This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
File:                     SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json)
Hash identifier:          DiDyB+42xWyhjqdPRumZQ3n8WDmdVIzmdWneo1k5ipc=
Subject key identifier:   E9:80:11:6F:F1:1E:33:28:5D:7A:AB:EF:A7:32:30:F1:CC:A1:5D:20
Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
Certificate issuer:       /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
Manifest number:          B9
Signing time:             Sat 17 Jan 2026 05:07:57 +0000
Manifest this update:     Sat 17 Jan 2026 05:07:57 +0000
Manifest next update:     Sat 24 Jan 2026 05:07:57 +0000
Files and hashes:         1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: E96zsSDp8fzRL1dtgmS0cDwdVJeQoqscuzPZLqlarlQ=)
                          2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
                          rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
        Validity
            Not Before: Jan 17 05:07:57 2026 GMT
            Not After : Jan 24 05:07:57 2026 GMT
        Subject: CN=696b192d-5df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:3f:b7:eb:d2:f6:2e:af:10:47:ab:d6:5d:
                    b5:c2:b4:98:38:b1:f4:5f:6d:e9:74:dd:22:82:c8:
                    d3:f9:32:1a:9b:23:cb:e5:b0:d8:47:25:a9:f1:a6:
                    90:38:af:5e:78:e2:56:58:83:53:13:58:3a:2a:e2:
                    f6:0c:b9:e4:35:96:fa:97:03:24:a0:fa:64:28:46:
                    6d:ab:9d:b8:bb:8b:89:b3:8b:43:35:04:b6:b9:bf:
                    8f:af:b1:d9:a5:99:a6:c9:29:16:3d:2b:e6:71:27:
                    22:f0:85:12:a9:7b:6c:33:7b:79:a5:13:ce:f5:5c:
                    55:38:e7:27:ae:a1:05:76:5f:ab:74:c3:84:d7:90:
                    27:6e:30:70:65:ef:02:98:93:99:42:95:02:19:47:
                    da:7c:b9:23:f1:6f:cb:b2:c2:c9:35:c9:10:58:fb:
                    be:92:45:45:81:8e:65:b1:67:a7:4a:aa:58:b6:b1:
                    73:0b:3a:5e:8d:d9:2f:a0:e8:7b:76:83:ee:bf:a8:
                    a5:fb:1a:9e:a0:4b:44:91:3f:95:92:ab:28:d9:8a:
                    c3:d5:f9:03:71:ee:b4:cc:df:67:08:a8:1c:7a:70:
                    c6:10:2d:2e:73:dd:d6:bc:64:a0:d2:94:29:f8:4b:
                    a9:9b:e3:f8:c1:1f:24:73:5a:dd:3b:a2:4b:22:53:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:11:6F:F1:1E:33:28:5D:7A:AB:EF:A7:32:30:F1:CC:A1:5D:20
            X509v3 Authority Key Identifier:
                keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:2e:6a:8c:95:45:a3:0c:e7:8d:98:e4:18:8b:bc:92:af:
         b7:24:00:2d:60:30:64:6b:07:57:89:f8:20:d5:31:04:98:da:
         27:8d:e0:ce:a8:bf:34:49:f1:32:44:eb:d8:ff:c7:bf:9d:b9:
         cf:97:3a:9d:09:11:73:8e:08:5f:0d:e4:2f:f9:87:ad:1f:41:
         41:55:76:c7:c9:a3:27:63:20:59:ab:aa:15:e5:a9:6c:9d:72:
         7f:ac:b5:ea:e8:79:df:11:c1:a8:17:89:1e:e5:77:90:09:9b:
         bb:cc:e5:64:8d:2c:cf:80:23:4c:ff:3e:e6:29:d2:d0:0d:7a:
         9a:4b:21:8f:a2:b5:59:61:b0:ce:fd:cd:2f:ff:9a:cd:b9:3b:
         ed:23:1b:83:86:12:67:da:aa:07:72:47:ff:4e:dd:3f:9c:b8:
         e3:2e:e5:8a:39:8f:9d:65:1c:60:d8:01:98:11:c7:4d:78:07:
         b7:06:19:9d:9f:46:bb:44:37:e6:a6:16:8c:1f:b7:44:77:38:
         9a:9f:8a:b6:ee:d3:7c:5a:97:f8:e2:8e:cd:e1:c0:9a:cd:30:
         30:c2:58:29:a7:11:d4:10:d3:da:44:1a:4e:d8:ec:98:ce:1f:
         cc:fe:94:12:42:34:89:eb:6f:94:28:bb:6a:e4:83:81:93:57:
         a6:44:3f:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE
QjQ4ODgyQ0EwHhcNMjYwMTE3MDUwNzU3WhcNMjYwMTI0MDUwNzU3WjAYMRYwFAYD
VQQDDA02OTZiMTkyZC01ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRY/t+vS9i6vEEer1l21wrSYOLH0X23pdN0igsjT+TIamyPL5bDYRyWp8aaQ
OK9eeOJWWINTE1g6KuL2DLnkNZb6lwMkoPpkKEZtq524u4uJs4tDNQS2ub+Pr7HZ
pZmmySkWPSvmcSci8IUSqXtsM3t5pRPO9VxVOOcnrqEFdl+rdMOE15AnbjBwZe8C
mJOZQpUCGUfafLkj8W/LssLJNckQWPu+kkVFgY5lsWenSqpYtrFzCzpejdkvoOh7
doPuv6il+xqeoEtEkT+Vkqso2YrD1fkDce60zN9nCKgcenDGEC0uc93WvGSg0pQp
+Eupm+P4wR8kc1rdO6JLIlOOBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmAEW/x
HjMoXXqr76cyMPHMoV0gMB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2
RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P
ZlMtSVJabU9MR0xiU0lnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUqy5qjJVFowznjZjkGIu8kq+3JAAtYDBkawdXifgg1TEEmNonjeDO
qL80SfEyROvY/8e/nbnPlzqdCRFzjghfDeQv+YetH0FBVXbHyaMnYyBZq6oV5als
nXJ/rLXq6HnfEcGoF4ke5XeQCZu7zOVkjSzPgCNM/z7mKdLQDXqaSyGPorVZYbDO
/c0v/5rNuTvtIxuDhhJn2qoHckf/Tt0/nLjjLuWKOY+dZRxg2AGYEcdNeAe3Bhmd
n0a7RDfmphaMH7dEdzian4q27tN8Wpf44o7N4cCazTAwwlgppxHUENPaRBpO2OyY
zh/M/pQSQjSJ62+UKLtq5IOBk1emRD8X
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:21 2026 by rpki-client