This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
File:                     dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json)
Hash identifier:          s/3b7Lsk6PG5S+bk2MvsbNvCvV3pYwjD3Jq/h4ztUSA=
Subject key identifier:   8C:28:16:3C:82:9E:F0:1F:6B:22:90:F8:8C:91:63:F6:20:11:7F:EC
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       084E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
Manifest number:          080D
Signing time:             Sat 24 Jan 2026 20:26:43 +0000
Manifest this update:     Sat 24 Jan 2026 20:26:43 +0000
Manifest next update:     Sat 31 Jan 2026 20:26:43 +0000
Files and hashes:         1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: avLoeaWou6m96ugCo1s54Zzy31JdR4afqEwHJwt5x00=)
                          2: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: bczxjt2FwG7ZvqXhUNRx4J14OqU7vScZjaB3EzaWWXs=)
                          3: A98668464EEB11EFB3305C85C4F9AE02.roa (hash: tWiWEgQiTh2MC49VXb2kimhBotEglhYAfcGxfEIxWjU=)
                          4: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: eUQRjtj0tF+4ReuUVl4yzwgyQ7i/OO1b+JP4gilLkCk=)
                          5: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: iqYDXGJezvbHsoQI5LOs/HpZOp9DdP6shWT091zXI/w=)
                          6: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: Ok9YVh7iJVfq5jAi1dUk84sBA5IsYOWabJTj7XjuXII=)
                          7: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: v6e1A53lOs4ttAFgNyyjZoCXEPeOi0GiecLMqc/MAn8=)
                          8: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: 5isKKj264kPgvcdF8hBz70YJR1jtU24tZnWCibLQbs8=)
                          9: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (hash: b1nalvR/eNXqTum+cSymzCLGQcxE1TXmTmkjmB0g0BY=)
                          10: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: LsbxGQh0J4jRRvHUOzGfhoQnBu+EqX3+bxB0XHIwKEg=)
                          11: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: ZDF/6Xw9ZE7b2+OVuWk9y1I5UDHjuJdR4+iTcEafgmY=)
                          12: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: BL4tECo9e+3ufRZK8OCt2j/Uj2lw36IymgWS2+ZdHFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126 (0x84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Jan 24 20:26:43 2026 GMT
            Not After : Jan 31 20:26:43 2026 GMT
        Subject: CN=69752b03-0018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:60:2c:99:a5:cf:4b:67:84:a5:de:21:b0:
                    33:8f:04:23:0d:9d:ad:2d:01:62:13:b2:6f:74:c5:
                    6f:92:1e:ce:c0:5d:02:cd:66:41:98:25:9a:c5:9e:
                    4b:33:e1:69:ac:c3:f8:9e:74:cf:46:7a:a3:8f:94:
                    39:8e:c8:44:10:5f:11:02:28:42:2a:8a:2b:83:3c:
                    f1:da:f4:a5:a7:1f:33:b5:04:eb:eb:cf:33:fe:02:
                    78:a7:e0:73:02:cf:6a:47:a0:b5:f6:58:2f:25:c0:
                    83:66:97:dd:0b:d6:1e:d7:93:2f:34:19:c2:77:eb:
                    29:5f:91:09:96:40:b3:49:61:89:f8:fe:67:b0:e9:
                    1e:40:d2:ed:cb:c2:c6:7c:ca:f1:8c:df:f2:8f:28:
                    23:2e:0b:08:cc:44:a7:ce:37:33:c0:7f:50:84:e1:
                    eb:4a:da:57:aa:85:f2:37:fc:58:95:c5:4a:3d:a5:
                    58:a9:02:cd:b8:2e:28:a6:0b:ad:6d:5c:78:52:e1:
                    c6:07:03:12:aa:e7:01:5d:b3:dc:eb:c4:6f:65:ac:
                    2e:ac:df:88:d6:10:e4:17:d9:99:73:24:2b:df:99:
                    85:3d:87:b1:fb:98:9e:74:83:25:df:3a:e7:4c:f6:
                    7b:5e:89:b1:21:92:f8:a3:5c:4d:bd:3c:8a:a3:23:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:16:3C:82:9E:F0:1F:6B:22:90:F8:8C:91:63:F6:20:11:7F:EC
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:8c:07:be:80:2c:e9:28:9e:0b:80:10:ce:66:96:6f:85:
         24:66:23:48:67:81:b8:16:99:c7:c2:1b:2d:f5:46:38:5e:1e:
         28:0f:a8:db:96:cd:be:96:23:db:09:84:a0:bb:3f:53:8d:c3:
         a0:76:7f:5c:b4:37:69:e3:e5:12:52:b8:f8:b0:3d:06:29:d1:
         33:7c:68:ed:93:25:46:42:1b:d7:f0:2c:8a:df:5c:fb:f1:8a:
         2c:de:11:64:e5:82:da:f8:b9:9b:69:a7:1e:57:90:97:4e:ae:
         70:f5:0d:dc:1d:23:d9:a3:65:b3:4c:8c:2c:48:25:8b:64:70:
         c1:56:59:b5:d2:0a:25:52:8f:e8:de:65:54:ea:7c:9f:8a:5a:
         98:c7:7c:3b:df:27:39:7d:b0:6b:0e:9e:db:12:8a:f8:e8:96:
         fa:9d:a7:81:9c:c0:86:6d:e7:bf:bb:58:5a:d7:03:8d:ec:62:
         31:4f:97:a6:65:4a:c2:68:61:a9:0e:f6:ed:bc:62:17:86:64:
         e5:5a:98:e1:5b:9e:9e:90:7f:12:38:6f:2b:28:64:a1:a8:41:
         91:bf:ec:6a:b8:7f:a9:5e:0e:80:5a:7c:d6:10:42:e1:91:db:
         48:81:8f:68:a2:fd:13:f5:a6:cf:6d:14:ff:2d:3e:cd:95:52:
         42:b2:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:22 2026 by rpki-client