This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          BYMcJR5fLvs3pu7pebgLLo4TMr2Hn2TQrahr3iZswL4=
Subject key identifier:   FD:9A:2D:70:72:BD:C6:4E:F4:67:F0:CB:21:9F:AA:5A:F8:71:10:8A
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          D9
Signing time:             Tue 27 Jan 2026 04:57:29 +0000
Manifest this update:     Tue 27 Jan 2026 04:57:28 +0000
Manifest next update:     Tue 03 Feb 2026 04:57:28 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: NLIPbO9qSM7nyMWoMxn9RKXi/FNCGINYgH2OGs1BRBg=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: VWuV3WTDHbFhKXSmycUNk+HMKCNIe035E4JGd1F1GZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Jan 27 04:57:28 2026 GMT
            Not After : Feb  3 04:57:28 2026 GMT
        Subject: CN=697845b9-d8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:83:8f:ab:61:5c:67:ac:84:3e:f5:c0:38:
                    2c:47:57:04:ec:48:0d:2f:41:1e:15:e2:6f:02:78:
                    65:b4:3a:7a:e7:37:66:27:3f:19:fa:d4:f6:34:40:
                    fe:b2:3d:25:11:93:86:6a:5c:95:73:fb:28:8c:19:
                    65:6a:aa:21:3f:79:d4:13:bc:80:7e:37:f3:1d:aa:
                    cd:25:3e:e5:8f:52:7d:b4:a6:9a:21:cf:e9:3c:2a:
                    ce:6d:1f:0c:96:8d:a0:bf:ba:33:8a:85:b3:5a:43:
                    df:01:4b:a7:d4:98:8e:22:27:8e:f4:e5:6a:24:9c:
                    75:6c:e6:35:73:e4:a7:b5:a8:f7:2d:8d:b3:59:1e:
                    1c:49:0b:42:a4:46:aa:a2:d4:54:58:c0:53:cd:ab:
                    e0:87:a0:14:fc:e1:4f:fd:96:a7:c8:10:0d:59:fa:
                    93:80:69:e8:ba:1b:90:f0:95:24:08:15:67:40:b1:
                    91:3c:f0:ee:5f:37:99:ae:3f:48:3e:c7:f7:e6:cc:
                    bb:7e:48:5f:34:5a:d8:94:0a:cb:f8:20:7b:b0:ad:
                    a0:ed:30:5b:e9:f4:62:2c:91:f7:d8:7b:ad:70:9c:
                    91:54:9f:a4:0c:f3:4e:14:e0:81:14:0c:7d:df:2d:
                    45:be:d5:80:de:a4:30:04:79:6b:01:f7:25:36:a1:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9A:2D:70:72:BD:C6:4E:F4:67:F0:CB:21:9F:AA:5A:F8:71:10:8A
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:b0:f3:78:2b:d4:04:85:c5:d8:4d:e2:c8:95:b7:c0:c7:
         9d:e6:6b:21:c7:1e:60:63:23:87:8d:f6:19:9e:b4:14:39:51:
         6c:c0:00:93:48:34:53:5d:c5:96:7d:7e:92:82:00:31:6b:f4:
         ac:b7:b6:d2:c9:3c:58:70:bf:2b:8a:73:4f:4b:bf:fa:c3:8c:
         c3:04:b5:d4:0d:a6:ac:19:86:b2:d6:5c:4c:e1:80:dc:95:44:
         b4:ed:02:75:d0:8e:7b:e9:1a:eb:ef:3a:01:28:9d:c7:c7:32:
         1a:e2:94:bb:53:78:21:47:c7:31:b6:33:36:f6:3e:31:8b:20:
         f3:36:69:a6:fc:b2:c9:7c:3a:0e:4f:be:65:b3:76:ea:ab:44:
         9e:af:7e:fe:29:04:ad:37:bf:d6:88:98:2b:83:32:30:80:1a:
         a5:58:aa:08:ce:20:6f:4f:b8:50:a5:91:75:6d:57:9a:b7:97:
         ef:3f:08:b3:51:2a:52:0c:51:fb:7c:71:49:30:6c:17:9c:2b:
         6f:c1:bb:e6:de:31:5c:76:71:1e:b8:e6:f2:34:3c:78:c3:57:
         54:e9:46:82:ee:a0:f2:da:8f:24:11:0f:4b:c1:5e:ad:1d:e3:
         96:fa:fa:4d:1c:1b:8e:3b:2a:02:f6:1d:cb:9c:07:fb:27:da:
         a0:8a:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 01:21:56 2026 by rpki-client