This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
File:                     doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json)
Hash identifier:          sHQfeEj01jL36cXgezFINF4YHUpOxKouM0DHeuZ7fCg=
Subject key identifier:   9F:38:4C:C5:3C:97:19:E1:F0:A2:A9:61:42:3F:04:49:C5:2C:32:D0
Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
Certificate issuer:       /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
Manifest number:          A5
Signing time:             Sun 25 Jan 2026 05:32:52 +0000
Manifest this update:     Sun 25 Jan 2026 05:32:52 +0000
Manifest next update:     Sun 01 Feb 2026 05:32:52 +0000
Files and hashes:         1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: gY2GFac/mSRBN/xe+cTY/s8qV8iIj8AXBZyFLW+IfrA=)
                          2: 069483747E7F11F091356E86C4F9AE02.roa (hash: Yrv7o+i08VMkPfTsO9wW2G4Ntl0tTtmIsoOx+zJY4Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
                          rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272
        Validity
            Not Before: Jan 25 05:32:52 2026 GMT
            Not After : Feb  1 05:32:52 2026 GMT
        Subject: CN=6975ab04-ad8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:b7:1b:bd:77:1a:42:d3:ab:c1:75:03:32:
                    a2:97:3c:29:10:ff:6d:4f:7c:0b:cf:17:82:8a:12:
                    06:77:2e:92:e4:b5:53:d5:43:0c:61:dd:aa:b4:67:
                    8e:b9:2d:50:1a:c6:4f:7a:4a:3e:a0:f8:31:c9:7d:
                    71:39:cb:f9:b5:d6:b0:90:57:68:fc:33:ad:43:4c:
                    5a:b6:37:ed:09:49:30:80:3d:88:0e:72:7d:af:fb:
                    8b:a1:c6:25:9c:1d:5f:60:cf:5d:92:0f:66:7b:ef:
                    bd:3f:65:3b:5f:85:01:b1:eb:db:bf:7a:0b:bc:13:
                    50:7e:13:9f:78:e9:3a:7a:93:b0:69:d2:96:76:73:
                    ec:da:69:13:1a:bd:90:ea:4f:09:71:35:a9:a6:ef:
                    08:e5:4e:a3:10:4f:2b:52:a6:3d:e8:e0:ab:96:45:
                    2c:79:4d:16:b0:53:9b:b8:5b:a6:6a:56:59:e5:69:
                    b4:20:cf:96:9b:3a:83:c5:d6:43:16:f3:08:4a:1f:
                    b9:50:13:54:ae:ea:1e:4d:06:a4:83:2d:94:b7:01:
                    41:81:bd:a0:31:3f:d7:20:5f:e5:43:8e:27:35:50:
                    43:6d:61:8c:b7:d5:54:1f:64:71:1a:92:22:84:09:
                    4c:31:67:8c:5b:7d:66:87:b9:2f:9d:7f:b0:3e:a4:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:38:4C:C5:3C:97:19:E1:F0:A2:A9:61:42:3F:04:49:C5:2C:32:D0
            X509v3 Authority Key Identifier:
                keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:99:e5:e6:71:af:ba:ed:03:98:d2:a4:4e:c8:0c:02:15:
         ec:c2:57:cd:c7:83:ea:2e:de:6e:43:bd:04:54:c1:f2:64:62:
         df:aa:fb:66:1a:0f:f5:5f:32:00:04:c6:d4:47:be:e5:bf:52:
         48:24:24:0c:44:15:04:96:94:1c:82:ed:01:d3:be:ed:96:cb:
         0b:62:7e:21:b0:89:0c:25:2d:a7:35:02:68:38:3c:b2:6f:f6:
         31:bf:2c:33:81:14:4c:0f:4c:7a:55:e6:80:cd:99:d8:73:d3:
         84:41:90:01:53:c9:bf:0e:ad:a3:23:c1:43:de:0b:9c:67:14:
         bc:c6:24:f7:d3:63:fc:3a:22:5b:73:a1:06:64:f9:cc:46:32:
         6c:01:b8:23:fe:99:46:82:cf:a0:da:f2:32:96:02:70:c0:51:
         15:1c:2a:54:64:fa:93:2b:33:7b:7f:d6:96:28:a0:c4:73:d0:
         96:49:d6:ae:b0:2b:02:1f:58:72:b7:b2:c6:64:3a:f9:ea:b7:
         74:79:ab:0b:db:ca:96:fe:a9:cf:02:86:aa:26:ae:11:e2:e3:
         e1:7f:7f:e0:f3:04:cf:7f:fe:ae:cd:23:65:7e:80:f3:26:1c:
         60:8f:15:81:4c:c5:1b:21:48:41:31:7b:f5:c4:56:51:4c:4d:
         21:23:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:11 2026 by rpki-client