2c:a7:
         a1:95:0f:a2:e4:5b:79:28:67:a6:e1:c0:c0:16:9c:fe:2f:15:
         7f:c3:5c:e0:ef:32:94:35:96:7a:42:29:b6:22:8c:56:1b:07:
         81:cc:83:60:a3:44:75:33:61:b1:2a:d2:7e:c2:71:db:e8:65:
         be:d6:4f:ed:b0:0f:0f:72:d6:8b:3f:aa:4f:62:67:6c:c6:3c:
         33:6a:6b:28:07:ee:1d:d1:fa:47:8e:87:4f:38:c6:f3:68:74:
         32:77:26:ba:ad:2c:21:19:6b:63:d2:9f:10:b3:02:48:4f:bb:
         45:61:41:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw
RjdBOTc3ODkwHhcNMjYwMTE3MDAxOTM2WhcNMjYwMTI0MDAxOTM2WjAYMRYwFAYD
VQQDDA02OTZhZDU5OS1kMTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtY+rMm4TgWERNUH4ar7WW0tqkx9L3sUKtE2P+UxR3DMgcuUb1r6SNngRJJ26
3uCxR2B5An8uvcjSivZFBd3osfNH3fffpPQ11nKvi2PRZnzYZc8oauqg0WiAEqOO
E3Cd2czktLs9U2zTdKkIJoLnSDpY6IqRTgoCZky6ru5lpw+SYFOwuhNINoBT0NXs
3et7ypVQsK+m9VX9l2Z73UxwXcUGJRodH2JLFjkymAcBNZMtcEIPvw37VMkrKbzM
vcu67dDRdOxH0yoE2M3RDIt9aI5sNz3vmDDImZfpXf1qIEZULzTIBi9YKLjqh7pe
ImbIDVGL6iJIzKSUZ0mJkB2/OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOABSD1z
BxGE5JX2gHu99LFOJpR6MB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5
OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F
ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpRTdiGgf9bQEi16mrD4y2VKMRqZN8YuRU7LZhoGqIfB6+hr+82Dtb
tlOuo0qNBuUMXG9/UXWLakOE4aLKTyqAQOPJlKAETHJKBOwkYZZYq4BM4EAm1B7C
/ezvVp9F5l8u0E5Pol1v0SYKsDegud/e6MiAvekHr9oYxbhIxgok6+s5w1ru+xQc
3MrspLEqLKehlQ+i5Ft5KGem4cDAFpz+LxV/w1zg7zKUNZZ6Qim2IoxWGweBzINg
o0R1M2GxKtJ+wnHb6GW+1k/tsA8PctaLP6pPYmdsxjwzamsoB+4d0fpHjodPOMbz
aHQydya6rSwhGWtj0p8QswJIT7tFYUEf
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:13 2026 by rpki-client