This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
File:                     lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json)
Hash identifier:          02adx3tGkzTRlZeAcnJb+Axuy+hCLCcFjtQSOVssWEc=
Subject key identifier:   9E:05:68:CC:2E:73:0A:97:5D:13:A8:0C:6F:AB:E9:A4:33:F0:8E:17
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Certificate issuer:       /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
Manifest number:          02C5
Signing time:             Sun 25 Jan 2026 00:35:05 +0000
Manifest this update:     Sun 25 Jan 2026 00:35:05 +0000
Manifest next update:     Sun 01 Feb 2026 00:35:05 +0000
Files and hashes:         1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: rTw9rx3CJFLE5jiWNszWKfhJBP1X2pRN6LfsZa/fo3U=)
                          2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: 27aLcYczZ5MYFXDnhdewNPk3kbRzrioX5es/1Wn4iNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
                          rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
        Validity
            Not Before: Jan 25 00:35:05 2026 GMT
            Not After : Feb  1 00:35:05 2026 GMT
        Subject: CN=69756539-6318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:ad:50:7b:e9:2a:ea:34:ab:cc:52:57:37:
                    04:59:98:57:1b:a8:cb:b0:4a:9b:a4:aa:12:d9:d5:
                    cc:03:a7:6d:8b:2d:76:17:38:a2:80:39:92:2e:45:
                    f1:d7:e7:b1:db:2b:f6:3a:c7:be:48:9d:44:cc:7b:
                    d9:fd:a9:fc:dc:ce:49:a2:dc:1a:8b:5c:4f:27:a0:
                    58:e5:e0:54:64:d8:cf:1d:dd:4f:b3:93:58:c5:1e:
                    3c:cd:08:ec:12:3c:8c:e2:8c:c5:c0:8d:31:08:e1:
                    bc:f5:df:c5:0d:84:62:36:47:f0:7b:77:ca:ba:ce:
                    4b:e7:4e:2a:8e:35:a3:27:4a:a0:48:25:07:4f:e1:
                    e5:97:6b:2a:49:f1:61:c0:a0:9f:67:5d:a8:33:86:
                    b0:06:8e:b2:e4:69:a7:69:9f:15:b7:02:16:3d:b2:
                    6f:19:ba:ae:c0:70:a2:ef:4c:70:cd:1b:5e:d4:1b:
                    51:ad:09:dc:f7:97:d6:2a:58:9e:3a:55:06:59:51:
                    68:45:1f:02:c0:d8:56:0b:31:d4:2a:f5:bf:64:d3:
                    b7:6f:a8:4f:0c:df:2d:30:5a:36:d9:78:31:7b:9c:
                    58:52:76:7b:e2:d7:c7:ca:8a:e3:f4:34:0a:40:71:
                    3b:98:25:c9:67:a0:d3:27:d0:05:ec:7d:e1:f6:52:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:68:CC:2E:73:0A:97:5D:13:A8:0C:6F:AB:E9:A4:33:F0:8E:17
            X509v3 Authority Key Identifier:
                keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:75:ac:dd:4d:ea:ff:06:07:75:86:47:25:4d:91:e3:58:
         31:63:58:bf:9a:aa:47:81:58:43:99:c5:92:6a:55:f1:59:ee:
         4f:0c:54:64:fb:42:6b:3b:7f:c5:2f:2f:1f:89:f0:58:9f:c1:
         05:38:11:d1:0a:82:6f:7c:6f:77:c5:4e:b2:62:a3:b6:f0:00:
         09:8f:c9:46:79:fa:e6:e4:b7:65:8f:85:01:53:f4:3b:0a:f0:
         75:6d:9d:bb:d6:e4:35:f7:1b:77:b7:1a:e8:af:7c:c2:ec:7b:
         a9:8c:2e:05:f1:16:80:74:29:d5:0b:25:23:b9:f8:e5:d5:f3:
         b2:f1:f0:7b:27:13:df:0a:54:7d:d3:53:8a:91:6a:48:b4:37:
         d9:c1:37:f6:a2:09:83:14:0b:47:1a:c5:0c:36:f7:03:d4:62:
         d1:4f:09:60:99:e2:4a:ec:f6:87:a6:93:e0:b0:53:85:4c:44:
         b8:4d:dc:83:48:c5:d9:d6:1e:09:a2:25:c5:e3:d6:7e:1f:14:
         ce:06:f5:9b:ae:76:b5:e9:7a:e0:df:b9:50:66:33:4b:ac:09:
         b6:61:46:e3:12:77:c0:86:60:a2:f7:a6:da:1a:05:d5:ef:2b:
         fd:10:48:01:7a:e0:7e:ff:dd:16:2f:f6:2b:e0:14:1d:13:fd:
         ab:48:12:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:39 2026 by rpki-client